
$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
File: dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json)
Hash identifier: 9c4Y6WNCzooUH3sh9+gaQu3CdhMfn8pzFiCmzeMFiCg=
Subject key identifier: 9E:3B:47:85:E6:8F:0C:99:6C:87:F9:96:AF:4B:B7:8A:55:14:44:F3
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Certificate issuer: /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
Manifest number: 024D
Signing time: Wed 25 Mar 2026 01:44:53 +0000
Manifest this update: Wed 25 Mar 2026 01:44:53 +0000
Manifest next update: Wed 01 Apr 2026 01:44:53 +0000
Files and hashes: 1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: gxD0YW2nFgDxAOIUmkdIgxbftxyJUNlPDQHfH4dsUuA=)
2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: 21k7xo1DVvGDuKsBBbSZADbL50JKJ6QopBZblEvUm/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Validity
Not Before: Mar 25 01:44:53 2026 GMT
Not After : Apr 1 01:44:53 2026 GMT
Subject: CN=69c33e15-02c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:eb:81:58:79:4d:e7:f0:51:2a:ba:b3:9b:
0b:fc:ae:a2:26:ea:04:f6:c2:6f:ec:4e:87:45:cf:
3a:0e:79:6e:42:56:76:4d:46:78:20:8d:12:06:01:
0b:29:a6:ee:05:c4:e7:73:01:10:55:27:4f:bf:ef:
2e:07:69:87:00:ba:d2:f4:2d:eb:74:43:6c:8d:22:
f5:ff:ef:f6:73:e1:68:08:40:3d:0b:a2:45:b9:d9:
78:27:d3:6d:88:e8:16:f1:d4:ac:22:be:32:db:b8:
5a:8d:79:c1:5a:0a:51:9a:c3:7d:af:88:dc:47:fc:
c8:78:95:90:d1:d7:38:30:30:e6:cd:f7:86:67:44:
11:e4:ba:9f:52:a1:0c:2c:5e:78:6b:58:d8:8c:dd:
d0:fb:33:ec:91:92:03:76:09:d0:38:79:87:26:a0:
de:94:18:4a:d6:9e:eb:b0:56:d0:81:01:b1:54:56:
9d:e0:8c:c1:77:55:91:f8:82:f3:1a:79:68:35:cc:
8c:b3:fb:5a:5f:eb:54:d2:fb:42:90:99:f0:54:d2:
9f:15:48:cf:5e:7f:36:28:c1:b7:8d:95:e1:19:92:
1b:f1:b0:1d:56:98:2b:f7:67:ca:34:bd:87:fb:44:
aa:62:06:4e:1a:59:12:93:f1:0f:04:3c:87:ad:5a:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3B:47:85:E6:8F:0C:99:6C:87:F9:96:AF:4B:B7:8A:55:14:44:F3
X509v3 Authority Key Identifier:
keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a5:b5:61:f0:76:5c:07:7a:45:10:08:9e:7f:81:17:5e:c1:
c7:d1:9c:73:34:72:35:9d:f8:29:11:09:1f:ad:d7:f3:89:c2:
bc:93:bb:17:3b:bd:7b:fd:c5:93:6b:29:ce:8d:09:35:ae:b9:
8a:45:37:9f:b9:3d:19:f1:a9:30:ea:75:c1:d6:87:b6:1c:98:
38:1d:0d:7a:30:6d:40:38:16:04:fe:66:cd:18:1f:c7:cc:45:
87:e7:40:99:db:c4:79:f1:e5:05:d6:40:63:db:0a:61:21:ab:
97:0f:a6:b9:77:e2:15:c9:b8:34:2e:8f:68:47:31:e2:b8:4c:
c5:3c:b7:be:6c:1a:9a:d9:40:24:66:a1:5f:5f:c1:81:1e:40:
90:b0:11:59:e1:79:fd:7b:a0:1f:3f:07:56:4b:9a:86:de:59:
08:07:47:f3:cd:1f:f1:d5:7d:8f:a1:7f:53:1c:3c:fd:38:44:
a5:81:79:11:b9:0c:98:b5:7d:1b:ea:94:e9:ce:0d:b7:cf:2e:
5a:00:93:4f:27:ac:d9:47:f0:54:a6:0b:4e:c9:e6:4a:50:8e:
b8:ac:f1:94:bf:61:04:45:5a:ad:2b:52:67:dd:1b:00:dd:a4:
98:ec:5c:4d:d1:51:c0:72:18:26:aa:b8:90:91:db:27:7f:4c:
a2:fa:41:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:32 2026 by rpki-client