
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
File: H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json)
Hash identifier: cX33BLSsc90TBXIE+F4PaS2OCX/vWOp0RLMSapi916Q=
Subject key identifier: 1D:13:45:2F:94:6B:98:E6:FD:5C:F3:92:B4:02:73:B5:CD:CC:68:DE
Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6
Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6
Certificate serial: 094B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
Manifest number: 0940
Signing time: Tue 24 Mar 2026 19:56:51 +0000
Manifest this update: Tue 24 Mar 2026 19:56:51 +0000
Manifest next update: Tue 31 Mar 2026 19:56:51 +0000
Files and hashes: 1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: caIDWGSAduvnTPe3FFJqzYG/yI1Y2v8u7TBzDleOIvY=)
2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: r/jyldPvZyETIIfh/LFNHKgskXkVuM0DwDXStUTNnhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl
rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379 (0x94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6
Validity
Not Before: Mar 24 19:56:51 2026 GMT
Not After : Mar 31 19:56:51 2026 GMT
Subject: CN=69c2ec83-370a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:77:18:ab:1e:49:dc:bd:df:cc:76:3b:6e:
45:17:54:74:6f:7a:aa:c5:f7:7a:48:de:43:f7:ed:
f5:5b:6a:4b:1d:06:cc:0a:f2:0a:d8:59:e1:11:32:
42:e8:f1:97:30:9e:92:22:eb:68:5b:50:78:05:f1:
00:32:b7:b3:9a:25:ab:99:ca:90:8e:3f:1c:cd:8d:
0a:cc:6b:fc:d6:49:63:31:bc:94:71:51:f7:99:53:
31:bf:4f:5a:c0:ff:1a:01:82:51:49:48:c4:35:fe:
fb:fe:de:af:22:69:62:50:f0:24:a4:59:1d:5c:c2:
1c:e8:50:e1:46:8e:1b:4e:d9:e2:01:ac:e0:79:5e:
41:24:de:a1:eb:7b:5a:a4:dd:f7:72:ce:b7:91:36:
78:23:31:09:fa:ca:1a:67:b8:39:89:27:6b:2e:9d:
eb:f1:6a:fa:68:39:64:70:c9:8d:02:cd:83:92:94:
b7:c7:a2:82:02:1b:bc:f7:2b:a7:b4:fa:29:1d:31:
d9:c2:fa:ad:b6:f9:cd:0e:17:63:a0:87:5d:31:3e:
45:35:af:41:0f:6c:50:41:db:58:7a:8b:06:9b:b9:
5e:a9:fd:dc:12:dd:7c:46:35:d5:47:9f:f6:36:f1:
74:fc:c9:5c:ca:1b:1f:7b:5a:8d:80:69:cd:e2:90:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:45:2F:94:6B:98:E6:FD:5C:F3:92:B4:02:73:B5:CD:CC:68:DE
X509v3 Authority Key Identifier:
keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:15:93:99:7c:cc:f5:c4:92:86:59:90:03:c6:22:a2:a5:8e:
d4:47:33:70:44:c4:b1:f7:50:dd:fa:62:b9:aa:9f:d8:96:e0:
91:47:d6:69:9f:7a:59:94:9a:13:cf:86:40:85:ed:a6:0e:a5:
28:c4:5f:4b:da:b3:a8:f7:83:0a:27:db:b5:16:9c:c0:5f:78:
6b:4c:3e:75:0e:c4:04:90:37:20:5b:52:da:68:5d:8d:c1:c8:
53:25:16:96:55:6c:03:0d:1e:0c:5f:42:dc:ed:3e:26:d5:33:
4b:8b:b8:11:c4:ea:ed:e6:58:fd:d2:aa:89:68:54:92:75:fb:
31:73:22:49:48:38:fa:22:c3:99:e5:94:97:f1:e0:32:85:b7:
af:51:1d:42:16:94:40:ba:b3:17:54:a8:5d:af:8a:d8:a9:90:
1b:fa:bb:af:47:7c:37:2c:12:45:05:90:96:2b:4c:08:e0:6f:
4e:22:52:08:85:e3:b4:f2:44:2c:38:91:ad:12:4a:a7:02:35:
41:49:5c:eb:da:d4:fa:91:0b:73:db:a4:fa:21:4b:66:93:fe:
d9:a3:e3:4f:4e:11:ab:33:0b:a0:b0:d5:34:7e:27:a1:63:63:
c9:21:13:83:ab:c3:9c:ae:d9:7e:05:b8:46:9c:6a:8a:fb:8c:
6e:66:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:59 2026 by rpki-client