
$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json)
Hash identifier: QAf3U+kqGslT/yidyaaU5IRrxvuW/bFdBwOCuN/zWw4=
Subject key identifier: 12:0B:02:16:E3:47:23:86:C4:82:1E:E9:0D:3D:CE:DE:AA:CD:87:50
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial: 0C15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
Manifest number: 0C01
Signing time: Tue 24 Mar 2026 18:38:59 +0000
Manifest this update: Tue 24 Mar 2026 18:38:58 +0000
Manifest next update: Tue 31 Mar 2026 18:38:58 +0000
Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: wjYnKFU/RlLJ+oHuq0I1JM8JpuRi7KmPx8FJlyZw6Ws=)
2: E1647F18303311EA8796D584C4F9AE02.roa (hash: hvHQ4oovH4LfseVNWUdyIbRafNtihmdVkn0b5XITvtA=)
3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: TblqmML4Z56TJGS/QmGAg1lALjsba+7daK1iMQjSZu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Validity
Not Before: Mar 24 18:38:58 2026 GMT
Not After : Mar 31 18:38:58 2026 GMT
Subject: CN=69c2da42-d3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:5a:a6:d0:de:a4:ae:c8:c9:c5:4b:2f:99:
14:6d:3f:f7:34:9f:f6:e7:56:a0:cf:e4:0b:95:43:
51:e8:52:34:9f:ac:53:ee:b2:8f:e5:d1:8c:e1:e0:
59:00:60:41:83:17:99:69:a2:a5:b5:4c:99:e9:e7:
bf:f6:08:91:5c:f6:a3:be:52:a9:69:86:95:bf:b8:
1e:8f:18:1e:ef:a3:dd:a5:e1:22:05:66:d8:95:97:
81:fb:38:92:df:fe:00:fc:0c:39:89:43:80:3a:fc:
3a:04:b5:71:bc:1b:4b:cd:37:37:61:3c:ce:0f:de:
22:a3:eb:d2:bf:e8:96:62:3e:52:a7:0e:fb:2a:bf:
2c:cc:00:a3:b6:c9:a6:04:65:9d:28:b2:19:87:fd:
3c:23:aa:b9:74:bd:28:60:d6:fe:91:62:21:8a:b8:
3e:a2:d5:60:a8:8b:7a:29:c8:55:3a:98:68:14:87:
1b:7f:4c:01:df:a1:7b:08:b5:68:05:b8:38:0d:4a:
90:39:1d:67:fa:ba:16:fb:07:52:40:04:ac:d4:f3:
32:96:f7:87:d2:fb:ec:fd:f5:9b:ba:ea:90:72:a2:
ec:e8:02:3b:4e:be:c2:47:f1:52:c7:87:d0:12:cf:
b7:01:4a:4f:8a:49:79:ee:d8:a3:08:18:92:36:55:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:02:16:E3:47:23:86:C4:82:1E:E9:0D:3D:CE:DE:AA:CD:87:50
X509v3 Authority Key Identifier:
keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:cf:73:d2:cf:c9:6e:b8:9b:7a:ed:ec:a0:3c:3e:9b:94:7f:
5f:f0:ad:a5:df:33:82:54:df:32:3f:56:dd:81:d2:d2:53:b1:
60:c3:90:a5:43:ce:bb:d4:c9:a3:79:e2:18:6e:05:6d:78:8d:
7f:18:dd:61:77:c9:8f:43:4a:bf:bf:0d:72:53:de:38:12:4e:
37:f0:b4:ad:2a:18:50:94:40:7d:0d:27:48:66:5d:e2:75:9f:
ce:ec:48:19:a0:08:70:6b:27:49:a6:e8:5f:bb:66:cf:fb:00:
63:d9:fa:8d:0a:8f:f9:33:64:b8:a3:d6:18:d0:e0:ad:84:a3:
04:45:02:21:4c:fd:12:e9:61:c7:3a:44:e5:03:ad:c7:5e:6b:
66:f8:40:e0:9d:6e:e6:15:55:e8:ab:8a:4f:0f:32:e9:7c:af:
c7:c4:b7:cd:5c:ac:08:83:28:d7:ce:e7:44:09:6f:37:52:3a:
b3:ef:73:15:ec:7e:8f:23:1d:ae:76:fe:0d:d0:09:53:54:e6:
30:84:a6:90:09:11:03:b6:62:c9:ab:11:b9:44:22:89:2f:9d:
28:0d:7e:75:0e:db:00:f6:85:de:dc:ca:74:4c:a4:d3:9f:87:
f6:8a:9e:fc:7b:19:64:ff:9f:be:05:83:92:61:30:51:5b:da:
2b:f6:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:46 2026 by rpki-client