
$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
File: aBR3td5WajjZsBVtqHq6-p-vhb0.mft (raw, json)
Hash identifier: fRnlUDB/XwBu8xfNp2uhZXi0dFngkJjo3FKeiBW+xQ4=
Subject key identifier: A5:58:B2:69:E4:06:EE:3C:D0:A2:5C:C4:57:BF:0C:6F:F2:86:EE:A4
Authority key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD
Certificate issuer: /CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
Manifest number: 0121
Signing time: Wed 25 Mar 2026 05:01:42 +0000
Manifest this update: Wed 25 Mar 2026 05:01:42 +0000
Manifest next update: Wed 01 Apr 2026 05:01:42 +0000
Files and hashes: 1: aBR3td5WajjZsBVtqHq6-p-vhb0.crl (hash: 7z1Oig7oU3/mY2YLk9JxFrEib5rgZ3N3I3+9JMzO2nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl
rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91972DF, serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
Validity
Not Before: Mar 25 05:01:42 2026 GMT
Not After : Apr 1 05:01:42 2026 GMT
Subject: CN=69c36c36-d778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:41:7c:c8:69:7a:64:bb:0f:f1:8c:e5:d9:
c6:06:0e:a9:b2:73:6e:50:95:e9:5f:b2:46:2b:ea:
7f:58:c6:79:9d:66:91:c8:e4:44:64:f2:e3:74:ef:
3d:78:ca:6d:73:c4:e8:5b:2d:06:a3:b8:54:09:21:
72:70:e7:0e:50:34:ad:7b:e5:9b:e4:f4:d0:1b:7c:
6d:e9:dd:5a:49:6e:d0:82:f0:b2:23:7b:56:93:15:
8e:31:4c:2c:a8:0c:b4:77:c2:26:07:4a:a2:c6:22:
df:da:1d:1b:6b:65:74:1f:23:cc:f2:0c:c7:24:6a:
f3:04:be:8d:6d:96:36:df:97:33:5d:53:fc:07:8c:
d5:b7:47:a1:3d:66:d0:7b:83:ff:e4:da:39:1c:ac:
47:58:1c:1b:86:03:14:69:eb:9a:eb:71:22:d7:e2:
8a:0e:78:18:a8:ef:60:a4:03:86:7c:4a:61:bf:0b:
cf:84:34:49:ca:3c:da:8c:30:6f:bc:c9:fc:0a:78:
c0:ca:51:08:37:95:35:62:a3:57:71:6e:05:3d:4a:
f4:b5:63:6d:d1:56:f3:33:9b:55:3d:a8:c0:c8:b2:
b4:07:57:9e:79:e5:0f:3f:d3:78:df:27:dc:60:f8:
f3:f9:e1:fe:a3:af:db:43:a4:1f:c6:b2:83:f5:5c:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:58:B2:69:E4:06:EE:3C:D0:A2:5C:C4:57:BF:0C:6F:F2:86:EE:A4
X509v3 Authority Key Identifier:
keyid:68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:8e:2a:b0:aa:e1:65:79:58:12:c1:d9:c9:0c:f3:d0:81:4c:
b0:02:b7:61:37:39:ba:e6:80:82:c9:7e:01:fe:88:16:f7:31:
f8:eb:e6:36:77:a2:df:e9:7b:06:92:d1:a4:98:03:83:0e:72:
49:06:ea:be:86:48:18:54:25:6c:0e:c7:d5:eb:56:cd:9f:ba:
6d:f0:f1:7c:23:90:d5:42:7d:cb:56:05:fa:9c:56:b9:30:5e:
3b:4d:d5:34:ef:47:ef:cb:b4:78:8c:c4:90:1e:bf:8d:6e:07:
cf:d5:5c:62:03:5f:e9:05:be:17:cb:3e:3c:3e:5b:d7:6c:cb:
64:ea:0b:32:5e:f7:4f:7d:a8:21:66:25:94:a8:7c:99:9a:44:
62:96:bb:11:ca:9c:a4:ab:bf:ef:6e:45:67:c6:00:3e:0f:86:
66:b2:43:9f:ef:b9:68:62:78:e4:29:22:ff:36:d6:77:23:c4:
3e:f9:33:21:30:ed:5c:94:26:ac:b2:29:32:5b:3f:7f:3a:75:
f8:9c:86:72:44:7e:df:11:78:1e:21:ad:42:d4:81:e7:f9:6b:
34:7c:79:64:b1:de:26:bd:15:65:84:27:dd:7b:38:c9:64:95:
9d:68:be:3e:b3:8b:4f:8a:11:38:e1:34:13:50:c8:e7:91:de:
da:0b:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:32 2026 by rpki-client