
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json)
Hash identifier: czUMtURmiPfO8z1rS8unD9P9rLFtKuOeMbsgejHW9lM=
Subject key identifier: 74:1A:77:7D:4A:BD:0A:A0:C9:08:56:D4:BB:B5:61:6D:4D:FE:78:8B
Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3
Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
Certificate serial: 0C3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
Manifest number: 0C35
Signing time: Thu 26 Mar 2026 18:40:21 +0000
Manifest this update: Thu 26 Mar 2026 18:40:20 +0000
Manifest next update: Thu 02 Apr 2026 18:40:20 +0000
Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: Q5WTiCeXm/ZLsmw0t3v3GToLM4bvkoz0m+nGvZ1TT9U=)
2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: /sfKGHFYsBIuxUCECw5LtfRTpuF1owLyFhhwOm+9Juw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl
rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3134 (0xc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
Validity
Not Before: Mar 26 18:40:20 2026 GMT
Not After : Apr 2 18:40:20 2026 GMT
Subject: CN=69c57d95-bc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:0d:b3:3f:f0:17:57:bb:be:57:00:69:f7:
20:a2:54:d4:58:9b:25:d5:0a:69:23:03:c1:18:31:
8e:db:62:32:4e:4e:0c:fe:50:d9:6a:0a:c4:da:d5:
c5:eb:2f:91:65:13:0b:1d:9a:62:66:87:45:ac:ae:
32:c2:80:67:92:bd:4f:5e:f4:db:b3:b1:ce:e8:52:
4e:28:17:0d:53:7d:fb:6b:b9:2d:cf:c7:bd:9e:25:
ae:9d:5c:e3:b7:a4:5a:6e:cf:51:a9:9b:2e:9e:33:
64:79:ba:37:a4:44:1a:2b:cc:3d:66:72:a0:e1:9e:
7b:2c:6a:f8:61:53:32:b7:8e:ca:2b:9c:53:5e:ae:
bf:a9:94:58:1e:1f:54:81:e6:96:7a:2a:a6:1a:98:
28:14:a5:16:db:30:a9:b9:d0:21:d9:78:ca:31:37:
00:40:4f:cc:01:89:f9:34:5b:84:33:81:ec:69:cf:
1a:8d:0f:c2:66:d4:89:1c:28:7d:31:3b:3e:38:33:
6c:d2:63:87:0e:76:3f:2d:fb:ab:dc:ff:c0:c4:6c:
9f:08:28:03:52:2b:05:b0:fd:55:af:cf:7f:75:5b:
b2:01:e3:04:11:d2:ff:d6:8b:04:fc:93:1d:80:8a:
2a:76:40:06:10:29:c3:31:65:b7:6a:20:6e:04:43:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1A:77:7D:4A:BD:0A:A0:C9:08:56:D4:BB:B5:61:6D:4D:FE:78:8B
X509v3 Authority Key Identifier:
keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:20:ce:70:25:c8:f1:96:b0:e1:b2:d2:c3:d4:d8:a0:75:0c:
fe:08:23:75:21:28:74:22:29:86:3f:4f:43:7a:80:ae:27:5d:
bd:df:c3:8f:80:fe:c7:99:08:c8:18:45:af:e9:28:0d:f7:d4:
7e:42:4b:4f:cf:8b:ac:9f:b8:96:f2:b5:76:4a:23:02:1b:77:
41:9b:72:da:7d:b5:76:b5:77:43:ab:9c:59:8a:c7:1a:33:6c:
98:2c:f6:07:c6:6e:8b:f9:a8:97:7b:96:e8:1c:71:92:2d:05:
af:7b:6b:3d:03:35:67:35:e5:50:67:9d:2d:62:54:14:a6:8b:
f9:12:41:72:c0:31:7e:88:be:22:1a:20:1a:2f:11:bf:d0:fd:
85:ad:6e:fc:04:57:d6:90:b5:ae:11:a7:30:b1:0c:f9:10:e4:
8e:f4:21:45:5d:b3:e6:90:6d:f3:5f:32:e7:dc:09:b2:2a:a0:
14:86:6c:47:fa:1d:98:ae:27:5e:ec:60:e1:10:73:dd:c4:00:
2e:45:43:9a:87:2c:1c:68:70:67:39:5d:e1:2d:63:c0:2d:da:
e0:52:59:13:fb:15:1e:be:73:30:b0:65:b1:85:23:e2:df:b8:
26:a6:63:7c:31:19:d0:d3:06:47:88:2e:db:0c:dd:3f:be:2b:
40:66:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:08 2026 by rpki-client