
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
File: RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json)
Hash identifier: 90CLjZisPncAYpnLICk/FTXofKEzUyH1CpmPWmXGnxE=
Subject key identifier: 8F:47:8F:33:F9:2B:8B:70:95:24:E4:DC:63:FF:E5:B7:97:81:6E:B4
Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90
Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
Certificate serial: 031A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
Manifest number: 0314
Signing time: Wed 25 Mar 2026 00:48:36 +0000
Manifest this update: Wed 25 Mar 2026 00:48:35 +0000
Manifest next update: Wed 01 Apr 2026 00:48:35 +0000
Files and hashes: 1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: XEoBI0KbhjSVWAr9a9ZqSrKrs7ijHHmphIVpOZafWW4=)
2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: extwZoZ4o7qFht4F8tbdr5isEJa1lOyoukk0O3tlrPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl
rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
Validity
Not Before: Mar 25 00:48:35 2026 GMT
Not After : Apr 1 00:48:35 2026 GMT
Subject: CN=69c330e4-3444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:b1:fc:fb:e8:4d:b4:f6:08:7f:f6:6c:0c:
40:26:d1:33:14:e6:54:fd:16:f8:68:d1:cb:5c:9b:
a3:26:8f:a3:33:25:c7:67:30:41:f7:70:19:39:d1:
d9:d6:dd:ae:3d:6c:c7:e9:ae:bf:cc:a6:c7:85:06:
f8:23:f5:af:be:b8:d2:72:c7:ac:42:72:2e:ef:29:
3d:99:e9:dc:d9:ff:78:36:65:fd:9d:17:5e:3e:4f:
b1:86:5c:24:fd:77:43:9c:c5:d1:58:e0:5c:1a:e4:
63:0f:89:da:9c:f7:2e:b3:fd:dd:d9:07:1b:3a:4e:
0b:63:88:43:0e:0d:89:41:e0:72:a6:c2:8e:e1:42:
fb:19:41:c2:9b:f7:19:c8:40:66:cf:33:b4:7a:1f:
e7:60:98:54:07:e7:d8:10:c5:f9:b5:52:0e:5d:30:
fe:fb:b6:1c:8f:ed:b6:8c:e6:1f:b1:00:8f:64:ba:
95:7a:cc:c6:2f:15:a1:51:66:08:eb:b2:2c:be:f0:
e3:9b:55:f9:2a:23:a4:06:8e:26:30:f2:ae:a3:64:
32:a1:93:a9:4e:23:c6:52:76:40:59:22:fd:3f:13:
76:46:9a:0c:46:43:88:ff:1a:a8:ac:7f:d9:bc:b5:
b3:e4:65:51:f9:27:68:91:6c:11:1b:91:80:af:6f:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:8F:33:F9:2B:8B:70:95:24:E4:DC:63:FF:E5:B7:97:81:6E:B4
X509v3 Authority Key Identifier:
keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c3:36:a4:ef:2e:b6:77:86:d5:1f:78:91:e7:30:65:e6:ad:
b6:e8:75:7d:b6:41:71:34:c7:86:a3:e9:cd:a9:f1:1f:91:8d:
de:0c:15:cd:3a:32:ee:9b:c4:88:93:5a:64:e0:d4:68:1c:b3:
f2:4f:8b:62:dd:d8:17:bc:73:fc:a3:d6:63:cc:c5:99:43:f7:
65:94:ae:0d:d8:47:e7:58:99:f7:f6:dd:e0:2a:53:a6:4d:82:
f1:39:e3:fa:8d:16:13:b0:9b:05:1d:1d:ee:fe:2f:cd:00:b2:
ef:57:42:50:5f:b1:6b:1d:81:c0:fe:25:c0:ab:91:ab:89:65:
4d:46:68:03:1c:b7:7d:0b:60:bd:34:5a:89:61:8b:2e:fa:da:
55:31:32:2c:f5:ac:0e:b6:e4:78:00:b0:53:07:ab:b3:2a:cd:
6c:99:70:c5:c4:7e:4c:a0:8e:43:89:ad:2d:7e:2f:d3:b2:64:
5e:05:a1:d6:0c:f8:8d:b6:4d:90:1d:87:58:c1:25:47:21:1c:
70:85:09:02:64:1d:56:bd:94:f6:08:02:e7:47:8b:f4:fd:40:
92:41:45:0c:dc:72:86:32:e8:1c:c6:48:90:48:ee:43:7d:84:
b9:40:b5:cf:e1:89:3e:23:12:81:a0:40:6b:62:2e:a3:aa:f9:
ee:2a:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:29 2026 by rpki-client