
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File: O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier: txgu3So2PyLqCqmi5h2ZJKFRH5jn2AX/u9oJRDZI0SA=
Subject key identifier: 8B:C3:08:8C:2A:E1:58:36:FF:30:2E:45:C6:39:DE:97:DF:BE:93:49
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial: 0348
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number: 0341
Signing time: Wed 25 Mar 2026 00:39:22 +0000
Manifest this update: Wed 25 Mar 2026 00:39:22 +0000
Manifest next update: Wed 01 Apr 2026 00:39:22 +0000
Files and hashes: 1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: b5oMEEeE+wwWm+bmmckGGjg+zzO6He0VnXeBINoSS9I=)
2: C78C216A070211EDB5178252C4F9AE02.roa (hash: W6FG+9qCV45ghc4JJDXwCJLeIEHXPGHuRL+5uDqENoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Validity
Not Before: Mar 25 00:39:22 2026 GMT
Not After : Apr 1 00:39:22 2026 GMT
Subject: CN=69c32eba-5a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:7d:27:68:bf:de:2b:f4:be:d0:06:65:e4:
68:8f:0d:71:1d:e7:ad:3f:39:e4:04:87:b4:c8:b4:
d7:e0:3e:83:a8:77:2b:bc:e0:92:7d:f8:b7:e3:0a:
34:f2:a2:85:6b:ee:67:04:91:12:68:29:4d:c8:ac:
2d:66:f1:c2:07:96:fc:f0:e7:0b:3e:9e:6d:e2:e2:
97:32:81:a5:ef:27:e2:e3:15:11:90:eb:4f:36:b5:
bd:4d:f4:95:c1:82:6b:1b:92:c6:35:cd:fe:cd:14:
7b:66:88:54:6b:b0:a1:9f:cf:ba:9f:63:05:39:0e:
ad:4a:46:2c:06:d6:e1:b6:ae:7d:43:fd:82:5e:50:
06:b8:cc:18:5d:dd:75:76:54:34:04:56:b5:72:fc:
34:5f:c7:3c:d0:2c:f9:49:6b:39:0e:3b:89:4e:b4:
85:b5:a4:1e:d4:89:65:47:40:35:da:d5:1d:45:01:
cc:f4:5f:f1:5f:4c:2f:ef:50:d4:d5:d6:a4:df:70:
c8:a8:ac:e3:e4:0b:cc:18:b7:29:a9:5e:04:f1:95:
84:f2:c7:a8:91:fe:6a:3b:06:4f:f9:aa:55:ed:7c:
d0:2b:dc:dc:ac:2f:9b:b4:66:60:b7:45:27:4c:58:
2b:6f:4f:fb:92:e6:ed:4a:2c:ed:11:a1:01:40:98:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:08:8C:2A:E1:58:36:FF:30:2E:45:C6:39:DE:97:DF:BE:93:49
X509v3 Authority Key Identifier:
keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:88:50:ea:a4:66:55:1d:01:65:cf:e0:b8:60:e8:ca:5b:e1:
da:c3:58:3b:0d:1e:c4:35:25:12:76:f0:bf:b2:12:b1:c8:8c:
66:00:5d:6f:e7:4a:b4:c5:0d:c9:fb:b8:df:30:86:17:2f:0d:
88:a1:04:03:94:76:ec:48:66:0c:d1:9f:19:32:13:37:58:9c:
0c:49:21:65:2d:e5:2a:30:8f:d1:9d:b7:bd:2e:59:e5:ca:f9:
9d:3a:88:1f:53:22:42:d8:92:04:22:17:d2:76:5e:c3:a0:84:
5a:c8:cc:63:2a:30:b3:70:fe:9e:0f:f6:b9:07:d1:c1:fb:84:
b7:75:fd:45:01:c1:1a:4e:8a:d8:34:32:b1:37:f8:6e:73:b4:
e9:94:da:90:2d:84:bf:59:7f:6f:92:c0:b2:2d:72:5a:50:cf:
5a:1e:53:75:b6:7b:1a:33:54:86:95:25:f4:7b:00:7a:91:2f:
a0:4a:a6:4e:99:8b:7e:c4:08:15:3f:a2:ee:e2:fc:02:90:ed:
55:87:fe:8d:a3:b1:ae:0c:be:6d:36:e6:e9:df:85:42:33:02:
55:d2:6c:7d:ef:63:9f:f2:30:d0:01:f0:f8:43:8a:a1:de:ca:
6b:1f:fa:fe:56:d8:3b:cb:2d:39:da:1f:33:06:e9:3b:4e:9b:
3f:f8:03:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:15 2026 by rpki-client