
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
File: 0TPfZxvFk0ayGhHuzAit0MCiCQo.mft (raw, json)
Hash identifier: Z/0+F9QFU2Et03HcHip8eDOzJAzfdxdZc/N732rk9Vg=
Subject key identifier: 3D:8A:45:F5:99:69:0F:8E:F0:1D:9C:62:A8:08:82:EA:CE:88:EB:80
Authority key identifier: D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
Certificate issuer: /CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Certificate serial: 0848
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
Manifest number: 0848
Signing time: Thu 26 Mar 2026 20:40:39 +0000
Manifest this update: Thu 26 Mar 2026 20:40:38 +0000
Manifest next update: Thu 02 Apr 2026 20:40:38 +0000
Files and hashes: 1: 0TPfZxvFk0ayGhHuzAit0MCiCQo.crl (hash: pW36Kt9oTKEbKk8Nm/2YOKADtSbjRGBgmSSKZHWrTJI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl
rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8276, serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Validity
Not Before: Mar 26 20:40:38 2026 GMT
Not After : Apr 2 20:40:38 2026 GMT
Subject: CN=69c599c6-c6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:dc:dc:05:c7:af:f5:5c:07:2b:07:24:cd:73:
f0:da:2d:c3:10:38:ff:60:be:2d:5c:9b:e2:20:8b:
2f:d8:29:d3:c2:cf:45:26:b1:13:d9:32:85:ef:9f:
8d:64:a0:d5:f0:9b:ae:ac:47:2c:df:6b:82:a7:2b:
45:ec:a1:47:96:09:ab:eb:0e:77:92:ba:b8:a0:65:
5b:15:4a:33:d7:0b:1c:80:cb:c7:2d:1e:38:e9:d1:
c7:e7:a6:29:36:6f:d6:61:6d:b5:e7:08:12:b6:23:
e4:0b:71:5a:17:59:f3:c6:d7:87:b9:61:02:40:26:
95:64:93:03:3f:a9:5c:81:4b:59:4b:0f:1f:a8:36:
36:52:e9:56:0d:31:b9:77:c9:91:67:1f:52:da:fc:
03:2f:a6:88:35:a9:d0:94:05:28:cc:e2:15:13:a5:
9a:f0:b9:e5:ec:b1:59:6d:3e:ba:f0:ea:b1:70:7a:
d1:e3:98:f8:cb:26:48:5c:50:70:d9:98:d0:42:46:
4f:b0:aa:76:c7:18:3a:67:72:4e:14:15:da:da:f7:
c8:66:52:0d:f8:76:1a:08:3c:58:d4:1a:f0:b1:92:
78:c9:87:84:dd:23:3a:6f:64:e9:e4:24:c3:92:eb:
60:7b:58:78:69:49:ef:fd:59:66:31:32:8d:4d:4a:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:45:F5:99:69:0F:8E:F0:1D:9C:62:A8:08:82:EA:CE:88:EB:80
X509v3 Authority Key Identifier:
keyid:D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:74:56:89:a8:04:b5:9e:3f:02:11:70:48:f3:41:5e:f1:c1:
ed:3c:79:c3:3b:78:ab:7a:0d:9e:f0:41:d5:11:8c:cc:9a:82:
53:a3:46:38:66:7b:9e:86:ed:41:e7:70:b9:05:9c:50:fb:18:
98:53:b9:8a:48:54:1b:8d:a4:f7:64:c9:e2:36:7b:a7:e1:d5:
10:e5:44:52:a2:19:36:3f:80:56:17:d7:1b:6c:4b:8a:f3:51:
85:d1:b5:cb:82:1f:6a:96:d4:d8:74:85:78:d8:78:81:0c:8a:
0e:c3:a9:a2:1b:fa:26:a0:36:5a:da:04:2a:b5:ee:84:eb:bb:
b5:d8:cb:2e:b2:fd:42:f3:3e:51:f3:39:77:e4:64:67:7e:cd:
ea:1e:df:01:30:38:34:a6:c8:ce:bb:a0:49:23:98:f7:ea:6d:
70:46:07:12:25:23:4c:4a:8f:9c:9f:bd:a3:08:d2:8e:a2:be:
8c:e1:9b:e0:36:cb:c9:03:b6:f7:1d:23:f4:59:36:af:dd:5a:
46:a3:63:31:7f:45:8d:a4:87:66:a7:9b:fc:fd:fc:bb:6a:b6:
3b:1b:d7:9d:45:f1:97:21:f8:a1:62:f8:aa:b6:78:e2:7a:26:
08:c4:00:d1:62:39:97:4c:7c:b2:d6:73:9d:c7:5b:9f:33:8e:
27:d7:4c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:25 2026 by rpki-client