
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json)
Hash identifier: e/vws2L+vQ0e7MqbFmF1F9nCjqi6AgRsDr6YxZby10Q=
Subject key identifier: 3C:97:0C:ED:48:83:1A:72:FE:5E:7C:7A:2D:7A:2C:FA:C8:53:F5:C5
Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9
Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
Certificate serial: 0939
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
Manifest number: 0931
Signing time: Tue 24 Mar 2026 19:59:20 +0000
Manifest this update: Tue 24 Mar 2026 19:59:19 +0000
Manifest next update: Tue 31 Mar 2026 19:59:19 +0000
Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: SHB2LxVbXutGqdL9qqpDeX6HKxktdRYo2IiYpjyfnBw=)
2: 6A3C327ABD1711EA8A3C8E20C4F9AE02.roa (hash: TbPU17bpo04BFh9lrKGXrNBNTfQf592zMrLzg3O+aNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl
rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2361 (0x939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
Validity
Not Before: Mar 24 19:59:19 2026 GMT
Not After : Mar 31 19:59:19 2026 GMT
Subject: CN=69c2ed18-b02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:f0:9e:fd:d5:a8:62:04:0c:19:06:6d:c0:
20:1b:be:b6:8e:95:59:20:89:22:ce:0a:81:ad:36:
f6:3b:0a:ad:74:d4:d5:5f:76:fe:a9:94:6f:36:64:
1f:14:bb:77:2a:b9:b7:6d:7e:dc:59:11:e4:eb:d4:
99:c5:c5:c4:39:3f:77:7f:01:64:aa:fd:e0:92:59:
e0:34:8c:e9:4a:52:2a:11:45:ce:3a:88:c4:6b:8d:
dc:f5:55:be:bd:1b:7a:ac:4f:6f:2d:23:6e:cf:2b:
bd:33:61:38:9b:fd:40:69:5e:d7:d7:96:cf:41:80:
b0:d5:65:4c:72:ea:8a:9a:fe:44:1d:86:54:8e:02:
07:fc:fb:40:dc:38:b6:30:51:36:56:c9:93:be:e9:
7d:a3:b0:5b:b4:b9:50:dc:eb:a6:b8:1e:c3:38:92:
9c:f6:5b:c0:1d:59:45:31:78:c2:5b:1e:36:4d:9a:
7b:e5:ff:8e:8e:3a:23:1e:12:1d:e7:b0:b5:2d:5c:
14:af:35:b7:ad:bf:3b:03:be:f9:69:c8:b4:29:ff:
f7:e1:c0:5f:9f:a4:e8:6c:6e:22:95:3d:80:f5:69:
e4:1c:5e:e4:c8:93:ce:10:26:4c:60:f8:53:2e:6b:
a1:bd:5e:bf:57:a1:61:21:c1:e1:a9:eb:74:d9:51:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:97:0C:ED:48:83:1A:72:FE:5E:7C:7A:2D:7A:2C:FA:C8:53:F5:C5
X509v3 Authority Key Identifier:
keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:04:eb:c3:87:11:97:47:42:fd:32:a3:95:3d:8f:45:8b:7f:
e8:d1:35:ad:6f:a0:25:76:fd:1e:22:13:ab:f5:86:24:9d:5f:
b1:aa:15:ec:46:66:e7:7e:1e:50:02:f9:b5:92:30:c7:49:15:
86:db:9f:0f:c8:e9:04:d4:28:6d:4c:7e:8d:fa:9b:b4:88:11:
ac:db:b3:8d:08:a4:26:07:c4:09:92:38:87:bb:40:7e:5a:34:
c1:b9:05:4b:c1:8c:da:b9:d8:6c:f9:60:6d:38:10:70:61:7d:
c0:a3:59:37:30:15:a3:2c:ff:32:91:da:dc:5d:96:9a:62:21:
eb:05:b3:8b:eb:df:dd:50:10:3b:64:13:36:cb:59:84:4a:d2:
2c:d6:a9:94:37:1d:d5:4b:c8:09:f5:04:59:62:75:6f:97:cc:
35:60:03:fa:e8:ce:f1:94:28:58:88:a8:13:cc:f1:3e:ce:db:
3f:50:a7:83:f0:ff:ce:f1:67:a3:22:e2:c9:1c:94:2d:84:8d:
46:e0:2e:5c:93:e8:01:75:53:78:18:75:48:61:e8:f1:16:b0:
81:be:80:89:cd:dd:a5:22:ab:ba:bc:97:74:a3:56:15:7a:0a:
35:90:8d:05:ae:20:45:ed:9a:77:a0:62:1f:03:1a:c1:8d:7e:
ab:28:ab:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM4QzQxMTAvBgNVBAUTKDkzN0Q5OTUxRUUxRjkzRkNBQzI0MzMzQjA4M0Y5RDdG
MkUzOUYwRjkwHhcNMjYwMzI0MTk1OTE5WhcNMjYwMzMxMTk1OTE5WjAYMRYwFAYD
VQQDEw02OWMyZWQxOC1iMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlzwnv3VqGIEDBkGbcAgG762jpVZIIkizgqBrTb2OwqtdNTVX3b+qZRvNmQf
FLt3Krm3bX7cWRHk69SZxcXEOT93fwFkqv3gklngNIzpSlIqEUXOOojEa43c9VW+
vRt6rE9vLSNuzyu9M2E4m/1AaV7X15bPQYCw1WVMcuqKmv5EHYZUjgIH/PtA3Di2
MFE2VsmTvul9o7BbtLlQ3OumuB7DOJKc9lvAHVlFMXjCWx42TZp75f+OjjojHhId
57C1LVwUrzW3rb87A775aci0Kf/34cBfn6TobG4ilT2A9WnkHF7kyJPOECZMYPhT
LmuhvV6/V6FhIcHhqet02VF7NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyXDO1I
gxpy/l58ei16LPrIU/XFMB8GA1UdIwQYMBaAFJN9mVHuH5P8rCQzOwg/nX8uOfD5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhDNC9DMjQ0QzgzQUJE
MTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0ZmtfeXNKRE03Q0QtZGZ5NDU4
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2szMlpVZTRma195c0pETTdDRC1kZnk0NThQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzhDNC9DMjQ0QzgzQUJEMTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0Zmtf
eXNKRE03Q0QtZGZ5NDU4UGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxgTrw4cRl0dC/TKjlT2PRYt/6NE1rW+gJXb9HiITq/WGJJ1fsaoV7EZm534e
UAL5tZIwx0kVhtufD8jpBNQobUx+jfqbtIgRrNuzjQikJgfECZI4h7tAflo0wbkF
S8GM2rnYbPlgbTgQcGF9wKNZNzAVoyz/MpHa3F2WmmIh6wWzi+vf3VAQO2QTNstZ
hErSLNaplDcd1UvICfUEWWJ1b5fMNWAD+ujO8ZQoWIioE8zxPs7bP1Cng/D/zvFn
oyLiyRyULYSNRuAuXJPoAXVTeBh1SGHo8Rawgb6Aic3dpSKruryXdKNWFXoKNZCN
Ba4gRe2ad6BiHwMawY1+qyirQA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:43 2026 by rpki-client