
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft
File: A6PIek8tglWUdvcc-u5ST_URNXk.mft (raw, json)
Hash identifier: 53Azp863ESwPiRc0fTIEp0G//OxvVuwlqrxd/WKVELQ=
Subject key identifier: E0:4C:BB:45:0D:7F:B4:EF:E2:5E:42:62:3D:1F:9F:B6:20:9A:52:74
Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79
Certificate issuer: /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579
Certificate serial: 0B9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft
Manifest number: 0B92
Signing time: Tue 24 Mar 2026 18:54:20 +0000
Manifest this update: Tue 24 Mar 2026 18:54:20 +0000
Manifest next update: Tue 31 Mar 2026 18:54:20 +0000
Files and hashes: 1: A6PIek8tglWUdvcc-u5ST_URNXk.crl (hash: OAD2pnnWEul8zLf7GlU+SEiWfJjtxSZKAQw3bqqfN9E=)
2: 6553D6106C2B11EA87ED1160C4F9AE02.roa (hash: Jn+xr+mIwTvl5NEMNXs7bNlAUEv6pI//+6h2YNu6ULc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl
rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2973 (0xb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4CAD, serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579
Validity
Not Before: Mar 24 18:54:20 2026 GMT
Not After : Mar 31 18:54:20 2026 GMT
Subject: CN=69c2dddc-8b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:aa:3c:31:84:82:d7:9f:ed:ef:d8:67:4d:
99:10:03:3e:1f:a5:73:a1:d1:cb:2d:49:15:28:11:
53:e4:a0:4b:73:e5:67:8b:da:6b:fb:8c:c3:91:fd:
30:60:ff:4e:cd:cf:42:3b:38:91:ad:31:77:59:f6:
50:0b:fa:2e:16:4a:93:a7:d8:9e:3a:3e:1e:40:ad:
69:15:64:06:0c:c5:c4:f7:60:e5:91:3c:55:45:94:
f5:a3:e7:99:57:6f:0f:79:a7:1d:fb:63:a6:a5:8d:
97:6b:23:3b:40:98:1f:8f:87:ea:30:2c:59:7f:32:
18:d2:af:19:79:da:08:05:a4:93:bf:82:95:73:18:
6b:34:5f:52:ad:c2:97:71:96:9f:0d:5c:7f:d2:00:
04:e2:e4:af:99:ff:2c:55:11:46:13:55:a3:fb:09:
d4:38:c6:2f:6e:d9:54:bc:df:c3:49:44:5d:4a:ab:
81:fb:8d:35:ae:78:e3:fe:4f:6b:b4:71:92:fe:47:
f5:20:e0:44:20:e5:a4:0c:1e:e6:90:d8:8b:66:3e:
5e:7d:f5:0c:c2:1e:5f:e4:1f:a3:f6:e5:71:39:ce:
6c:16:e1:be:25:5b:02:34:f4:c6:4f:c6:d5:5d:d3:
2a:ea:32:1e:f0:43:a1:f0:5f:8b:73:68:e0:06:70:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4C:BB:45:0D:7F:B4:EF:E2:5E:42:62:3D:1F:9F:B6:20:9A:52:74
X509v3 Authority Key Identifier:
keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ba:db:0b:b1:73:86:37:1a:43:d1:3b:4a:60:68:8f:20:5f:
47:d2:7c:41:6c:8d:13:ba:69:fa:d1:e2:92:7c:b0:be:b4:61:
61:3e:68:b8:7e:93:1a:3f:44:8b:47:34:61:a6:8c:ac:d4:fa:
ee:c4:f5:5b:b2:1f:34:53:65:25:0b:5e:4b:4b:f7:5c:0f:46:
06:9f:7e:74:bf:fc:21:ff:8e:ea:8a:38:d1:4e:f8:bd:48:92:
9d:55:8c:fa:72:d7:21:6c:4b:56:be:13:66:41:84:a7:93:76:
a0:c5:d4:50:ce:b8:77:09:cf:a9:95:3e:32:c5:19:c4:11:c0:
5a:11:e1:0a:39:27:9b:13:d7:66:cc:4f:17:2a:08:79:ee:87:
4d:fb:8b:cc:8b:1d:5c:2e:f3:39:b8:11:e4:2f:ba:0f:17:69:
f5:99:27:cb:f3:3c:80:db:04:b8:4b:bc:dc:4b:0d:cf:9e:51:
23:08:8a:56:34:e5:a0:1b:f1:e2:cc:03:f3:ba:a1:7a:96:51:
76:bd:26:cf:96:9f:a0:ae:82:e9:03:21:59:31:36:81:81:c7:
9a:d9:bb:e0:2f:f0:70:31:79:7f:ea:2f:28:ac:dc:ab:05:77:
86:26:a1:fc:b3:4c:a9:49:c3:8c:ed:44:04:8e:53:b9:c5:02:
d5:8c:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:11 2026 by rpki-client