
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json)
Hash identifier: rh1fpzay7v4//MdCHKK0HXyqCY2nLDSsid1TyRlN5f8=
Subject key identifier: AB:D1:6A:D0:0B:A3:99:32:1A:59:83:F2:4C:2D:72:D7:D6:4D:D8:85
Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49
Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
Certificate serial: 0D44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
Manifest number: 0D39
Signing time: Thu 26 Mar 2026 17:58:02 +0000
Manifest this update: Thu 26 Mar 2026 17:58:01 +0000
Manifest next update: Thu 02 Apr 2026 17:58:01 +0000
Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: tCz6SEIhqumqnOhb0imJ8X+VB++qISNJL4zU44sdabw=)
2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: Ffz0/550gPeWO1uoSNPGxqvr0nsdzbXHysPRag2LkXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl
rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3396 (0xd44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
Validity
Not Before: Mar 26 17:58:01 2026 GMT
Not After : Apr 2 17:58:01 2026 GMT
Subject: CN=69c573aa-fd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:c8:1e:d3:1a:13:7c:c2:de:4a:99:a4:40:
9b:c1:53:ef:cf:2b:d6:83:bb:4e:ee:10:f3:43:5a:
cc:19:9d:a0:41:8c:e3:a4:5f:bc:45:66:ef:a6:22:
7e:26:96:7c:57:62:3a:9f:ed:03:e4:03:98:1c:bc:
87:4d:32:4d:99:38:39:6a:fd:69:20:56:d3:ba:bf:
45:0c:86:f8:7c:99:76:03:c4:a9:7f:a2:bc:4b:0d:
e0:48:18:2a:86:79:96:3e:a0:c6:d5:45:b6:1a:80:
d3:34:c3:5d:2e:a4:a8:6e:ed:4d:2d:25:e2:a9:9a:
11:45:13:a3:9b:15:ba:fb:52:11:9a:0d:d5:34:f5:
fb:6a:62:07:51:f7:d1:90:68:fc:74:5f:6d:8c:40:
e3:0d:82:8d:c3:15:5d:36:7b:d8:e9:c9:09:3a:08:
6b:ab:72:db:55:df:73:55:b5:cc:c4:04:b6:d1:ae:
a5:cc:c3:31:80:5a:10:49:08:0c:a7:93:a8:9e:d3:
61:2e:36:5a:fa:a9:3c:7e:92:a4:14:1b:34:71:ea:
d1:bf:05:bd:35:61:7e:21:d3:8c:73:03:c9:b0:2a:
a6:48:6d:a2:9f:7d:c7:1f:d7:43:5f:a5:70:a1:af:
2e:f5:d0:29:7b:d0:9f:d6:6c:1e:30:e9:21:dd:c6:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:6A:D0:0B:A3:99:32:1A:59:83:F2:4C:2D:72:D7:D6:4D:D8:85
X509v3 Authority Key Identifier:
keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3f:d2:ac:de:03:6a:8a:89:83:cf:81:45:f1:67:fa:25:4e:
c1:0f:15:ab:98:42:36:d5:e1:41:8f:94:f5:33:2d:17:f2:ce:
ed:fe:be:de:c4:ee:80:26:7d:1a:40:d0:c2:af:fe:dd:8d:83:
7e:94:ca:3d:7c:01:dd:b9:10:f0:fb:fb:ce:bb:b1:75:1a:ad:
0d:ed:e8:87:77:84:07:01:19:52:1c:a3:44:97:3c:c1:ea:10:
15:d6:09:59:52:6e:02:bb:a7:d3:3d:9c:04:12:59:52:63:35:
4f:06:8a:c6:46:3c:f3:72:49:b0:29:6c:6a:0a:b8:1b:be:55:
3b:c5:95:24:25:85:8d:0e:db:68:06:68:15:d1:c1:6f:fc:81:
b7:5a:4d:86:bf:cb:2b:6d:b4:fd:6f:31:2e:7b:e5:78:2d:a9:
08:75:a6:81:aa:2c:04:d4:2b:51:4b:41:1a:f8:4f:01:5b:93:
2b:ae:72:ce:e5:27:48:3c:58:69:09:9e:05:8e:ac:e4:50:31:
64:66:87:df:df:90:0c:5d:e2:1d:73:d0:81:43:e1:4b:08:94:
98:a9:07:24:22:c8:76:08:c1:8a:54:dd:09:64:f8:dc:3c:7f:
50:57:5e:c7:d2:23:2c:30:c5:4f:3e:9b:fd:1f:0b:5a:55:05:
f9:45:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:24 2026 by rpki-client