
$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json)
Hash identifier: dNTi15Yt/1tvlCxMp2V7SGqjZUuGOVRG5dH1mh06tq4=
Subject key identifier: D8:B9:40:FA:55:7C:66:21:17:4A:C0:76:B7:4D:27:23:4E:67:F9:82
Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Certificate serial: 1265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
Manifest number: 1245
Signing time: Tue 24 Mar 2026 17:00:58 +0000
Manifest this update: Tue 24 Mar 2026 17:00:58 +0000
Manifest next update: Tue 31 Mar 2026 17:00:58 +0000
Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: JEbnKHJU5i4/kznxsBe8cg6dXTpz3ZU8NN/Q72saB1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4709 (0x1265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Validity
Not Before: Mar 24 17:00:58 2026 GMT
Not After : Mar 31 17:00:58 2026 GMT
Subject: CN=69c2c34a-9db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:52:8f:2d:55:ff:f5:d0:e6:f8:8a:6d:48:
bd:33:86:9e:81:ba:20:bb:86:34:5d:3f:f9:f3:53:
8e:25:a9:c5:84:2c:21:ac:6e:76:e4:3d:f6:28:81:
8c:21:b2:20:7f:de:c4:3c:5d:3d:b8:7a:1b:d0:c2:
4f:37:6d:c5:a9:2e:4b:02:f3:22:2f:f3:1b:4f:f5:
75:1e:40:8e:eb:c8:b4:3e:0b:de:5c:8e:e7:cc:55:
0d:fb:6c:71:fe:21:89:b8:77:ce:54:f8:7e:25:ae:
04:b0:ef:3a:2e:32:ad:4a:d8:9d:c3:8b:f5:56:09:
4f:4e:b0:7f:93:45:40:b3:e9:b9:9e:4a:be:8d:fd:
40:a3:fe:36:e5:ad:0c:8b:dc:56:dc:3f:b5:bb:1c:
a3:a7:29:7b:4f:cb:8b:b8:d4:c9:94:8c:6e:a4:ad:
d3:36:68:bf:b2:82:10:b5:a8:e7:cc:e9:22:1f:d1:
d8:a1:fd:df:c4:93:44:5a:05:28:83:ca:3e:e6:f9:
5a:50:13:35:6e:10:a6:b3:87:cc:76:b9:3f:c3:d1:
1b:cf:33:55:d4:d6:3b:73:d9:5f:16:cb:d6:b9:12:
54:e3:35:3e:3e:8b:4e:90:f9:f2:49:3b:27:4d:d9:
c8:c7:fb:83:1f:04:c1:98:4e:c0:7f:5d:8e:55:13:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B9:40:FA:55:7C:66:21:17:4A:C0:76:B7:4D:27:23:4E:67:F9:82
X509v3 Authority Key Identifier:
keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:45:9d:11:c5:6a:60:0b:34:87:5d:71:a4:94:c1:52:fa:f5:
0b:51:f7:66:d9:4e:2e:c5:9d:e0:86:c4:cc:dd:21:1b:74:42:
7a:c6:08:cb:f6:fe:77:0e:1d:b9:0b:3f:db:48:b3:37:10:8c:
ee:e0:ae:3b:c2:1e:0c:c3:de:25:b7:37:ad:8b:e8:e1:06:1f:
8c:d4:99:41:27:82:2d:66:ca:9d:cd:42:e9:c0:72:5f:4a:ca:
76:fd:88:04:0f:67:6f:ff:fd:ef:2d:66:65:57:74:e0:dd:2b:
34:c3:b5:4c:1d:eb:1b:67:bd:df:11:e9:a7:3c:71:34:9e:5b:
6a:53:1b:d7:13:10:f0:0d:7e:ff:96:48:fe:58:01:10:4f:82:
7c:48:7c:f0:f5:99:f9:1b:bc:bb:04:89:7b:5f:6d:55:03:7e:
ed:10:40:5a:fd:30:87:bf:cf:02:f4:3f:f9:0b:4e:39:04:da:
d3:5e:eb:ca:14:24:89:39:e0:cc:2d:7a:3a:5d:67:2f:10:75:
fd:fd:af:bd:06:93:50:53:5d:70:a9:e9:93:ec:ed:a8:a7:87:
2a:16:27:a9:f2:a2:e5:07:61:bb:dd:fe:48:c4:31:b7:6a:82:
8e:26:2d:f0:94:72:33:82:3b:88:eb:75:b4:ef:82:a2:68:cc:
c0:56:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:26 2026 by rpki-client