
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
File: p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json)
Hash identifier: yyHiFcZOkFNOrhKvY2bcf/FfUzSLj/lDFGlG+XOsAc4=
Subject key identifier: 3F:31:EB:03:37:86:44:D2:EB:2B:1E:47:F1:95:61:16:A6:B8:14:01
Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
Certificate issuer: /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
Manifest number: 60
Signing time: Fri 17 Apr 2026 07:45:04 +0000
Manifest this update: Fri 17 Apr 2026 07:45:03 +0000
Manifest next update: Fri 24 Apr 2026 07:45:03 +0000
Files and hashes: 1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: wHza9R6suy8y9hhR2wYXUbPpZzEThWQkYO2y6qcYPQ0=)
2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: KbzUtTPtGCQ3I/N5KWpd9MwtuQNamm+9Vruv3vtMr6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Validity
Not Before: Apr 17 07:45:03 2026 GMT
Not After : Apr 24 07:45:03 2026 GMT
Subject: CN=69e1e4ff-418d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:05:46:09:4f:7b:bb:f5:c0:e7:4c:3a:51:
bb:9c:60:bf:c9:04:44:d1:75:0a:31:91:9f:e9:62:
d8:a0:95:7a:83:25:35:60:b1:1f:0c:f1:08:f0:c3:
75:d3:00:e6:84:63:f5:bb:3a:31:60:ba:15:93:9b:
5a:df:18:58:00:47:22:6d:85:fd:32:c4:24:ab:4e:
8d:d9:fb:b0:db:cc:3e:78:4b:b1:50:46:32:99:31:
c6:61:7b:27:7a:50:1e:e8:f5:0f:a3:dd:ba:2e:48:
ea:d3:33:46:8d:69:ef:ef:8c:8c:6c:4a:2a:2d:d3:
c3:6d:1a:0a:13:3b:6d:6f:da:62:d8:44:4a:89:bc:
fd:e9:0d:a2:6f:19:c8:c4:bb:89:bb:45:f7:58:86:
1c:0e:e4:a5:a2:41:ae:3c:58:a7:f7:3b:a2:1a:70:
25:a4:56:fc:39:f6:b3:34:57:65:60:69:4f:2a:f9:
07:90:eb:e1:07:66:dc:1d:29:91:d2:42:f3:f7:e9:
fc:0c:f3:f4:c6:11:e8:1e:c1:c7:fc:c6:6b:a5:b1:
dc:bd:99:42:72:56:eb:b4:e1:85:b3:71:88:d2:a0:
c2:b3:4c:cc:b4:cc:cd:b0:bf:f6:4c:ce:78:ce:29:
10:12:58:c4:25:50:97:e6:24:77:f6:94:2b:12:e4:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:31:EB:03:37:86:44:D2:EB:2B:1E:47:F1:95:61:16:A6:B8:14:01
X509v3 Authority Key Identifier:
keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:99:72:f4:17:60:56:22:00:91:5d:0e:e4:48:5c:93:3f:c6:
60:96:cf:b2:96:ee:cc:ed:07:a0:4b:44:a1:42:6a:bb:ab:c4:
ea:9e:15:bd:f3:e6:cd:c1:3e:08:40:47:69:16:85:9f:2f:d9:
e7:4b:88:9a:cb:66:e3:9c:21:fd:30:80:1d:d2:82:a9:e9:46:
f1:a5:b3:98:bd:b1:2f:a1:f7:dc:02:23:7d:5d:b1:99:02:e4:
2b:21:db:32:29:9a:83:18:c3:27:67:c1:72:70:bb:5b:a1:7f:
9e:97:0c:e8:cf:a5:e4:9f:72:df:d6:be:9e:55:b7:3f:72:81:
8c:75:c3:95:1b:5d:31:4e:f6:b1:5a:54:78:3d:c6:fd:6c:28:
f8:ed:43:50:aa:d5:bc:43:41:1c:05:60:fe:d1:2e:2a:8e:0e:
dc:2b:4b:74:7c:30:cc:33:82:cb:74:c6:5e:cd:ee:18:50:b7:
3d:45:5c:65:2f:7c:80:dd:98:9d:ce:8c:b0:6f:97:c4:06:42:
65:ba:f7:1d:1b:2d:09:83:05:6f:73:2c:2c:47:98:26:68:04:
d5:42:0e:4e:ed:44:40:86:52:d0:2e:99:8c:96:a2:71:7c:00:
74:99:86:51:3c:65:eb:e6:d1:c1:57:c3:29:e5:60:94:58:83:
ea:f3:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:24:04 2026 by rpki-client