
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json)
Hash identifier: jnMNRXyzs7dA2/gzfN7WEHbBOh98cITdmPkPTSEdVl4=
Subject key identifier: 4D:17:A0:0D:BD:DD:A5:55:AB:2F:23:2B:0B:C1:66:3D:A9:64:E3:E5
Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Certificate serial: 02D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
Manifest number: 02CD
Signing time: Wed 25 Mar 2026 01:02:28 +0000
Manifest this update: Wed 25 Mar 2026 01:02:27 +0000
Manifest next update: Wed 01 Apr 2026 01:02:27 +0000
Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: WHMetaSgADxgj9hYA8dJQn9YKnuz0jj2YlDJHl4HJKM=)
2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: 3EomuYTOYpdRonmxsDgyICA/moRstX6OW0zEPClInuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Validity
Not Before: Mar 25 01:02:27 2026 GMT
Not After : Apr 1 01:02:27 2026 GMT
Subject: CN=69c33424-cf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:bb:b8:6a:59:f9:c3:b2:96:08:60:a6:5a:
72:27:89:a2:e7:15:6b:5a:ec:fa:08:2a:59:6c:03:
a9:89:10:39:80:7a:80:77:f2:85:27:32:5c:58:09:
36:86:e2:8c:91:3e:db:b6:7c:a0:e4:ba:ee:4f:0a:
f6:66:07:4b:d6:81:97:da:07:74:f8:e5:73:0e:cc:
47:d4:53:b1:b9:ea:6e:7d:5f:09:67:bf:af:d1:8f:
65:b8:8b:d1:3e:63:f9:4b:f2:2e:32:3f:24:87:a2:
a9:b3:a4:a2:62:19:47:dd:ef:cd:b9:f7:ac:9c:a4:
37:aa:17:39:a3:dc:07:94:2a:99:3e:ff:15:c1:8b:
f0:4b:6e:7f:b5:22:be:39:d3:c7:2d:8c:9a:42:e3:
71:4b:a4:22:0e:45:0e:de:4d:9a:80:c1:a0:13:2c:
fb:f2:e7:11:4e:9f:26:e4:be:7c:8f:76:aa:35:7d:
26:7a:eb:3e:44:e3:ab:48:c2:90:af:04:e6:e0:ac:
eb:d0:0b:a5:98:d0:dc:f9:20:08:6c:43:fd:0e:55:
a7:97:28:76:19:a4:aa:56:2b:b7:5c:4e:11:dd:e0:
1b:37:29:cc:55:82:64:dc:53:07:c4:bd:5b:c7:77:
58:86:5e:6a:57:5d:9f:d4:6c:a0:29:b6:9e:b1:2a:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:A0:0D:BD:DD:A5:55:AB:2F:23:2B:0B:C1:66:3D:A9:64:E3:E5
X509v3 Authority Key Identifier:
keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:39:32:31:e4:45:e0:83:1f:25:e6:14:04:c5:6e:3b:4e:e9:
be:1d:b2:43:dd:39:e6:09:00:0f:c2:31:f4:7c:ef:7b:dc:b8:
49:d4:73:52:56:8e:ae:28:49:82:67:24:ae:17:33:8b:7d:1d:
cc:3c:02:88:b5:e7:f7:e1:cb:02:a9:6c:a6:63:37:b4:c1:e5:
b2:7a:31:d2:63:60:31:63:aa:af:58:4e:5f:7c:1d:91:53:f5:
43:7b:c2:e9:fc:39:51:a1:ad:56:fd:c5:0a:b0:46:1f:14:51:
a4:82:14:1a:11:bb:fd:98:9c:01:5e:55:b9:ed:b5:bb:5f:09:
df:f1:84:5b:1f:3e:9f:60:43:21:c0:82:c5:e0:08:2d:16:b2:
2b:ce:00:6e:09:d0:07:c5:40:44:f4:9b:63:99:f9:64:78:12:
ea:c5:57:0f:54:28:82:c8:c7:dc:d0:0a:33:fe:d0:e9:75:a0:
38:23:20:b7:d9:ac:46:56:c8:08:2f:8c:27:f6:d4:b2:0d:c5:
e6:98:2c:53:4b:c0:68:97:bf:02:6f:d7:dd:64:a2:85:85:67:
ab:52:8f:9d:9f:06:24:5d:f4:e7:72:5f:77:67:e6:63:f4:a0:
59:be:82:00:b5:de:42:6f:ca:b0:dc:07:6b:23:5a:4d:f2:b5:
8b:43:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:08 2026 by rpki-client