
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
File: c27zV-8j8z6sB7J06l4_7A3-5Yo.mft (raw, json)
Hash identifier: viunmQw+bqooCWR+jIodc8uRMUGJWG1wBTwMfd1sZ10=
Subject key identifier: B9:2F:79:1D:E8:C7:D1:FC:3D:79:C9:4D:27:D0:8B:6C:65:E1:C5:36
Authority key identifier: 73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
Certificate issuer: /CN=A91A4ACD/serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
Manifest number: 40
Signing time: Wed 25 Mar 2026 07:39:31 +0000
Manifest this update: Wed 25 Mar 2026 07:39:31 +0000
Manifest next update: Wed 01 Apr 2026 07:39:31 +0000
Files and hashes: 1: c27zV-8j8z6sB7J06l4_7A3-5Yo.crl (hash: NbxDGUsQZ/3lhMS2wvHlFdulOhzAqXJ14aAQeuxuJkY=)
2: B2A566E2CB9B11F0A4EC673AC4F9AE02.roa (hash: IfHqfPuuN3I7BqsHVQ/rF6LxoZBDe7oRliH9Hyof7OI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl
rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ACD, serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
Validity
Not Before: Mar 25 07:39:31 2026 GMT
Not After : Apr 1 07:39:31 2026 GMT
Subject: CN=69c39133-4dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:1b:00:18:e3:1a:88:09:4b:c9:d8:42:21:
ad:98:9c:ba:44:45:47:83:d8:86:28:95:f3:db:dd:
d9:cb:ec:4a:89:3e:42:bf:cc:13:8a:ab:4f:8d:5a:
c1:65:69:7f:c8:33:d5:07:00:28:59:40:26:a1:d9:
1a:78:f6:e0:24:e9:f7:f6:26:56:57:7f:b4:a2:60:
00:55:a0:fd:03:80:cf:a1:da:f8:66:c7:84:58:e1:
a7:07:35:df:32:15:1c:77:da:25:9e:75:c9:78:4f:
8f:c9:b9:f5:cc:69:a2:67:c5:0d:d9:dc:64:c2:58:
d9:bd:da:47:bf:85:a8:26:4b:01:d4:18:09:3a:af:
6e:72:5d:2d:18:3a:3e:01:ff:f5:be:a1:75:ec:6c:
39:af:f2:ad:3f:3a:b0:7b:1e:5e:b6:6f:4f:18:7f:
36:5b:df:c0:cf:f3:39:96:f3:65:19:72:5a:fd:a5:
b0:d7:d5:91:f2:0f:f8:22:1d:5c:20:e3:3e:66:b5:
8d:eb:e5:c5:59:78:36:b2:de:d7:57:07:bd:2f:ec:
61:7c:62:45:76:2f:63:2d:ab:17:54:a8:6a:b1:ca:
c9:04:79:b7:03:1a:22:14:31:6a:72:6b:d9:2e:9a:
8e:19:e1:3b:67:d7:92:a6:28:18:73:5e:49:5c:b5:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2F:79:1D:E8:C7:D1:FC:3D:79:C9:4D:27:D0:8B:6C:65:E1:C5:36
X509v3 Authority Key Identifier:
keyid:73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:aa:c8:90:eb:dd:04:81:58:12:6f:51:9b:27:7e:f5:a3:32:
f9:76:45:39:2e:f1:6d:62:37:a8:b8:84:8d:70:5b:70:51:50:
b0:b8:ff:4f:91:b1:86:2b:4b:57:e7:9b:61:73:a0:3b:74:a5:
77:b4:c3:46:76:e8:e9:15:ad:2b:18:02:9a:bc:b5:0b:0d:f6:
79:2a:6a:a7:3b:aa:e0:61:b5:63:67:eb:19:a4:ed:8c:79:3b:
1a:6d:ed:0d:ee:96:c1:ff:56:84:b4:e9:7d:bb:58:2b:09:d4:
b8:b1:ac:51:34:fd:b0:d4:ce:47:cd:70:e7:3a:cb:26:a6:63:
1f:38:eb:e5:76:7c:f9:33:6a:cf:be:42:5d:a0:34:f6:bf:f1:
d0:c9:4a:df:bc:7a:51:4e:1e:64:e0:93:3c:12:e5:d8:cd:52:
46:00:c9:88:d5:c2:44:cb:27:3f:72:78:59:87:13:70:57:75:
7f:bd:f4:fc:cf:f7:31:38:e2:7a:34:0c:37:1f:8b:a9:98:b4:
d4:1b:01:8d:6e:08:0f:f9:f7:1c:f6:b2:77:1b:e9:f1:67:42:
e3:a2:4a:a9:aa:f3:9e:13:68:fc:88:25:27:b2:65:47:68:73:
1d:21:6b:56:5f:35:be:ad:a1:a3:d2:9b:7f:ac:f7:89:d7:5c:
44:4f:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:39:58 2026 by rpki-client