
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File: S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier: BXmhLim3B3n+FNiYQknW26pFbnm5dcwYtpkQ6/YqcRY=
Subject key identifier: 4E:49:99:3D:23:8F:E9:0C:DF:20:75:2C:77:97:89:2D:53:19:39:28
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial: 0729
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number: 071E
Signing time: Thu 26 Mar 2026 21:46:05 +0000
Manifest this update: Thu 26 Mar 2026 21:46:05 +0000
Manifest next update: Thu 02 Apr 2026 21:46:05 +0000
Files and hashes: 1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: nchJ/302uYOYDPmF9iEZZ76tT5xaNyrfGCr39IHUmxo=)
2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: AnaATHT/63NFgMgZ3Y5aYEgFRK7pXkT3QAJXtGEghZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Validity
Not Before: Mar 26 21:46:05 2026 GMT
Not After : Apr 2 21:46:05 2026 GMT
Subject: CN=69c5a91d-9418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:b3:3c:cb:ef:03:86:cc:be:f8:1a:40:ba:
56:dd:d0:e9:c0:80:94:fb:b5:54:77:d8:41:50:d7:
f7:36:57:e0:b6:55:38:0e:ce:34:0b:f0:42:96:81:
37:fd:f0:96:6b:e2:63:cf:9d:d5:0d:95:a3:33:c7:
ae:d2:3d:89:95:14:90:5a:3f:ee:47:bf:d0:20:6d:
80:af:42:3c:48:db:86:84:a9:e9:78:d7:40:8e:8d:
b3:8a:b5:4a:17:1a:23:16:1e:d3:1f:65:b9:c9:1e:
eb:61:d6:de:e1:7b:59:4d:f8:b5:95:19:6b:00:d4:
e6:e5:09:24:4f:03:ec:f4:0a:90:d8:94:aa:84:55:
b7:04:a5:ef:d5:c0:89:6f:63:80:96:30:19:59:a9:
41:4b:f2:8b:8b:df:95:c1:cf:5c:97:1d:65:57:0b:
b4:f3:86:bf:fc:10:b8:d7:64:a2:12:88:a5:50:fa:
81:d9:e2:e7:80:7a:37:20:f4:23:0c:c3:08:f7:d5:
69:ac:2b:71:13:77:4a:1f:ff:9f:6c:3d:4b:f2:c6:
17:9f:9a:57:c5:fc:99:f8:83:33:e7:d5:26:db:e9:
85:11:b8:3d:be:c6:fa:4e:ca:2e:79:59:e1:1d:7b:
89:dc:3f:de:6f:28:af:bc:b8:fa:f4:42:8f:a0:d2:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:49:99:3D:23:8F:E9:0C:DF:20:75:2C:77:97:89:2D:53:19:39:28
X509v3 Authority Key Identifier:
keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:34:de:b4:8d:f8:a9:79:e0:04:c7:84:e3:e0:bf:ec:f2:22:
0a:ef:59:13:9f:5d:db:86:e0:6b:7f:8f:20:0f:7b:e9:59:dd:
63:64:9a:0a:89:5a:75:22:b1:07:f9:ec:26:a1:5f:e1:97:c3:
ff:f0:08:b4:a4:cb:9b:a6:8d:49:97:ac:07:a7:1b:93:9a:39:
24:a2:1f:46:4d:45:25:9f:47:00:0b:7e:f2:83:6e:08:89:d2:
8b:f5:45:1c:e3:88:e3:2f:18:3a:a3:2f:ac:ca:7f:88:6a:5a:
89:71:70:b4:24:0d:5d:86:f0:43:c1:68:83:cc:99:7c:3a:cb:
55:2f:2b:15:93:56:c9:5f:de:90:c0:c9:dc:6c:f9:a4:14:61:
74:f4:9b:d8:74:2e:64:ab:64:e9:fb:c5:6a:9d:b1:b6:f7:32:
4d:ef:a5:e7:69:c5:44:ab:3d:8e:e4:06:08:38:50:69:7c:0d:
45:24:56:af:5c:91:63:31:1a:a0:8a:3f:18:89:97:9f:f6:59:
6e:08:a8:54:07:55:f6:bd:b9:f2:de:59:9e:8b:b5:fd:83:38:
ed:68:08:f3:f4:e1:07:d3:35:f5:f2:1d:a4:e0:4e:15:42:89:
6d:fd:c5:cb:fa:90:63:5c:67:38:d7:84:7c:65:7e:5a:a3:d7:
8c:04:0f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:37 2026 by rpki-client