
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
File: odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json)
Hash identifier: euCh8L3vaO2Uk/re6TcNdFwEIIX0jgAaCg46RYvx5ZA=
Subject key identifier: 2D:01:78:47:73:03:B5:8B:38:A9:CC:8F:E5:D7:AD:43:EC:87:39:97
Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8
Certificate issuer: /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
Manifest number: 0126
Signing time: Sun 29 Mar 2026 05:18:10 +0000
Manifest this update: Sun 29 Mar 2026 05:18:09 +0000
Manifest next update: Sun 05 Apr 2026 05:18:09 +0000
Files and hashes: 1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: /nJ/zEToWXCFYi74CTwJAKtRSNEXPjqQQOOihlZqPl4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl
rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 05:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
Validity
Not Before: Mar 29 05:18:09 2026 GMT
Not After : Apr 5 05:18:09 2026 GMT
Subject: CN=69c8b612-1970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:21:fc:9a:6d:03:a2:3a:d7:f8:4b:00:38:
30:ad:e8:4f:a1:bd:9f:5e:59:39:aa:ed:3e:b0:6b:
64:2d:c8:62:81:37:3b:98:41:41:ec:4e:55:e1:be:
4e:7e:c3:92:97:3a:ea:d4:26:3e:12:b9:41:1c:64:
ec:97:47:77:f9:52:87:3a:3c:7b:68:2a:a6:28:ac:
e4:b7:08:9b:29:39:51:85:5e:19:39:c1:67:9b:88:
14:42:92:57:10:75:25:0e:fd:10:ab:a4:fb:b4:ff:
bf:9a:ce:ce:7a:e7:e5:cc:e6:6e:3b:61:77:c9:e8:
bb:e9:b7:30:61:a8:25:66:cc:a7:33:9c:5d:d9:35:
0d:34:b7:2a:e3:e1:e6:e8:d1:9d:1a:39:77:a0:8a:
43:79:83:dd:39:e5:71:66:17:8d:82:cc:cb:c7:42:
22:e2:c2:54:84:68:a1:f5:c1:7f:f4:bf:1a:4b:11:
2c:01:90:69:92:b0:d4:6d:3e:c5:6d:17:64:05:cc:
11:41:a9:f8:dc:de:a2:64:e4:a9:56:3e:e0:89:df:
02:b0:8d:5f:5e:dd:39:79:3b:17:34:c2:a7:e5:29:
83:c2:53:80:0c:22:89:36:62:75:42:ba:0c:e1:ca:
3c:13:08:5c:16:d4:e3:35:bc:2b:65:f2:df:15:5c:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:01:78:47:73:03:B5:8B:38:A9:CC:8F:E5:D7:AD:43:EC:87:39:97
X509v3 Authority Key Identifier:
keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b7:cf:b2:1e:fc:3a:de:84:c0:b1:ef:fa:64:63:8f:e3:50:
0a:83:62:9c:5c:82:f2:4e:67:79:9f:d5:0c:78:3d:98:4f:38:
74:db:29:cd:f9:91:6d:aa:4b:ca:8e:80:c2:4c:7e:68:e3:d3:
1e:72:b4:a3:47:f4:bf:68:b8:dc:c5:23:39:de:03:c9:2e:6c:
87:3f:a5:8b:6b:58:b9:74:5f:9e:48:25:bc:aa:95:f2:53:4b:
ea:27:2e:69:78:82:2b:f2:43:6e:06:ba:da:4e:ab:5c:85:e7:
ca:39:db:49:c9:5c:ad:aa:d1:9b:89:52:c0:77:48:9d:30:5b:
6e:33:57:3a:68:b4:99:d9:9a:0c:ee:d0:b8:4c:cc:7c:0d:eb:
5c:5f:c6:da:31:55:72:38:2a:33:50:7e:6f:ce:d4:1b:03:2c:
be:c0:50:1c:3e:ca:1b:da:a9:bf:3f:64:20:3b:79:ff:c1:d1:
90:90:fa:12:94:3e:05:c0:2e:fd:c8:0c:fd:9b:f5:ea:b8:7f:
62:ee:40:ad:4c:9c:e6:fa:37:72:41:18:f6:12:de:1a:96:d1:
20:7b:64:68:6a:b8:4e:3b:f2:b5:dd:5e:36:0e:8c:7a:82:01:
fe:cb:1a:38:05:d5:6a:27:a7:44:51:8a:58:10:40:92:99:44:
de:c6:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 08:42:29 2026 by rpki-client