
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json)
Hash identifier: l4EQ/JefkgHYX1bQpJ/se9x2LUPIZEaF+4TLV1GGc5s=
Subject key identifier: EE:A1:30:16:BA:5D:6E:32:14:BE:76:27:8A:9F:E5:3E:4F:79:52:9B
Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Certificate serial: 0B67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
Manifest number: 0B57
Signing time: Thu 26 Mar 2026 19:07:55 +0000
Manifest this update: Thu 26 Mar 2026 19:07:55 +0000
Manifest next update: Thu 02 Apr 2026 19:07:55 +0000
Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: TC64PfwEOhIiBmkxf78u4IO0VFz8JUEiJV0+Tb3VZko=)
2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: stUrHTIoF1EmY0xSAd+zL1B41XEXXFg0LQ+O2MEOhMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2919 (0xb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Validity
Not Before: Mar 26 19:07:55 2026 GMT
Not After : Apr 2 19:07:55 2026 GMT
Subject: CN=69c5840b-af78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:1d:ba:be:16:2a:c5:82:83:89:ba:16:98:
b0:1f:f5:fd:fd:ac:41:30:45:c1:fe:df:38:1b:f3:
ce:11:7f:d0:18:4b:28:80:16:1e:c6:33:b7:a0:56:
e7:7d:97:7e:03:a5:e9:59:2d:e9:11:c7:bf:fc:7a:
5e:2b:28:45:5d:f5:f6:c1:f5:41:1b:2b:ba:9d:86:
09:4a:a1:d0:9b:83:28:97:d5:e4:68:01:b8:e8:95:
88:ff:ae:e8:30:00:a2:ba:90:f5:dd:c2:0c:e4:ea:
4f:61:38:29:c4:1c:dc:18:a1:8f:bb:7c:07:d0:b0:
f9:be:3e:1a:09:8f:bc:85:ef:b0:7e:a8:14:94:8c:
5c:3d:52:60:4d:5c:f8:57:0f:62:8f:6f:04:8b:b7:
d5:25:dd:79:c6:ba:7c:e5:91:c9:4b:c3:cc:1e:2d:
08:f2:67:56:8d:51:d8:f1:df:d5:47:10:f5:2d:44:
91:ed:ae:f6:5b:05:b4:4a:dc:84:27:d0:ad:34:11:
c6:95:19:bf:c1:36:f5:3d:e6:df:d5:f7:b9:c3:07:
a6:a8:49:dc:84:ee:97:55:e0:1d:df:3d:92:96:62:
32:00:a1:38:f4:63:77:68:ec:b5:80:85:57:a6:32:
b9:15:a5:69:f6:4e:a6:54:70:cc:39:40:59:d5:17:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:30:16:BA:5D:6E:32:14:BE:76:27:8A:9F:E5:3E:4F:79:52:9B
X509v3 Authority Key Identifier:
keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:0c:d2:15:96:ff:00:d0:8a:b2:53:4c:7f:4d:b6:f6:12:2f:
ec:dc:88:0e:ec:89:27:23:52:0a:6f:70:98:83:b8:5d:b5:99:
37:13:58:90:dd:5a:39:49:e9:ee:5c:ba:42:e8:bb:60:75:2a:
6a:d5:76:85:36:8e:fb:4d:c5:eb:35:53:d2:e5:0f:f5:59:f6:
3e:a3:94:05:46:c1:03:ee:6b:05:c8:2e:da:a5:f1:cf:f3:65:
ee:0b:08:63:4a:e7:5e:ae:fe:a3:b1:8e:c7:b7:33:db:b7:21:
86:80:12:f6:e7:01:74:cd:1f:cc:6f:16:b7:2a:b6:18:18:4b:
8a:c2:74:2a:ba:e4:ff:bd:e0:a7:10:ab:53:67:30:d3:22:1c:
12:9c:0d:5f:a1:aa:b9:3a:cb:c5:da:29:60:19:a1:96:bf:f4:
5e:31:db:48:64:42:e8:f7:f0:82:f8:dd:07:dc:f6:e3:70:72:
fb:88:57:f8:ff:fb:7c:77:09:9e:a7:de:83:1a:d3:d5:02:04:
88:0a:2c:71:14:3e:ea:5a:21:c5:67:07:86:09:11:5e:c7:78:
39:dc:0d:2e:89:e3:bc:04:1c:14:6e:fd:71:18:f9:ac:78:32:
cb:24:b4:d4:ae:c6:e8:f2:0f:0d:d7:7d:f0:5c:fa:ee:90:9f:
fa:19:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:07:30 2026 by rpki-client