
$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json)
Hash identifier: 2l7xzxYKEHMV0NmYIdQ3uaD/c7PpHUE2OjvwEStJBw8=
Subject key identifier: FB:D7:E9:F1:29:C7:DE:B4:73:34:D2:13:DD:E5:49:46:75:B1:65:8E
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
Manifest number: 01FC
Signing time: Fri 27 Mar 2026 02:40:10 +0000
Manifest this update: Fri 27 Mar 2026 02:40:09 +0000
Manifest next update: Fri 03 Apr 2026 02:40:09 +0000
Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: IpiVc5c1Rb+9cokEX009bHUYO1LhjJG/TyQq0m4PJAQ=)
2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: hX2Iw++PK9Y+cjSdv5iifugQbVGCyctU8mKlkkvrChc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Validity
Not Before: Mar 27 02:40:09 2026 GMT
Not After : Apr 3 02:40:09 2026 GMT
Subject: CN=69c5ee0a-71c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:b5:e1:47:99:14:aa:96:b8:b0:bc:c3:2f:
e6:18:d0:55:66:2c:a7:ef:b6:53:db:20:4e:39:db:
39:62:e1:e9:1f:28:b3:6d:54:12:65:08:dc:93:0d:
4a:e6:be:a8:bd:9a:f5:0d:60:a0:58:07:2e:52:46:
a8:b6:55:a3:35:62:49:1d:a5:6a:6a:64:b0:d7:46:
0e:90:e5:c1:50:56:6f:e2:39:63:46:99:07:c8:af:
8c:ad:6b:c4:e8:a2:d0:23:88:f2:7f:52:10:32:d3:
1a:09:3c:04:ce:cf:00:c1:0e:67:37:c7:f6:cd:7a:
6e:53:e3:2b:51:79:ec:10:b9:c5:da:00:3a:79:c0:
a6:09:94:33:80:c8:bc:99:fd:cc:b9:e0:35:c5:d9:
12:64:6d:12:c0:78:05:8f:15:ff:81:cb:02:bc:98:
98:1f:14:2f:3f:33:3e:eb:7a:50:3e:14:a9:88:e2:
d7:7a:9f:88:57:e6:77:48:33:dc:91:5a:d8:ff:da:
7a:61:28:9b:af:8e:e3:0c:4d:d7:01:ba:53:1f:76:
03:c6:99:0b:b0:9b:90:a8:23:18:a3:1e:22:c1:93:
89:d6:f5:9d:7f:d8:f4:35:11:59:13:6e:b8:22:b3:
09:b8:e3:f3:fb:96:ba:74:d8:90:fc:d5:9d:21:78:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D7:E9:F1:29:C7:DE:B4:73:34:D2:13:DD:E5:49:46:75:B1:65:8E
X509v3 Authority Key Identifier:
keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:43:66:d4:ac:4c:a9:e6:60:b3:4e:ab:8a:c4:4e:d2:4d:
fd:8e:5c:2d:ff:12:a5:4f:02:78:c6:0b:49:07:20:77:f6:a9:
d7:ab:29:c0:7d:8c:11:8f:e2:70:82:c0:58:64:e8:6b:47:0a:
5f:a2:f8:b8:ca:67:49:bf:e4:45:7b:86:e5:97:6a:d8:b3:09:
85:d5:13:f5:d7:c7:0b:ed:ca:23:12:29:5a:5a:57:d5:9a:36:
a6:07:07:61:c1:f6:4b:ba:dc:5f:eb:1d:b6:04:d8:93:f3:3a:
7e:3d:8f:e4:15:ca:ea:57:b1:51:f0:0e:66:46:34:18:94:ec:
7f:e0:5a:6d:94:80:4e:68:bc:25:0a:84:38:6e:da:ea:81:9a:
f3:a7:5c:60:33:83:73:41:fe:ad:46:a1:bd:83:a9:f8:96:5f:
d2:79:4a:29:e8:20:11:f9:a4:dd:50:e8:5e:15:85:44:84:d2:
ad:e1:ba:a7:5a:ad:0a:1c:bd:8e:b1:3d:36:93:86:ea:f2:70:
ea:9a:62:69:f6:55:65:4d:1d:80:18:e6:8d:de:d6:fc:46:f7:
bd:e0:b9:14:c1:e8:42:72:4e:d4:fb:84:f4:28:50:b6:3b:3a:
71:f5:bf:d7:98:38:8a:c4:41:a0:35:44:69:37:c7:67:28:a8:
b4:22:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:48 2026 by rpki-client