
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
File: ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json)
Hash identifier: dfPstjjJEXpT8FuSv+e544d3qVyRxDKtEOHhXlO5z6E=
Subject key identifier: D0:E5:28:F5:BC:9D:05:72:0E:B7:33:1B:87:D3:71:3F:A2:0A:60:D6
Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
Certificate issuer: /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
Manifest number: 79
Signing time: Wed 25 Mar 2026 07:00:48 +0000
Manifest this update: Wed 25 Mar 2026 07:00:47 +0000
Manifest next update: Wed 01 Apr 2026 07:00:47 +0000
Files and hashes: 1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: Y31x6XsZTmJA9jo1Ek4MFQVL0OO5RsQNYsjHwKq89Mg=)
2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: mhTd4sXqZQkM0yZzJxLZu/7dsOvN9ird2NK8A1L8tLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Validity
Not Before: Mar 25 07:00:47 2026 GMT
Not After : Apr 1 07:00:47 2026 GMT
Subject: CN=69c3881f-d153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:50:8e:8b:bd:8e:28:d6:85:45:1c:4b:5f:
59:1b:48:a7:82:47:79:9c:f6:9e:86:79:77:f4:7a:
3f:01:ba:2a:94:27:37:3d:1a:7c:0d:0d:22:06:57:
f8:96:10:30:d5:b9:56:d8:ab:60:57:b7:51:dc:01:
61:a7:0f:e5:a5:43:50:fa:f6:b7:f2:c4:d4:e7:64:
60:62:e4:75:21:69:8a:e4:04:2b:ee:8d:f8:28:bb:
a7:0a:08:ed:d7:25:29:95:f9:b0:f7:f9:12:bf:6f:
4c:ce:44:1c:9c:3c:38:d2:4f:bf:d5:37:0f:34:5d:
76:3b:30:4c:61:8d:bd:e7:dc:44:d5:54:bc:52:4c:
79:9b:91:48:3c:e2:c6:fb:c0:c9:fd:32:fc:a5:c5:
ea:1e:0d:ec:63:7e:6c:08:36:01:e1:b5:41:39:8e:
8f:69:78:0e:75:55:d5:db:a6:5d:58:a8:7e:5d:ee:
84:64:07:6a:ce:79:9f:9b:16:b5:7b:0e:51:ae:dc:
e9:b7:f3:99:9c:ac:2d:19:2e:62:81:8c:dd:00:8d:
21:95:c9:83:6f:be:21:31:e3:04:71:ad:d3:c5:f3:
4c:66:a8:ec:16:3f:d2:18:74:17:34:81:80:c2:aa:
b7:7b:e9:e2:f3:e3:60:e3:0c:0d:f9:a0:f3:fa:9c:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E5:28:F5:BC:9D:05:72:0E:B7:33:1B:87:D3:71:3F:A2:0A:60:D6
X509v3 Authority Key Identifier:
keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:9d:71:30:55:f2:9c:ad:2b:83:bf:42:58:c6:d3:20:c8:4c:
51:64:1e:6e:d6:9b:2d:51:12:7c:52:e3:b2:94:f0:c0:f3:3c:
ee:c6:2e:96:15:42:2b:98:76:3d:95:4a:34:69:e6:ae:cf:71:
10:d3:9e:ff:04:70:3b:a3:24:b9:27:3a:c4:ef:06:23:b1:87:
23:1b:b9:a3:92:24:28:a5:11:94:2d:29:81:94:65:6f:63:62:
7e:74:17:7a:67:30:a0:59:08:55:fb:b5:41:67:73:a4:22:f1:
82:c7:b1:a5:45:25:b1:4a:bc:ff:59:c6:49:94:4a:d1:16:90:
45:3d:b7:30:48:3d:2d:ea:3a:c5:cf:14:e7:03:2b:ac:b5:f9:
e2:00:b9:ed:cb:5d:1d:96:12:e6:e8:10:b7:fc:8e:9b:eb:13:
66:8e:a8:c7:25:98:1e:bb:fb:ba:0b:04:8b:16:86:01:66:03:
ac:50:4a:59:e5:40:e8:19:55:6c:50:80:96:16:4f:61:03:61:
3b:66:33:f8:0e:32:3d:95:b8:e2:85:cc:9e:87:04:32:b2:fc:
00:cd:9d:5b:fe:81:05:ca:04:c7:17:3f:0a:9a:34:ce:5a:5e:
a8:c5:a6:9c:78:56:7d:07:a7:b1:46:9e:71:a3:40:54:4e:19:
68:75:bf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:29 2026 by rpki-client