
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json)
Hash identifier: cE2E9+uUhku6jvtagamNi0pC+zMy675VXWZpnBPvPaw=
Subject key identifier: 9C:B6:95:9F:97:57:47:A8:BE:8D:F0:51:C6:01:CE:28:62:A5:70:DB
Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Certificate serial: 0CF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
Manifest number: 0CE5
Signing time: Sat 04 Apr 2026 18:07:31 +0000
Manifest this update: Sat 04 Apr 2026 18:07:31 +0000
Manifest next update: Sat 11 Apr 2026 18:07:31 +0000
Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: FmG2vcXULpoQqhDhaQDB6BEmnWgid8gOoJZkkJfYSOM=)
2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: 1fv3/pXl5lcDYoLzTz47KptyfQ/fj025AndBgH7ATRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3317 (0xcf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Validity
Not Before: Apr 4 18:07:31 2026 GMT
Not After : Apr 11 18:07:31 2026 GMT
Subject: CN=69d15363-0d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:8a:0b:bc:f7:63:1a:fa:0e:f4:ec:e3:ed:
16:b9:a1:14:38:c7:71:e7:45:62:d6:90:ac:99:7c:
17:2d:60:0d:2f:45:e9:92:20:c9:c7:ab:a9:60:eb:
60:04:ff:91:3a:be:66:42:3b:d9:81:78:73:b0:9f:
e2:76:d7:9f:60:a1:df:1a:73:ca:df:4a:7c:dd:4e:
82:0a:ff:ba:92:85:f2:f9:53:66:ad:37:ba:47:c2:
2c:43:af:8f:43:05:8e:6a:de:76:61:17:f0:54:3e:
f9:20:30:d3:1f:fa:b8:23:90:82:92:85:59:fa:1f:
59:f2:53:ff:53:f8:cd:c7:a6:fc:c1:50:8c:8d:90:
84:28:4e:8a:61:98:5f:ba:d8:fc:60:bd:73:41:92:
44:ab:86:cd:e2:46:90:f9:7d:a3:05:28:f3:21:54:
6a:49:7d:a4:33:ec:0a:80:a8:86:48:12:b8:df:82:
c2:71:bb:b2:1d:17:ea:3f:61:eb:06:d4:4c:fe:3d:
d5:7e:54:19:44:c0:2c:f7:aa:94:dd:ff:d9:ea:4f:
5f:02:30:35:4f:3b:8f:4d:54:5b:7b:0f:34:96:cb:
f6:f2:e4:b4:6b:da:13:fa:f8:60:cf:dd:26:4f:50:
57:67:8e:aa:66:0a:28:2e:fc:16:b7:c5:c1:b4:9c:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B6:95:9F:97:57:47:A8:BE:8D:F0:51:C6:01:CE:28:62:A5:70:DB
X509v3 Authority Key Identifier:
keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:da:9b:42:1e:03:78:b1:11:5e:78:19:7b:15:ec:0a:81:b3:
0f:e0:a1:5a:77:78:44:9f:8e:f8:ff:79:16:a7:aa:43:f9:5e:
95:fd:e5:91:25:ba:13:6d:fb:51:50:f5:76:ba:38:14:3a:46:
a2:02:6c:76:62:97:0d:ce:3c:a2:a2:74:db:6f:76:5d:fe:20:
85:86:46:91:03:5b:ad:62:2e:b4:1a:3d:d1:94:1b:45:01:8c:
17:d5:64:78:0f:b4:c2:f0:60:bb:95:67:82:72:78:83:77:87:
6a:13:be:42:a1:2d:e4:a5:ef:d8:d9:7e:bb:b6:0c:5e:c8:3b:
a4:82:67:3e:97:ae:21:fb:f5:2b:3c:70:b8:77:de:1f:1f:4d:
b6:fe:1f:04:76:2b:a4:53:b6:62:aa:eb:0a:eb:73:55:c7:d0:
d2:9e:fb:38:2c:b7:83:4d:a3:10:40:0c:f0:4c:a5:fa:8d:80:
f0:80:12:15:5c:9f:5c:06:d5:3a:77:7c:65:66:45:dd:a0:f2:
ce:cc:98:2a:4d:f8:ce:55:57:48:a7:9a:70:a9:0c:e6:e7:54:
25:c0:d3:07:d6:c9:68:d0:7c:d3:a5:e7:2c:2a:5d:9a:f4:99:
57:2e:e0:e0:09:b5:31:00:57:94:7c:d5:2b:52:67:0e:86:62:
8e:32:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:50 2026 by rpki-client