
$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft
File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json)
Hash identifier: aPCV1zutgTeB1J0HJfgPrKgb8yszMAK7zyWFDqjO/Ro=
Subject key identifier: E3:E5:90:49:16:6D:78:39:A3:9A:0A:54:14:2B:59:18:94:F8:6B:FB
Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E
Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft
Manifest number: 0532
Signing time: Fri 27 Mar 2026 00:39:05 +0000
Manifest this update: Fri 27 Mar 2026 00:39:04 +0000
Manifest next update: Fri 03 Apr 2026 00:39:04 +0000
Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: i+ouJtP12nX9+Xt64Q+xagnsh/Q4cA+tX3WZr7seDtI=)
2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: J6f5Iwq0hCkPy85AsFOXOv2n5dM2/bZSE2OvIibeXCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl
rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E
Validity
Not Before: Mar 27 00:39:04 2026 GMT
Not After : Apr 3 00:39:04 2026 GMT
Subject: CN=69c5d1a9-4153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:4e:d2:cc:54:98:64:f8:33:37:3e:bf:06:
a3:97:79:04:08:5d:bc:60:1e:aa:95:9b:f2:44:79:
7e:83:65:e9:04:46:30:03:c6:bc:97:18:91:9f:e2:
d5:0f:a8:87:f5:44:10:fa:07:91:1b:7e:9a:f9:54:
c0:c0:c1:51:d1:30:77:3e:a9:b0:b2:cb:f7:a0:f5:
d8:e4:05:10:bf:29:77:ee:eb:e5:8a:1d:6e:79:f5:
30:2f:a0:71:a6:c6:69:9a:e3:21:0f:3c:24:01:1a:
d7:7e:c4:42:80:ce:aa:2b:23:71:ae:4c:cd:ec:03:
6a:61:a9:e5:73:d7:4d:bd:ad:38:12:ca:d8:86:db:
47:65:2f:7c:aa:ab:c4:f9:af:94:1d:46:28:e2:c2:
62:8c:b3:59:cd:83:ff:c6:34:2c:fe:59:eb:5b:00:
5f:50:e0:47:2c:96:16:b3:71:de:65:6f:66:6e:0d:
e3:76:d2:a8:1a:63:e2:71:e3:a5:0e:bd:0b:ff:60:
10:bc:5f:a1:0f:04:8f:89:49:c7:2c:be:a1:ea:55:
a0:dd:7b:4e:2b:2d:be:43:ae:79:40:79:ce:f6:a8:
ed:43:c8:71:8e:bb:ad:db:fc:cd:d5:84:3a:95:c9:
86:81:28:db:7f:3d:79:c3:0f:95:39:36:19:16:60:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E5:90:49:16:6D:78:39:A3:9A:0A:54:14:2B:59:18:94:F8:6B:FB
X509v3 Authority Key Identifier:
keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:54:61:47:6d:8d:a6:1f:a8:14:bb:9a:0f:3f:3c:4a:5e:55:
85:0e:22:fc:03:1f:d4:95:09:c6:b7:00:f0:f3:18:b0:2f:34:
59:6f:b0:67:9a:a8:3a:51:88:61:93:f2:b6:cd:14:52:15:0b:
4f:c6:14:bb:a9:bb:12:d4:97:64:db:60:66:41:20:96:fe:ac:
1b:79:5b:65:3f:1d:84:d3:c8:c9:1e:2a:b5:b3:3b:c0:d9:d5:
5c:54:3d:54:4c:25:60:f1:79:85:e6:30:8c:55:9d:6b:30:51:
63:e0:f9:8e:e8:ea:89:d2:bf:37:1c:82:64:87:21:e4:0a:3b:
a5:51:98:4c:54:3e:60:7d:13:f5:a4:04:7b:4e:ad:e3:ed:31:
05:11:bf:ff:e6:3c:fd:19:c7:4f:45:7f:28:17:7b:2e:f7:2d:
f0:6d:a9:24:6f:5a:a6:63:93:30:5e:9d:5e:3f:32:68:b8:bc:
62:68:05:af:c6:e4:e8:32:d0:07:fa:76:ca:e7:ff:6a:f8:de:
63:c9:cf:04:a4:e5:67:ae:b9:f2:63:be:d0:af:21:98:d7:07:
b7:a5:cf:fd:fb:9d:68:d2:5d:d2:b3:05:54:b0:59:7f:94:94:
00:6e:28:cc:1f:45:23:ce:ad:b3:d7:42:f6:d4:99:95:55:aa:
b8:49:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:37 2026 by rpki-client