
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
File: usH6Gx5O5DACOyddInpdBDx_lqM.mft (raw, json)
Hash identifier: Erq6oPTVfD03LIa+wjsjIcmKF5t4kI7V+DJ/DVYqSBM=
Subject key identifier: 3F:06:2D:8D:22:8E:5E:A7:8E:BE:AC:3D:A0:6C:F3:57:E6:32:8B:DB
Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
Certificate issuer: /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
Manifest number: 96
Signing time: Wed 25 Mar 2026 06:40:30 +0000
Manifest this update: Wed 25 Mar 2026 06:40:30 +0000
Manifest next update: Wed 01 Apr 2026 06:40:30 +0000
Files and hashes: 1: usH6Gx5O5DACOyddInpdBDx_lqM.crl (hash: 53ZwYyD3Ga7cVAUNA7B1GG/t6ZFsPkDl8gDn06hMvyk=)
2: 7D7ECB70480611F08B614210C4F9AE02.roa (hash: TDS7qbzkjns0lb3qBIPlOIfh7gAVrC0ccm+ewwA1wN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Validity
Not Before: Mar 25 06:40:30 2026 GMT
Not After : Apr 1 06:40:30 2026 GMT
Subject: CN=69c3835e-79ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:99:f6:91:a1:24:3e:ba:68:ee:67:89:12:
51:95:61:d8:94:f1:24:c4:1b:98:89:4a:81:2d:0c:
90:8f:dc:2e:e0:5d:11:8a:1d:85:d9:b5:c4:06:eb:
b5:3c:05:55:ff:5a:08:16:3b:11:c0:d9:78:25:e2:
c7:0d:61:5b:a3:36:4f:32:61:27:48:4d:e8:36:9d:
63:2e:bc:93:c6:a0:14:a3:9f:bf:a0:33:d6:9f:d7:
2f:eb:08:69:17:80:76:e3:29:c4:8d:6d:4c:8a:44:
f5:b8:3d:8b:83:04:96:90:57:11:c7:75:71:92:70:
93:c8:b2:cb:53:66:67:fd:3d:33:8d:77:58:62:be:
3e:b9:f5:cf:00:24:b7:85:de:33:7a:0f:9d:31:fd:
d3:c8:85:7f:e9:59:97:a8:ab:2a:d5:3d:80:16:2f:
f6:12:e2:fa:77:d1:f0:e0:9a:5d:6f:22:a8:df:09:
7c:06:8c:3a:7e:b7:ec:3c:05:e5:86:5c:96:75:16:
cf:bb:3c:59:1e:99:9a:26:9d:ae:5e:8f:29:a0:3c:
02:cf:b5:c6:91:03:16:81:1a:05:c2:82:ad:84:6d:
48:02:d7:c7:67:f2:48:94:3b:e9:2e:d2:d3:24:1f:
2a:e1:f9:96:0d:d7:53:a5:82:85:48:e8:f9:ee:db:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:2D:8D:22:8E:5E:A7:8E:BE:AC:3D:A0:6C:F3:57:E6:32:8B:DB
X509v3 Authority Key Identifier:
keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:2d:79:4d:d9:b4:3f:4f:2a:47:93:bc:60:d7:91:0b:28:40:
25:29:f9:98:86:06:97:d3:1d:49:5a:fe:2f:0f:c8:10:ab:43:
e8:8b:e6:4a:25:a7:58:1a:8e:4e:02:9a:fb:68:5b:df:77:fe:
fb:c9:44:c2:78:19:66:06:f0:47:e8:bb:3d:63:3b:90:a7:0e:
33:c2:14:93:41:17:e0:84:4f:8e:02:84:a4:59:e4:ac:e5:62:
75:e7:63:94:04:02:23:06:0a:3a:7e:2a:5f:e9:8b:9d:0a:fc:
2b:4a:8c:ac:1b:30:db:ba:1c:59:63:07:31:06:87:dd:06:bf:
72:ef:c2:11:e4:9c:56:a2:87:67:9b:d2:bf:e3:9b:5c:55:15:
96:2c:5c:9c:a8:cc:9a:a0:a1:cf:f0:6b:c6:ea:c4:c3:43:0f:
8b:b6:e0:4c:ca:65:f4:59:95:79:63:ff:90:a5:b1:f5:6f:d0:
f6:42:5c:6b:c5:56:f1:c7:af:84:ef:b4:ab:92:68:06:51:03:
fd:f1:23:6f:1a:44:1d:66:f7:f6:f3:42:ad:7e:22:13:0a:50:
c8:a1:49:2a:b0:dd:c5:eb:ac:37:06:9e:03:14:22:ce:9b:ad:
36:20:37:aa:d1:67:4e:eb:3d:91:d3:2e:5c:6c:24:32:45:84:
af:a0:66:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:45 2026 by rpki-client