
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
File: 38UozwAG40FK-3_obR_er2SLXJ0.mft (raw, json)
Hash identifier: i/RiDtbGIW0utO7a0n4uz6vOO2Cu8bdnYvqMcQiYwfA=
Subject key identifier: AA:2B:D4:A6:13:17:F4:F6:8F:06:73:83:F8:9C:5C:9E:AE:10:69:61
Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
Certificate issuer: /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
Manifest number: 010D
Signing time: Wed 25 Mar 2026 05:11:51 +0000
Manifest this update: Wed 25 Mar 2026 05:11:50 +0000
Manifest next update: Wed 01 Apr 2026 05:11:50 +0000
Files and hashes: 1: 38UozwAG40FK-3_obR_er2SLXJ0.crl (hash: F04Jd+NuM4xX78+bRKZDehnvPTezWMNpoLPWFBsHAr0=)
2: 6CF3FF44901111EF922BFC29C4F9AE02.roa (hash: hvfFWUPLyFvJCXfs1g4giSnFKRGrDpasDj01CVoVhxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Validity
Not Before: Mar 25 05:11:50 2026 GMT
Not After : Apr 1 05:11:50 2026 GMT
Subject: CN=69c36e97-b061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c0:23:b3:91:fb:11:a2:b8:bd:1f:1e:65:d9:
46:6b:b7:c4:bb:3c:a1:81:dc:f3:8f:f8:36:11:c6:
ed:8a:02:4e:a4:37:33:19:82:17:54:b7:b1:ab:fc:
04:e3:a2:1b:8a:10:14:e2:13:b6:8e:0a:a8:99:e1:
91:25:34:e2:55:51:3b:65:2e:82:3e:23:94:ff:ea:
46:a4:71:c9:93:9e:f4:d9:92:dc:87:e3:7e:bd:36:
9e:24:b9:dd:4d:f6:3b:7b:cb:10:12:3f:4e:e4:6c:
76:44:31:17:7e:56:54:29:49:38:5b:05:45:c2:4f:
ac:3f:a1:c0:4f:cc:bb:bc:bb:dc:3b:43:7d:d0:c6:
24:7a:25:86:9e:10:fd:fb:63:b9:03:e9:50:1e:66:
ee:7e:24:89:70:9e:c0:a3:52:a1:53:fe:9a:f9:d4:
46:08:7d:51:9d:e3:b5:36:87:8b:86:4a:94:44:8c:
3d:55:7c:a4:60:91:2d:47:fe:5a:88:36:56:28:5e:
cb:10:b5:d0:ef:e8:cb:d2:33:75:34:c4:f3:d7:48:
2b:f1:e2:07:d1:f8:cc:4b:8f:59:d2:22:97:a8:05:
5d:f7:6f:be:48:c5:1a:56:1d:24:27:84:41:2c:f0:
cc:c2:29:8d:ee:b2:cb:22:af:e7:6a:e5:89:d9:f0:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2B:D4:A6:13:17:F4:F6:8F:06:73:83:F8:9C:5C:9E:AE:10:69:61
X509v3 Authority Key Identifier:
keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:03:89:50:fb:eb:7a:2c:2d:5e:5b:17:bb:c7:e3:89:d9:72:
23:60:81:fd:4d:ff:44:a8:ec:73:3c:25:17:b0:ff:f1:bb:14:
00:55:60:f8:60:b4:e3:0d:a4:45:96:0c:0c:15:88:81:bf:49:
0a:5e:1d:07:ff:3b:23:c3:ae:96:0e:69:e8:cf:e4:5d:be:c3:
35:ba:44:7b:0a:b5:e1:6d:21:90:dd:0b:cf:9e:0b:91:dc:8c:
67:bb:01:4f:6e:98:18:5c:a0:20:08:df:1a:a2:78:eb:be:95:
2e:fe:02:3e:b1:f2:6b:0b:93:58:17:13:75:c5:0c:9d:4b:c9:
e5:57:ce:0f:b7:b1:be:68:cc:c5:72:60:6d:7e:7e:42:f3:48:
ae:c8:bb:d0:d1:14:b8:42:a0:c0:62:07:c7:ef:53:59:0e:73:
73:e0:41:b1:66:59:cc:3c:82:33:55:7e:dc:b6:dd:4c:ce:18:
93:28:d1:42:11:97:53:c3:0e:91:07:63:29:be:2f:6e:c7:72:
31:d9:5a:d3:01:4e:45:64:8c:95:3d:08:62:8f:4b:dd:e3:da:
a0:bc:c9:44:07:85:79:17:96:e5:7e:17:83:14:c7:32:61:fb:
df:8f:0f:44:44:0e:ae:d1:51:fd:d0:01:42:78:a2:72:31:66:
21:9f:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:38 2026 by rpki-client