
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
File: S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft (raw, json)
Hash identifier: BSL6mCCWKWZHwvnyVlZE9VOZ/VfhL73kTYea/HmUdew=
Subject key identifier: 22:FB:EF:2A:50:33:D8:9E:96:DA:E8:89:92:A5:4D:E6:DD:CA:C4:5D
Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35
Certificate issuer: /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
Certificate serial: 0342
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
Manifest number: 033D
Signing time: Wed 25 Mar 2026 00:38:48 +0000
Manifest this update: Wed 25 Mar 2026 00:38:48 +0000
Manifest next update: Wed 01 Apr 2026 00:38:48 +0000
Files and hashes: 1: S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl (hash: ZjznVgrWAixW3q1BxGPCqF3HLVr57XB+ecEwHUGrDdk=)
2: 0C2902B4FC3D11ECAD619C35C4F9AE02.roa (hash: 0G8y890AV8+X2YlEAcmnQRZ33GxT1e5vDg0b+sSexQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl
rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A40AE, serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
Validity
Not Before: Mar 25 00:38:48 2026 GMT
Not After : Apr 1 00:38:48 2026 GMT
Subject: CN=69c32e98-09c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:2f:10:1d:78:4b:c4:d4:aa:39:85:23:b1:
d2:49:02:71:39:58:6e:c5:08:cb:69:45:e1:ff:d8:
8f:06:79:e8:5f:41:8a:76:8e:37:55:28:03:e4:34:
ae:d9:3d:3d:bb:5e:2b:e2:ee:f6:c6:68:45:84:f6:
ae:93:bf:be:47:7f:eb:ea:f0:e9:4b:ea:88:54:8a:
af:f3:cc:ee:d9:bc:d4:23:28:05:bb:f3:c9:e9:19:
4e:3e:13:14:cd:a5:77:a6:57:aa:d6:91:70:33:b8:
c9:af:8f:5d:c3:b1:0e:bf:f2:7f:1f:6e:75:e8:8d:
a5:e9:62:04:76:1b:92:33:5a:bc:e1:c0:22:10:10:
6d:42:b1:a6:2b:84:de:cc:e4:67:d0:23:2c:d9:47:
31:5e:61:53:99:2e:3e:d6:e2:b1:dc:d7:c6:17:56:
0e:bb:83:9f:61:82:96:40:ef:89:26:c6:7a:21:a8:
2d:bb:fc:ea:d5:f2:3c:ef:3c:d7:7a:e6:6e:b3:34:
4a:89:1b:73:16:c2:06:ae:d1:64:e6:4a:fb:60:9e:
a1:3e:89:30:02:62:87:86:7c:06:eb:27:8a:b8:ad:
11:a0:64:48:c8:8c:5f:e1:6d:ea:35:21:97:35:2d:
d5:ea:6d:57:1c:a5:46:a2:91:b0:4b:47:f6:7d:b1:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FB:EF:2A:50:33:D8:9E:96:DA:E8:89:92:A5:4D:E6:DD:CA:C4:5D
X509v3 Authority Key Identifier:
keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:18:d1:ea:b4:32:89:eb:33:bc:19:89:f1:e0:0e:ae:b5:dc:
1d:e6:e4:ab:9e:f3:ce:8b:3a:09:91:76:4d:c0:79:71:c3:5f:
3c:f2:65:6f:c6:a2:da:d0:bc:ce:ee:5f:97:c1:2a:29:f6:bc:
03:90:e7:7f:bd:ca:87:cf:31:47:4b:3d:ee:78:37:9c:9d:36:
01:70:26:73:ea:93:68:03:c5:b0:87:5c:dc:89:e2:d4:c7:be:
b2:8f:1d:17:a8:de:71:96:fd:9a:38:f1:04:2e:ed:f4:8a:1a:
79:8c:c2:94:76:b1:57:08:e7:cb:5d:d8:64:86:f1:6b:84:f8:
b1:47:1c:07:9d:ba:13:2e:3b:74:bd:bb:b5:01:ac:37:22:7f:
d8:19:52:75:04:eb:45:b7:d0:f1:96:fd:a2:84:a2:b8:a4:e5:
1b:5e:fc:de:de:c9:6b:5c:89:6b:6f:3e:e3:c9:fb:84:32:50:
b1:88:44:53:df:b9:5a:8f:94:47:c9:10:47:99:57:86:bb:5a:
dc:bc:92:14:58:2e:ac:43:3f:2a:cb:93:35:fa:9f:30:3e:a8:
90:94:1a:61:e3:61:e5:b7:b7:71:6e:48:10:f0:e7:c2:91:38:
e0:c3:dd:aa:1c:16:a7:58:a7:45:b9:45:b2:61:f9:ad:07:84:
e3:f6:03:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:19 2026 by rpki-client