
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File: S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier: lDKlK1tYU5mQqWtLTbOqVvcffBV8S/ixqan0zPAg/uc=
Subject key identifier: 0B:5D:11:0A:71:02:2A:E4:EB:25:92:AF:D4:83:1A:C5:04:92:DE:A3
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial: 0728
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number: 071D
Signing time: Tue 24 Mar 2026 21:38:36 +0000
Manifest this update: Tue 24 Mar 2026 21:38:36 +0000
Manifest next update: Tue 31 Mar 2026 21:38:36 +0000
Files and hashes: 1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: x+R/aCql+Gvo5tdrOiYxMI/6PBc+4xrSkRsnBsK1Nx4=)
2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: AnaATHT/63NFgMgZ3Y5aYEgFRK7pXkT3QAJXtGEghZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1832 (0x728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Validity
Not Before: Mar 24 21:38:36 2026 GMT
Not After : Mar 31 21:38:36 2026 GMT
Subject: CN=69c3045c-9c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:6a:4f:76:83:94:bb:33:23:b2:49:8e:b1:
fd:3d:f9:35:82:62:3b:51:3f:e1:e1:46:d7:d0:e2:
6a:22:3e:8f:1a:85:31:c4:eb:f4:ac:51:a4:45:70:
b9:0d:c6:9e:9d:1b:b3:4f:9a:83:b6:a3:2b:a9:69:
47:11:12:be:90:8a:2e:b8:2f:50:91:ee:84:49:c9:
ec:9b:d2:b8:12:eb:0b:c7:c4:ad:66:59:27:4e:92:
10:33:07:ea:33:3e:a1:3b:23:6b:4e:42:b5:25:0f:
82:05:c8:ac:63:5a:b2:ba:51:63:c5:05:55:e9:7d:
e3:d0:67:5b:38:f7:71:c5:d2:c3:0d:e6:c1:18:53:
84:ca:40:9f:53:b0:48:26:61:44:96:1f:1d:e2:4a:
5e:29:cf:5f:0a:a2:8c:cb:8d:6a:50:f4:08:ee:a1:
a7:b0:4c:74:97:b9:e9:7b:56:55:e6:20:90:0f:15:
e9:f9:dc:8e:ab:29:19:91:31:74:29:67:2b:9b:8d:
61:3b:86:27:44:00:d2:df:72:44:df:03:c3:cd:77:
e4:05:3c:78:22:f8:7c:99:47:25:a7:cf:04:97:9a:
64:19:be:3b:a4:d0:4b:7a:d5:3a:e8:16:86:e6:be:
2e:51:9a:a0:c5:a7:21:0e:69:22:85:aa:87:a6:ba:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5D:11:0A:71:02:2A:E4:EB:25:92:AF:D4:83:1A:C5:04:92:DE:A3
X509v3 Authority Key Identifier:
keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:38:f8:e1:7a:78:43:12:fb:3e:70:12:82:39:8e:b9:93:11:
f2:19:6c:42:6e:de:bd:e1:82:d1:c4:3e:d6:c4:4b:f5:96:a3:
b3:3b:85:f7:ef:5a:65:32:13:94:bd:05:97:5d:17:c4:f6:2a:
b9:e5:9d:92:90:71:26:a1:1c:c4:9b:c7:2f:c9:77:66:74:ee:
59:67:f0:d6:21:78:51:01:22:98:c5:fa:c0:80:ca:91:af:78:
1d:f8:da:a3:23:89:be:18:05:6e:1b:2b:dc:bf:89:7c:97:25:
d9:92:2c:f1:bc:eb:32:28:f3:8e:e0:22:ae:90:c7:13:44:29:
1e:14:d6:4c:ba:81:c2:95:16:6c:7e:f8:d3:7a:e9:5f:2c:ed:
8b:5e:8b:ac:c2:ca:06:cc:01:e9:2b:2d:74:26:e5:3e:9f:ac:
79:48:84:a2:5b:af:2a:b8:0b:e2:69:80:29:86:44:91:b3:47:
03:f7:92:0e:46:c0:08:5b:7b:8a:1b:2a:f0:42:ce:55:66:3e:
81:4a:84:73:9e:8b:48:99:3a:e6:d2:bc:4d:36:d9:15:b6:f0:
5b:c9:37:44:61:01:35:ef:68:1b:99:19:d5:4b:0d:56:33:eb:
62:3d:46:3a:05:57:f1:33:fc:2a:b0:67:a7:0e:6a:68:7f:51:
06:39:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:10:05 2026 by rpki-client