
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier: 28imdKV7R+b0e3Im3M4n5HFogZgT+N/Ax9uhp6uX7yQ=
Subject key identifier: 74:FD:FC:F2:BF:67:43:6B:53:03:47:B7:92:EA:FF:F7:9F:C2:AB:C1
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 0280
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number: 0244
Signing time: Wed 25 Mar 2026 02:23:47 +0000
Manifest this update: Wed 25 Mar 2026 02:23:46 +0000
Manifest next update: Wed 01 Apr 2026 02:23:46 +0000
Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: UGkArlFK8imTY6zd5L0NA2AXGS/PZjggsrGv9+sBgRQ=)
2: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: hy3xSvTP7O3mbzfHFNsYWB6zvGiymVdeaKb6AgSQN3E=)
3: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: GKfJ2kB3yXKiTx70mXKirnJ5shWw+x/l7CpoEVzirXk=)
4: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Oi3EWJoEgd9DWmEEG+iX3qCZVJDhp6GEs5+/XmAJvSc=)
5: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: wtaIxTF17d8IiemG3sWgy0ofBOn5zvPTqbrlTJWPses=)
6: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: 4RuwvlEUfIsojOEJPNkdcqMMKDfzfms7bbjFDB3xQI0=)
7: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: t3iwawjGJ56AujlNR7I280077YB+jhEWT3pLtX6G6h0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: Mar 25 02:23:46 2026 GMT
Not After : Apr 1 02:23:46 2026 GMT
Subject: CN=69c34732-c27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:f0:e1:42:74:a7:50:36:35:7f:49:23:d0:
1c:5a:d0:f5:49:3f:27:ba:c3:ac:a4:6e:77:dc:45:
bf:b9:3a:40:b1:a9:8b:54:a0:36:8f:eb:9a:0e:5c:
07:77:4a:24:d1:8b:8e:97:4a:b4:45:a0:ed:3e:9d:
c6:ba:fa:25:8a:f5:78:7a:7f:c9:86:2a:e2:a9:13:
8e:82:ca:7d:30:9f:1a:0d:cb:4e:44:78:e6:72:47:
71:e0:de:e6:c0:ee:ce:aa:37:13:aa:ec:d3:f3:b5:
83:0b:14:31:2d:ea:e8:be:c9:ae:1d:92:f6:c5:d8:
08:79:97:c8:c7:48:26:eb:5c:e9:d1:0b:cb:f3:22:
2f:1d:b5:27:b9:8c:17:b3:45:f5:36:17:52:6f:1d:
7f:c5:31:d4:5c:0d:68:14:0d:f7:56:f1:9d:df:61:
06:6e:16:82:0e:0a:74:34:66:46:07:55:50:12:c8:
b8:68:65:da:ba:eb:8d:6a:ba:80:c7:ad:1e:54:22:
9e:85:6d:30:06:43:b9:e4:8f:50:e2:8c:fc:0c:bf:
ed:02:38:8e:6a:e3:c1:21:ab:1b:0c:04:9c:c7:37:
38:ce:2e:c7:d4:1b:7a:b9:ca:2f:41:bd:c7:e7:10:
32:90:52:20:e4:e9:a2:82:b1:84:f2:fe:66:30:4f:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FD:FC:F2:BF:67:43:6B:53:03:47:B7:92:EA:FF:F7:9F:C2:AB:C1
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:8f:b0:2b:61:ed:0f:0b:cc:f9:b8:26:9c:0c:78:42:3d:7f:
5f:05:6d:28:50:d8:94:1b:ad:02:b0:e9:47:59:a8:98:d3:68:
f7:47:f9:15:e7:13:ff:56:83:c0:86:6c:4c:c2:b7:5b:2e:68:
d6:a8:bd:23:40:b0:c3:99:64:6d:ba:17:77:e4:12:15:74:33:
fb:01:c9:d5:17:f0:f5:e2:70:bb:1e:b1:e8:54:ae:8c:a1:8d:
57:f9:cf:04:a7:d6:9d:0e:55:4b:30:c3:de:b9:a1:e5:f6:f1:
32:f2:a9:62:a1:98:a7:38:b9:42:52:0f:ca:d1:80:8b:a3:35:
7e:66:d3:17:19:13:68:71:0b:64:49:e3:1e:9a:9b:4e:98:47:
19:cd:6c:73:88:4b:9c:a9:61:52:d7:82:98:87:7d:e6:f3:98:
83:19:39:7b:cd:33:54:f5:36:8a:1f:e6:cf:ae:d6:b9:65:9e:
25:57:aa:e7:ad:15:35:44:77:25:a4:54:14:b3:40:6b:85:09:
1f:62:be:46:fb:df:a1:69:09:c6:34:53:e0:ce:4a:34:31:cb:
9f:0c:48:94:fc:32:a1:85:a3:21:5a:20:f8:2a:f2:81:bc:35:
ed:e9:24:1e:e7:34:af:92:f4:11:f2:3a:31:b8:ad:ec:ea:d5:
94:3b:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:20 2026 by rpki-client