
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json)
Hash identifier: gECkxWHTrT9I8GKGQCSyJAZXQcdAA13NKa9FXBBAlsg=
Subject key identifier: CD:CB:EF:2A:1F:DB:00:4C:A3:E0:7E:2B:DD:F1:3C:15:FB:8C:6C:11
Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Certificate serial: 10F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
Manifest number: 10EC
Signing time: Sat 04 Apr 2026 17:10:47 +0000
Manifest this update: Sat 04 Apr 2026 17:10:46 +0000
Manifest next update: Sat 11 Apr 2026 17:10:46 +0000
Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: Hs64tcbNExxq6IomiY/5FT7JE9VkiRriR3LFylTaj50=)
2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: 8aCMHKssPdN319TEwBaL3NJec+4ceW9OeNk+s6B7p4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl
rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4341 (0x10f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Validity
Not Before: Apr 4 17:10:46 2026 GMT
Not After : Apr 11 17:10:46 2026 GMT
Subject: CN=69d14617-00ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fa:27:31:ef:16:1d:e5:7d:df:bd:09:31:a1:
8e:39:67:36:fd:52:0a:31:e2:16:9b:fc:1b:bc:ae:
1c:ed:3b:a6:e7:e1:1b:52:f9:d1:5c:4e:c9:4f:9a:
a1:50:5d:af:9c:5d:27:90:39:2e:c5:b4:cc:97:a5:
52:0e:3b:bb:c5:2b:3d:66:4f:a7:34:02:3b:b2:4e:
90:63:d2:78:86:f0:fd:25:44:13:79:94:19:13:d7:
9d:09:5b:ff:c9:f1:29:79:b6:4c:7b:be:c6:0e:69:
05:3e:81:c7:78:ad:d9:43:2e:80:87:97:b8:a1:2b:
1c:62:ba:67:26:86:90:c7:bf:d7:09:91:09:5d:2a:
34:8c:8c:8c:89:dc:27:fb:b1:1c:13:90:bd:de:7e:
e8:00:e7:2b:5b:b6:6a:1b:97:38:b2:9b:05:bb:1c:
10:d9:e1:19:c3:98:c9:26:e1:6b:8e:e5:c5:6d:62:
02:12:0b:34:91:82:3b:81:7c:15:63:a2:81:9d:25:
9c:5f:19:47:39:64:e3:b5:07:64:2f:8f:de:15:e5:
02:7b:c3:a2:24:82:15:63:ca:ce:aa:3a:02:13:c9:
d0:26:a7:7b:2b:92:57:e4:7c:05:97:24:cb:88:5f:
2d:41:71:0c:37:fa:e2:76:f6:34:ee:f9:18:9a:7a:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CB:EF:2A:1F:DB:00:4C:A3:E0:7E:2B:DD:F1:3C:15:FB:8C:6C:11
X509v3 Authority Key Identifier:
keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bc:72:b4:57:9e:cb:f6:02:50:1e:25:4b:e5:af:ff:32:73:
a2:3e:c9:5a:2b:88:a7:ae:6a:f9:23:69:f7:66:5a:a5:f7:fe:
8c:08:a8:71:0c:9e:eb:46:64:03:e5:3c:69:0f:3e:9f:ee:bf:
d8:0e:ad:ae:99:2e:c9:12:da:0e:c5:79:0e:b7:e7:bd:f8:70:
ae:7c:bd:f0:33:4e:bd:e1:79:03:7c:5f:ba:c9:9a:95:eb:d8:
63:a6:41:14:81:70:3e:78:8f:4e:e3:1b:2b:a2:f8:7d:5e:73:
01:b2:8d:1e:af:63:7e:16:cf:41:45:23:25:5a:d1:33:fd:f0:
66:f5:c9:15:2f:1e:f0:59:34:ca:db:fd:fa:e4:1b:4d:2a:cd:
ce:d8:0c:e0:67:07:0c:c8:3a:e9:60:14:94:59:6b:ec:20:42:
f8:25:e6:fc:e2:18:5d:e9:84:95:a2:ba:45:24:3a:c2:e9:a3:
26:76:0d:d9:33:db:25:32:56:f1:aa:b6:ff:f3:dd:86:30:4a:
91:90:ea:48:7c:fd:2d:a2:46:0b:19:ba:4b:2a:6d:81:45:05:
c5:d7:d9:5d:1f:e8:82:d5:9e:ad:30:f9:26:6e:8e:d6:52:81:
ef:04:54:02:c1:d9:9c:3a:18:67:ff:d1:12:6e:c5:a6:3f:40:
14:bd:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:17 2026 by rpki-client