
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File: AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier: 4sD/rnfP5HoWwLmAGrykEfddQcxdG71pdhwmRo9sLxI=
Subject key identifier: B9:B7:6E:26:8C:8F:07:6F:5B:D9:70:B0:FD:97:72:3F:85:55:34:11
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer: /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial: 0321
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number: 0314
Signing time: Wed 25 Mar 2026 00:50:51 +0000
Manifest this update: Wed 25 Mar 2026 00:50:50 +0000
Manifest next update: Wed 01 Apr 2026 00:50:50 +0000
Files and hashes: 1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: uE9cpuS4qxDJtmnmJFCkTvLnT0JTbi8XxY/R2OPwLHg=)
2: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: 19rQZpp4Df+lZ6FB4t+WOO+mA6WEBb8HvSNnL/TvyQM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801 (0x321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Validity
Not Before: Mar 25 00:50:50 2026 GMT
Not After : Apr 1 00:50:50 2026 GMT
Subject: CN=69c3316b-35a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:0e:5e:e4:df:e8:78:67:99:43:e2:66:d4:
0c:8a:cb:af:90:9b:ae:1e:65:ce:ef:fa:8a:73:3e:
98:01:4f:e5:86:a3:60:3b:fa:26:e5:fe:30:4c:12:
9f:56:5a:b2:e4:19:9d:30:62:15:28:dc:01:1c:16:
76:f4:8c:07:bf:6e:e5:55:e1:97:29:00:8f:c9:6c:
46:75:1d:80:53:01:04:04:17:54:4c:71:9b:a8:ef:
45:ea:09:a0:a7:89:8d:6f:38:b7:d3:1e:60:70:c5:
d8:86:6b:23:2b:10:11:4e:5d:64:7d:bb:25:a1:30:
fb:10:f3:bd:00:37:68:9c:12:82:43:ee:6c:9f:96:
2f:80:c6:b1:cf:7a:93:ed:6d:1f:3d:9f:0f:43:9c:
93:84:d1:5b:34:97:5f:09:f0:0a:1e:f5:0e:f9:29:
50:92:4d:59:ad:60:60:bc:93:4f:7d:c5:f4:4e:59:
25:a8:c3:52:80:3f:f2:94:03:fc:5a:bb:2b:94:27:
42:e9:54:9f:e7:77:55:db:86:3c:81:33:50:6d:cb:
93:51:ac:f8:b7:69:2b:11:19:c3:84:cd:dc:ef:17:
6a:8e:63:ea:67:69:57:0e:23:3b:99:9e:87:66:bd:
27:b9:ce:6e:4a:d0:ad:e4:46:b7:0b:24:51:16:e2:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B7:6E:26:8C:8F:07:6F:5B:D9:70:B0:FD:97:72:3F:85:55:34:11
X509v3 Authority Key Identifier:
keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6e:85:a9:fd:52:c5:b8:85:08:16:d5:81:92:6d:ac:3f:45:
b0:86:50:6a:2d:90:fd:ec:b7:5c:a9:5c:9d:a0:43:21:bb:c1:
54:aa:7c:9a:10:85:03:a6:c2:5a:f5:0b:04:e4:1a:9e:40:82:
e0:23:4f:dd:0d:f4:d5:a0:99:b7:a9:90:c4:b0:e9:ce:e5:f9:
27:9b:d3:f2:54:28:72:57:4d:f1:e5:ba:81:c1:e9:96:27:3e:
fc:23:ec:fa:aa:ce:44:2d:da:62:ac:63:2a:fc:e8:33:66:ff:
fb:00:f8:26:d3:24:96:c6:8b:cc:04:78:ee:86:d9:47:fb:46:
11:a8:e9:92:68:1d:f5:8d:e4:66:fb:da:a5:dd:b1:85:08:67:
77:1b:ef:72:10:d7:96:b9:66:74:b7:ec:64:06:66:0c:3f:fd:
35:a4:64:da:b5:34:3a:f1:af:8e:c5:f1:c8:8c:ee:4b:46:86:
ca:21:74:7d:52:21:bd:ab:cc:b6:59:6e:23:62:a0:99:10:fc:
25:19:a7:2d:0b:8b:84:22:dd:14:5d:7a:93:6b:2e:a7:3a:0c:
4c:d0:49:6f:1c:17:43:15:a0:91:73:e3:24:48:f3:82:d7:11:
18:c8:25:1f:fc:04:1d:e3:d2:1a:04:b5:fc:ff:c9:ff:d3:7c:
7d:1f:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:29 2026 by rpki-client