
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
File: n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json)
Hash identifier: iHPrWH3HAh0zeZcWVVijqfrmkN/ujYFKsBHrA/SExiA=
Subject key identifier: 97:09:A9:03:5E:31:60:01:3E:76:E8:B4:22:7A:62:A2:7E:4C:81:4D
Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE
Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
Certificate serial: 0805
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
Manifest number: 07FD
Signing time: Tue 24 Mar 2026 20:55:56 +0000
Manifest this update: Tue 24 Mar 2026 20:55:56 +0000
Manifest next update: Tue 31 Mar 2026 20:55:56 +0000
Files and hashes: 1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: un8cGPR+E5r1HBPuQ3e98Xo5RNydvDzfhVwB4LoGZWY=)
2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: nPZIOVGh8Q5ksqmm9lnwui9TkTF6P5ImE1ZLPbDWNEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl
rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
Validity
Not Before: Mar 24 20:55:56 2026 GMT
Not After : Mar 31 20:55:56 2026 GMT
Subject: CN=69c2fa5c-8eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:3f:af:84:a6:d3:a4:02:44:61:bf:52:4a:
b8:55:f6:3c:9a:6c:49:6c:cb:07:a6:1a:0f:19:d6:
ba:a6:9b:e0:d1:44:ac:86:3a:c9:83:5b:28:19:0a:
22:3d:98:fe:8c:0d:19:ad:4c:3c:e5:11:e1:8d:8f:
ab:50:6f:6a:b8:0f:a0:8f:1a:ce:4f:73:52:1b:8a:
81:e6:f6:3a:48:b0:57:c6:4b:27:33:1a:46:2d:8f:
2b:72:0d:b4:6c:84:b3:e1:b8:5c:35:da:cb:89:c1:
11:e3:8a:a9:88:74:b5:0e:ae:f3:e2:fc:3c:26:21:
01:a5:4b:3a:21:ec:7b:20:f8:d7:71:fe:64:96:77:
4f:74:ef:93:fc:73:6d:dc:fc:fb:e4:24:4d:6a:cb:
02:be:e5:f4:21:66:c9:99:5f:0a:ab:72:57:62:58:
b6:5b:0c:6f:73:d2:e3:2a:86:1f:b6:48:ac:f6:94:
bb:56:3e:93:29:42:92:f6:85:2a:3c:79:8b:d1:ad:
24:f3:59:7b:ec:76:ce:4e:cb:84:55:11:eb:dc:6b:
f5:f9:e7:a5:6e:1f:02:17:78:4a:74:80:86:7f:27:
61:f7:3a:75:65:b9:cf:b5:55:f5:fd:15:97:e1:44:
bc:6c:28:99:c9:04:03:7c:6a:1b:f1:d5:c9:28:e1:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:09:A9:03:5E:31:60:01:3E:76:E8:B4:22:7A:62:A2:7E:4C:81:4D
X509v3 Authority Key Identifier:
keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:59:3a:e9:0a:a6:f6:12:e6:a9:97:df:e2:af:18:80:6a:63:
ed:47:71:20:8c:9b:20:72:da:c2:eb:d0:c8:91:b3:43:71:98:
a9:3d:9b:f4:c8:97:74:4c:b7:b5:e7:9e:84:f8:52:01:a1:3a:
76:05:64:7c:ac:97:ef:8a:60:6e:b9:cc:c4:df:eb:94:c5:99:
c0:d4:1b:3c:3b:1d:9b:c9:3f:04:52:ab:5e:cd:6f:01:fb:08:
5e:2e:fa:8a:ef:e6:75:c3:54:9e:2e:11:9e:ef:56:15:7a:3d:
e3:24:56:67:5a:fb:6e:f3:55:51:1d:7d:16:69:54:ed:5f:88:
30:44:ff:5a:66:02:a3:bd:e8:d3:fc:1d:fa:df:e2:57:56:c1:
2d:a2:d0:c5:c9:6d:10:bc:67:0c:85:f9:63:04:24:4f:61:a7:
2a:65:6d:b9:b5:67:8a:1b:ad:43:77:38:eb:83:d8:e3:0e:4c:
b9:66:b1:c9:ae:1e:81:5a:5d:59:6c:74:9a:21:1f:bb:20:7e:
21:48:52:de:0f:25:79:b1:5e:6f:f6:2d:6c:75:b1:d1:5f:dc:
00:36:68:cc:3c:1d:a7:93:7f:53:72:28:bf:91:4e:28:bb:bb:
ba:ce:c4:31:f3:3e:f9:9b:de:f7:2b:25:42:15:64:4c:b7:b3:
2a:1a:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:17 2026 by rpki-client