
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
File: _3wGiSUYZz7M4Ea2pxfzU85TxQk.mft (raw, json)
Hash identifier: 1xv8ERMKFU23gGpEvwlrjc5UnZOh69p5mwi0EVdCxBM=
Subject key identifier: 0B:13:64:74:07:70:0A:DD:9B:D3:14:28:BC:8D:BC:44:BF:91:79:0D
Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
Certificate issuer: /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
Manifest number: C0
Signing time: Wed 25 Mar 2026 06:11:41 +0000
Manifest this update: Wed 25 Mar 2026 06:11:40 +0000
Manifest next update: Wed 01 Apr 2026 06:11:40 +0000
Files and hashes: 1: _3wGiSUYZz7M4Ea2pxfzU85TxQk.crl (hash: LvUFNEIjQPHquhFb41cONMSRA0NE1UckA4roS5WeYFc=)
2: CC704C6639B711F09D08292CC4F9AE02.roa (hash: vJisVJZNWaOKXgCYvSO+m0VZ93Gg4QfN63LPtavEQiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476FE, serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Validity
Not Before: Mar 25 06:11:40 2026 GMT
Not After : Apr 1 06:11:40 2026 GMT
Subject: CN=69c37c9d-4281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:a7:b2:58:b1:8b:4c:d4:33:4b:d5:ab:ae:
2c:cb:f8:13:80:ad:da:83:ad:3d:77:98:1f:79:02:
42:f4:df:52:01:c6:01:69:bb:51:c6:49:64:a3:1a:
0c:87:96:e3:5b:50:da:60:fc:f6:85:8e:e1:ec:4d:
e6:0c:fa:70:47:8a:ea:cc:2c:14:f8:85:a7:69:b2:
b5:1e:c9:d7:fb:04:d9:bd:86:39:4e:78:ac:0e:b1:
31:bd:06:1c:a7:fa:fc:9d:ea:37:bf:82:d9:57:7a:
6c:04:e6:21:50:6a:f5:f4:d9:3c:86:dd:91:28:21:
98:8c:fc:bb:09:40:85:0e:a0:b5:0e:1b:24:5c:fe:
d8:bd:7b:01:3a:be:26:b0:8b:f3:36:92:ce:9f:56:
9f:91:80:4d:43:40:51:93:65:f3:a2:5c:e4:bd:6f:
79:59:e5:1a:6c:a0:aa:b7:2c:a6:35:34:7f:99:09:
09:d9:71:da:3d:94:77:53:16:90:74:b3:6c:73:11:
2b:57:59:74:7b:7a:49:4d:e3:0f:ff:a7:3a:f6:16:
38:3a:54:b7:0a:62:6e:fa:b1:44:1b:13:bf:63:e4:
ca:32:bf:ae:46:68:cf:50:2e:94:45:e8:72:da:98:
ae:91:25:83:03:9c:8f:58:fe:64:15:bf:42:4e:21:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:13:64:74:07:70:0A:DD:9B:D3:14:28:BC:8D:BC:44:BF:91:79:0D
X509v3 Authority Key Identifier:
keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:b0:d7:f8:c7:7a:d4:7a:f7:b2:3d:60:f8:2f:8a:07:f7:c5:
e4:fa:92:16:08:72:cd:22:d2:fb:85:86:86:46:75:b9:80:84:
c1:c0:15:db:72:97:db:d4:18:8e:07:08:29:ba:54:bc:80:11:
bb:62:12:f4:a7:21:07:a1:9d:fa:62:24:b5:a4:64:3c:be:b8:
83:9d:28:01:ef:80:f6:c9:fd:25:21:1b:7e:6f:2c:79:ed:ea:
9f:f4:b5:9f:4e:56:61:06:52:89:ef:40:d8:ee:ff:93:22:70:
4d:67:46:a6:a5:26:89:18:76:74:6a:79:1b:1a:09:c1:8c:d7:
5a:f7:83:ac:b5:40:46:ea:bb:e4:d0:73:e1:0f:34:18:9d:67:
46:4f:b9:59:03:bb:92:95:08:51:7f:12:33:2e:79:96:29:57:
d8:ad:6d:27:79:1d:59:d2:0b:dc:0f:f2:3e:d1:a3:4f:b4:a9:
f3:99:01:cf:2e:55:3a:60:90:96:66:72:4e:73:04:65:51:c6:
93:7f:40:b7:d6:e3:77:bc:de:3b:cf:82:db:43:ca:07:c9:20:
46:a9:1f:2c:89:65:0c:ab:22:f1:22:31:c8:b2:54:a8:0d:6c:
59:52:27:15:7f:78:97:60:5a:1d:7e:51:65:63:6c:4b:aa:56:
52:5b:e2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:43 2026 by rpki-client