
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
File: aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json)
Hash identifier: 5P+nW2ilnzwNLFd8yeP8Dq+5Dh4CxFfMkJd/83yhf3I=
Subject key identifier: 9B:7F:A1:5F:E7:BF:62:03:D3:E1:88:12:5B:2F:48:D4:73:38:B1:C5
Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Certificate issuer: /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
Certificate serial: 07D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
Manifest number: 07CD
Signing time: Tue 24 Mar 2026 21:06:31 +0000
Manifest this update: Tue 24 Mar 2026 21:06:31 +0000
Manifest next update: Tue 31 Mar 2026 21:06:31 +0000
Files and hashes: 1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: rMy1vdaBkTiTtyx+gNQg4fu8F+MN+DjI6TwoB93Jo6E=)
2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: +dqj5dUwvw+xC7YK9g1ktDdByBUDI++m9TD2lt9C0Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl
rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2006 (0x7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
Validity
Not Before: Mar 24 21:06:31 2026 GMT
Not After : Mar 31 21:06:31 2026 GMT
Subject: CN=69c2fcd7-5a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:d0:8c:af:69:2c:8d:3d:61:60:e1:5a:64:
99:c0:ab:0a:b3:8f:e7:f3:9e:92:39:a7:ec:73:a0:
ae:67:6c:2e:8b:3d:c6:b2:a6:0f:c0:d8:ec:9f:f0:
24:0e:d0:af:24:ae:1b:4b:ce:3e:5d:72:87:65:ff:
eb:c4:8a:68:02:50:20:ed:a3:20:e5:73:ed:30:42:
6b:ad:16:e7:c1:84:a5:23:67:07:e8:27:24:62:40:
0d:8d:09:f4:40:10:07:10:85:4c:8e:a0:37:80:6d:
34:7c:09:72:42:2c:6e:7f:18:d9:c0:9b:91:91:a2:
b1:c6:46:34:12:2c:0a:bc:c6:ae:7a:ff:a0:72:92:
47:5c:d6:60:38:4c:61:a9:3e:0a:7d:ef:05:5e:57:
83:1c:fa:f6:6e:f5:92:88:b5:69:4c:36:aa:c7:99:
90:33:d8:dd:d3:ef:86:b1:1c:08:c8:8d:8e:7f:bc:
be:73:98:b7:86:f8:6e:73:3b:37:cc:09:07:17:ef:
15:d0:b5:b5:53:7d:34:32:49:10:2a:82:33:2e:25:
0d:8f:85:d9:52:ef:94:15:b0:70:e4:db:95:4d:c9:
61:08:ba:59:0f:6b:fa:65:c8:bd:06:89:be:0b:68:
88:ce:34:64:ff:08:d6:3b:54:7d:c8:b7:a5:6f:6a:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:A1:5F:E7:BF:62:03:D3:E1:88:12:5B:2F:48:D4:73:38:B1:C5
X509v3 Authority Key Identifier:
keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ad:32:9e:59:44:73:7f:78:02:70:a5:10:71:c8:b4:32:c3:
ae:70:94:72:e8:b7:d1:63:7d:13:47:42:ac:c0:0a:0e:de:40:
a2:37:c7:52:95:89:d0:fc:f2:37:b6:65:fa:10:1b:91:4b:e6:
de:f2:15:69:36:2b:46:09:73:32:b0:38:f3:ae:94:4a:df:97:
fb:96:37:33:23:4b:4d:12:5c:62:77:f4:22:8e:aa:7e:35:7b:
09:8f:74:46:d2:da:a5:73:ba:7e:91:26:f3:a3:2e:88:de:ea:
d3:cf:65:87:5a:f2:59:6b:a8:f4:dc:bf:1c:d5:11:61:b6:c7:
2c:29:84:8d:cc:ca:6b:6a:a4:08:64:a7:35:9d:50:4e:62:ee:
d5:b0:fe:25:3a:4f:35:6c:e7:0a:70:69:e8:6f:cd:03:32:23:
9a:d6:c2:e6:18:8d:68:8c:e3:89:58:48:82:0b:11:d5:4c:cc:
36:72:b0:cc:97:d5:7f:77:f8:ed:88:3b:05:ab:06:65:25:dc:
1c:db:81:2f:54:a9:73:d3:63:2a:dc:eb:c7:af:78:cd:c5:72:
da:91:34:ad:e2:a5:1f:7c:8d:1e:9d:de:39:df:13:d8:aa:19:
19:f0:8d:1b:85:21:26:2e:4e:3e:72:93:e2:de:55:88:0f:f4:
26:02:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:08 2026 by rpki-client