
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File: S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier: gywT6nFBpmw4SBZX3Qd0ujhSNhJj5dsoRXKoUeYUGns=
Subject key identifier: 93:A4:6F:A5:99:28:A6:B4:05:13:34:7F:1F:31:8C:20:F2:FF:D5:62
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number: 0262
Signing time: Wed 25 Mar 2026 01:35:21 +0000
Manifest this update: Wed 25 Mar 2026 01:35:20 +0000
Manifest next update: Wed 01 Apr 2026 01:35:20 +0000
Files and hashes: 1: S630I4efFU256siNFgtOEW9mzak.crl (hash: nHORaJV65pN6I0mcMm7du/743pUbv+wg/3a1Cuhg16I=)
2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: slVc2MAuomJ1lVCpaSZf3MYFxy+QIrbxktNgNNmSdu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Validity
Not Before: Mar 25 01:35:20 2026 GMT
Not After : Apr 1 01:35:20 2026 GMT
Subject: CN=69c33bd9-d6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:c4:5c:83:5c:49:b8:e1:ce:24:b9:19:6c:
94:be:5e:f8:3b:1f:58:fa:d3:90:89:72:ed:f9:f6:
a4:43:0d:99:18:c0:06:ad:04:fb:ab:d6:cf:80:50:
bc:4a:0f:2c:6f:51:fe:18:92:5f:83:c7:31:3a:75:
43:ea:bc:e6:0d:75:d3:e4:69:61:17:46:44:e0:c8:
40:2f:cf:ba:44:1a:25:29:a1:8d:6a:af:58:65:19:
65:2a:a2:8d:7f:72:31:32:80:1a:fa:eb:43:0c:b1:
17:d9:c1:05:07:c6:99:76:61:3f:40:3a:4b:82:f0:
b7:3d:ab:4a:0f:fc:98:3c:4a:d1:60:f5:26:59:95:
da:47:7b:f2:78:56:95:c9:f3:ff:e2:26:db:02:d2:
e8:2a:9c:2d:89:46:8d:e3:3e:8f:6b:16:61:4f:04:
dd:df:db:29:03:e2:0c:a7:e1:35:bb:4b:e4:df:bc:
ba:8a:15:72:b3:79:d1:38:41:4c:b4:d2:24:48:9d:
4a:48:a3:8b:7c:50:f3:c6:31:c7:ca:46:6b:d9:b7:
53:da:cc:07:ba:70:4e:69:20:cf:20:05:83:e5:01:
f0:32:5e:db:a7:50:6f:44:ec:83:a2:9e:3d:73:96:
21:85:43:be:71:03:16:64:74:79:aa:67:a2:53:97:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A4:6F:A5:99:28:A6:B4:05:13:34:7F:1F:31:8C:20:F2:FF:D5:62
X509v3 Authority Key Identifier:
keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:9a:b7:4a:2b:39:a6:e2:f4:76:b2:61:18:20:11:17:32:d1:
1b:6c:4d:87:d2:96:dc:d4:81:c4:e9:e8:79:c9:b2:2a:4a:6c:
84:13:7d:0b:20:b3:c7:c6:7d:8c:9e:28:45:d5:e8:61:b0:a0:
38:1e:24:81:4e:98:b9:41:20:ae:4d:45:65:d1:7f:ea:cc:22:
9b:1d:b4:2d:3e:e1:39:bd:2e:c7:3e:e5:f7:57:38:81:86:2b:
78:a5:4f:4b:5f:57:be:99:b3:5b:2e:73:79:7d:b1:ca:d1:68:
75:e2:0a:43:79:6b:7a:cd:6f:36:5f:0f:8f:74:85:6a:cc:23:
f2:d4:20:ba:50:40:5b:8f:f5:4a:bb:b2:6e:b1:8b:de:37:43:
63:5e:c0:08:ab:ef:a9:b3:c7:76:48:50:67:8a:dc:40:ce:4d:
20:ec:3e:e1:75:89:84:4b:a8:a4:fb:42:c9:89:d6:68:eb:ca:
88:2f:a4:4e:39:e4:f7:1d:ca:29:96:ed:0f:a7:2c:d4:ed:6c:
56:09:0e:0d:78:d6:84:fd:48:31:de:8e:c7:f1:2a:f0:4b:e4:
77:86:97:64:d8:a9:19:b6:e5:27:d0:fb:b4:8c:2d:32:3c:b4:
86:a4:8b:65:9d:3c:eb:67:60:f0:53:df:fd:35:fa:c7:57:bc:
f3:ff:fb:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjMwRTUxMTAvBgNVBAUTKDRCQURGNDIzODc5RjE1NERCOUVBQzg4RDE2MEI0RTEx
NkY2NkNEQTkwHhcNMjYwMzI1MDEzNTIwWhcNMjYwNDAxMDEzNTIwWjAYMRYwFAYD
VQQDEw02OWMzM2JkOS1kNmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEnEXINcSbjhziS5GWyUvl74Ox9Y+tOQiXLt+fakQw2ZGMAGrQT7q9bPgFC8
Sg8sb1H+GJJfg8cxOnVD6rzmDXXT5GlhF0ZE4MhAL8+6RBolKaGNaq9YZRllKqKN
f3IxMoAa+utDDLEX2cEFB8aZdmE/QDpLgvC3PatKD/yYPErRYPUmWZXaR3vyeFaV
yfP/4ibbAtLoKpwtiUaN4z6PaxZhTwTd39spA+IMp+E1u0vk37y6ihVys3nROEFM
tNIkSJ1KSKOLfFDzxjHHykZr2bdT2swHunBOaSDPIAWD5QHwMl7bp1BvROyDop49
c5YhhUO+cQMWZHR5qmeiU5dOgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOkb6WZ
KKa0BRM0fx8xjCDy/9ViMB8GA1UdIwQYMBaAFEut9COHnxVNuerIjRYLThFvZs2p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzBFNS83MjkzQzExNjg2
ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZVMjU2c2lORmd0T0VXOW16
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M2MzBJNGVmRlUyNTZzaU5GZ3RPRVc5bXphay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzBFNS83MjkzQzExNjg2ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZV
MjU2c2lORmd0T0VXOW16YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIJq3Sis5puL0drJhGCARFzLRG2xNh9KW3NSBxOnoecmyKkpshBN9CyCzx8Z9
jJ4oRdXoYbCgOB4kgU6YuUEgrk1FZdF/6swimx20LT7hOb0uxz7l91c4gYYreKVP
S19XvpmzWy5zeX2xytFodeIKQ3lres1vNl8Pj3SFaswj8tQgulBAW4/1SruybrGL
3jdDY17ACKvvqbPHdkhQZ4rcQM5NIOw+4XWJhEuopPtCyYnWaOvKiC+kTjnk9x3K
KZbtD6cs1O1sVgkODXjWhP1IMd6Ox/Eq8Evkd4aXZNipGbblJ9D7tIwtMjy0hqSL
ZZ0862dg8FPf/TX6x1e88//7qA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:46 2026 by rpki-client