
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier: fFsl6R9D47auxAeoPolYzsjsIer1vnKkwOlU5ghmu2Y=
Subject key identifier: E7:F6:00:9E:8A:6A:1B:10:95:96:E7:7C:B6:A8:51:21:86:F8:CC:6B
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number: 0100
Signing time: Wed 25 Mar 2026 05:19:56 +0000
Manifest this update: Wed 25 Mar 2026 05:19:56 +0000
Manifest next update: Wed 01 Apr 2026 05:19:56 +0000
Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: Qwt8+ZtEZlNKWsaxRluqmEwvncgzEJdAtdaauKPzYf8=)
2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: hdQpo+xnXuDoOPe/5r+BnsM8aeG+LI4VCVPfcf0L3eI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Validity
Not Before: Mar 25 05:19:56 2026 GMT
Not After : Apr 1 05:19:56 2026 GMT
Subject: CN=69c3707c-7983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:87:53:b3:a3:67:96:0a:b5:4f:7b:7a:f2:
5c:ee:df:f6:f8:39:65:b9:8b:24:24:69:eb:7a:f5:
38:b7:44:60:6f:5d:d9:5d:f1:d5:e0:2e:a9:d6:8c:
a3:32:97:91:7b:59:d5:fa:01:c0:13:66:84:63:24:
ce:bf:12:47:77:7a:7c:e4:b4:17:23:ef:2c:44:d4:
0d:c6:08:6d:c1:16:9f:2a:c9:9c:2f:65:a8:b5:4c:
16:40:dc:9f:b9:07:3c:68:6e:67:f3:c8:a5:04:65:
f8:8f:8b:98:83:02:af:74:7f:29:cf:4e:d8:0e:e1:
fc:c3:e6:cb:b3:29:00:b9:d4:0d:d6:3e:92:66:a3:
7f:70:20:18:e5:92:6d:96:5c:4d:a8:8f:56:67:91:
56:89:04:7a:c6:2e:86:80:cc:ee:f3:bd:33:73:18:
f0:18:d6:76:58:f7:ee:fc:15:55:41:eb:9a:c5:ac:
d2:56:fa:ae:9f:18:bf:34:4b:ea:24:df:a4:c3:dd:
63:57:98:f1:75:18:e8:19:46:90:66:8d:c3:37:bb:
24:c9:99:1b:2e:2d:b5:99:87:59:40:2f:60:4c:fd:
6f:61:29:83:cd:8b:27:0d:91:8d:8c:a3:84:90:0b:
74:be:29:e7:a9:fe:8c:2b:95:99:0d:63:da:de:b8:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F6:00:9E:8A:6A:1B:10:95:96:E7:7C:B6:A8:51:21:86:F8:CC:6B
X509v3 Authority Key Identifier:
keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:25:c6:f9:3d:4d:f0:09:ff:6e:52:3f:62:06:4b:67:a0:7b:
48:82:fe:cc:6d:8f:64:f6:50:7a:04:c1:ad:d4:fb:c2:a4:c3:
ca:23:ad:53:a8:7e:be:74:e9:37:73:90:32:8c:ca:ae:e7:d7:
d3:8c:40:e4:46:6d:36:ef:ea:e7:d6:3f:14:ec:dd:3e:5d:60:
67:1e:13:be:2a:a7:07:39:b9:c2:ce:44:4c:d8:ea:5d:73:43:
ac:11:3a:27:b4:11:39:5a:59:f7:2b:89:6b:6f:2d:15:87:e7:
6f:be:74:a2:51:0e:c6:97:27:81:99:f4:f3:86:fe:54:44:f4:
1b:ff:f0:93:1f:b4:b3:4c:74:08:7c:c8:42:28:b8:ca:b6:1c:
3e:f5:ac:4c:cc:4f:d3:5d:88:6b:da:8e:84:3a:db:2d:5c:ff:
42:4f:14:18:20:1f:16:af:e3:ae:54:84:b7:9c:ca:fa:6d:27:
a9:66:26:fc:9e:81:47:96:9d:3f:1b:f2:23:09:14:b4:f4:f8:
27:42:58:ef:dc:d9:1d:15:6f:b5:ab:35:85:72:1c:3a:23:8e:
22:0c:f4:8c:65:c0:7f:e8:bf:f7:c0:32:94:c2:0e:47:31:e3:
b4:06:d4:d3:8b:b4:d5:65:67:7a:7c:8f:2c:3c:c2:84:58:dc:
13:5c:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:08 2026 by rpki-client