
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json)
Hash identifier: tK41SIte90lHsNsCQWaBBa2MnDWfGtvlTVyJtDQZb+Y=
Subject key identifier: E4:CE:5C:9B:DD:C5:48:F4:29:D4:43:46:42:57:31:DF:7A:DF:EC:80
Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
Manifest number: 01C4
Signing time: Sun 05 Apr 2026 03:29:02 +0000
Manifest this update: Sun 05 Apr 2026 03:29:01 +0000
Manifest next update: Sun 12 Apr 2026 03:29:01 +0000
Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: /WQv5Yn48UsFe8Y0jke2VWDLUFmkBfebAA8fHaVRP80=)
2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: arCyI6WOk9LgFnQELoYxClkR3V434NgEayNtabuOGMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl
rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Validity
Not Before: Apr 5 03:29:01 2026 GMT
Not After : Apr 12 03:29:01 2026 GMT
Subject: CN=69d1d6fe-3072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:f7:bb:e5:a4:68:2e:3e:f3:09:37:57:1c:
61:e7:8c:fd:3a:a5:c7:5c:40:d1:f8:f0:70:ef:ef:
81:00:82:1d:a7:61:9a:f0:39:e3:6a:fd:11:09:57:
45:1d:42:fa:9d:78:2c:f2:b4:22:a2:28:e7:7a:c7:
4c:ac:51:80:b5:a8:ad:c4:f8:46:a7:8d:81:23:81:
01:b6:42:b6:d8:06:b7:6a:a4:3d:ae:b5:30:a4:27:
2e:c6:b3:04:af:c3:97:e1:c5:d9:75:82:a9:a7:8c:
12:8c:20:a9:52:e6:f5:1a:42:18:24:64:0a:8b:4e:
d0:b5:40:1e:6a:99:9b:6e:13:46:2e:ee:d7:22:ae:
7a:7b:69:5b:42:59:d6:ec:81:cd:97:7e:2c:32:96:
9d:d8:de:5c:01:b1:e2:d5:16:de:aa:65:d6:1c:fa:
d2:dc:1c:a2:cc:93:6e:79:c9:fb:df:17:e0:54:5e:
5f:c3:87:e9:75:c5:1a:a7:50:07:28:62:78:0d:97:
87:ed:cd:27:9c:92:9a:6f:98:0c:16:c8:8b:27:69:
2a:64:c3:c8:55:1f:a7:71:b4:c0:10:ed:33:55:d5:
8d:67:a8:ff:f3:c2:ac:c1:02:91:b2:1b:ff:41:c3:
29:5c:30:c5:25:5d:5f:ff:a3:54:15:4c:34:8a:ff:
13:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CE:5C:9B:DD:C5:48:F4:29:D4:43:46:42:57:31:DF:7A:DF:EC:80
X509v3 Authority Key Identifier:
keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:e7:6f:4e:f5:fc:66:3c:bc:7e:58:25:38:1c:a2:24:df:
a1:9c:75:18:8e:41:54:1c:81:05:c0:a4:a6:30:24:92:29:37:
08:f3:62:c1:4e:b4:96:3d:5a:d0:ed:30:a3:5b:9f:98:2e:61:
2e:f3:19:e1:a9:c2:2c:c2:d7:e9:4d:d7:de:e3:f7:15:95:42:
a3:8b:cb:82:2c:b8:bb:aa:eb:60:b8:cb:15:43:6a:d5:dd:af:
d3:d0:cd:51:36:af:aa:12:64:40:dd:22:da:bb:35:13:8a:e6:
80:ce:43:28:4c:b6:91:53:20:8a:9d:cf:43:be:f8:ed:26:45:
14:19:f9:38:4f:d4:e9:50:01:46:a3:a4:8f:6f:5b:7a:bb:8b:
df:54:e4:6f:e3:7a:68:c3:4d:a9:55:1f:46:61:94:31:cc:db:
4d:11:0f:fc:ee:78:ee:a3:f1:2f:37:87:fc:be:02:af:27:53:
fb:21:74:c9:e7:00:12:3e:14:ce:18:dc:67:cb:5d:1c:50:ae:
ff:cd:95:ce:55:f7:13:1d:a9:31:6e:a6:2f:72:86:95:2d:b0:
ec:55:d4:77:e7:b8:b1:b7:5d:70:47:80:05:86:18:48:68:bd:
cd:7a:92:e2:91:e9:1e:e2:c7:16:4b:40:57:ef:21:aa:1d:0c:
92:3c:0d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:03 2026 by rpki-client