
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json)
Hash identifier: mad86AJti+oZb4i0PLqLGJSjYqLz0XckqWQDpKljQVE=
Subject key identifier: 2C:FE:CD:BD:07:21:60:09:15:50:8F:E1:EF:4F:DF:73:19:FB:14:C9
Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA
Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
Manifest number: 01F8
Signing time: Wed 25 Mar 2026 02:39:23 +0000
Manifest this update: Wed 25 Mar 2026 02:39:23 +0000
Manifest next update: Wed 01 Apr 2026 02:39:23 +0000
Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: e9eZEB8EI3s0v7V1eCkldCTigpF1gRM/TWk5USY0ebs=)
2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: I+nMBsoAOQUiZCzFaQB/KvumSoVrGOcDZwsmBZeS6yw=)
3: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: zTVOLFIEBPDpPfLXlenxlDqoCu7oEt/TG+aQAHRnkO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl
rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
Validity
Not Before: Mar 25 02:39:23 2026 GMT
Not After : Apr 1 02:39:23 2026 GMT
Subject: CN=69c34adb-2cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:2d:5a:2c:ab:bb:6e:cd:42:1d:41:14:c4:
11:b4:7a:4c:e7:f1:ea:e5:27:ff:55:c4:f9:88:cc:
11:78:05:c3:c5:40:38:a3:e9:eb:33:1b:ae:d5:58:
59:00:e7:f8:bd:85:7d:6d:eb:8c:d4:53:9f:4f:a4:
c0:86:89:c8:96:fd:99:31:6b:66:42:c3:48:62:83:
35:88:2f:a5:62:a8:ed:4d:bb:9a:0f:6e:c0:1d:b7:
73:10:82:70:d0:46:8e:43:b0:ae:f5:b9:d0:ea:6c:
49:2c:a8:7e:bd:b7:82:4b:e7:c0:e1:6e:87:0c:84:
d9:68:20:f2:18:7d:ef:1c:a3:9e:5b:a4:22:68:fd:
ac:10:49:ac:76:03:e7:27:6d:42:a2:2b:c7:b7:c7:
fa:d1:86:79:e6:4f:a8:5c:24:d1:45:95:28:ee:30:
8e:67:e5:52:07:79:3b:dc:6c:b6:85:44:5f:4b:8b:
00:bf:fe:e8:a3:8c:3b:d8:09:c3:7c:d1:e1:95:7b:
e4:af:b8:5e:bb:eb:9f:b9:11:e7:30:f7:f1:55:e9:
ac:78:43:81:b9:77:dd:a3:c3:2f:54:4b:30:e7:7e:
54:ed:83:7d:1b:ec:d8:c7:82:cc:5d:de:02:63:35:
b4:ef:dd:14:8a:45:0e:48:ca:e7:0e:0d:61:6b:95:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:CD:BD:07:21:60:09:15:50:8F:E1:EF:4F:DF:73:19:FB:14:C9
X509v3 Authority Key Identifier:
keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:83:90:c5:11:23:fb:d8:41:ee:33:ac:61:6e:db:96:1f:31:
a0:34:21:ce:38:42:99:36:5c:64:6e:5b:56:ef:69:4e:f8:eb:
76:67:a9:b5:e9:1f:e6:10:2d:a8:8f:42:ec:ea:99:fd:f8:b8:
dd:07:ca:fa:dd:3c:b6:3d:6a:d1:c4:59:4d:5e:96:b9:d4:56:
da:47:41:b6:d7:8d:ed:9e:24:86:37:cc:68:ca:4a:35:c2:77:
30:41:3f:23:89:38:15:eb:df:3b:46:7c:bb:5f:66:80:d5:b4:
65:07:43:eb:25:26:75:3c:4f:fb:31:69:ee:c9:5f:2b:bb:9c:
2a:8a:af:1d:fd:6d:c1:b4:8f:d3:32:a6:7b:dd:b2:38:18:f7:
59:1e:e9:d7:03:ff:5b:a9:19:16:a4:3c:ae:dd:26:ef:56:d8:
e6:b9:d0:0e:be:0c:8a:a8:6f:95:d6:25:c6:dd:d6:28:8f:60:
d3:14:1d:33:6d:3d:49:65:0b:b5:56:3b:90:b8:ee:b3:54:4e:
5b:25:3b:79:f1:b1:4e:3b:34:ee:13:12:84:c9:9d:5a:ab:db:
c0:0b:ec:69:e6:57:5c:26:d2:58:2d:f5:ec:7c:f1:3d:15:27:
80:87:57:0e:62:75:10:a8:b2:32:44:9a:7f:20:ba:b9:2b:ed:
de:13:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:59 2026 by rpki-client