
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
File: 83-esXYeax0_fqbWxvyluZc5FKs.mft (raw, json)
Hash identifier: MQi7aygE+RKt6jO+fkYq8mtP1xavXnYDRxeV6tZ3unI=
Subject key identifier: 32:1E:EC:25:3E:0A:47:FD:2C:86:23:D1:28:8E:07:E3:AB:2B:53:D0
Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
Certificate issuer: /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
Certificate serial: 04C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
Manifest number: 04C0
Signing time: Thu 26 Mar 2026 23:41:42 +0000
Manifest this update: Thu 26 Mar 2026 23:41:42 +0000
Manifest next update: Thu 02 Apr 2026 23:41:42 +0000
Files and hashes: 1: 83-esXYeax0_fqbWxvyluZc5FKs.crl (hash: 1XHi5tJo0tMRgzbbsgwE5Aopp8mUdZsaZn21H5Gn4Ic=)
2: FEDE0F2066C611EC93A73A3DC4F9AE02.roa (hash: Zccbv8dcS5H485GgGvv2gnpToyn81cRGaFg9r2jbzac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl
rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1224 (0x4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8FA2, serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
Validity
Not Before: Mar 26 23:41:42 2026 GMT
Not After : Apr 2 23:41:42 2026 GMT
Subject: CN=69c5c436-4d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:65:ad:b9:24:3e:00:75:54:71:d4:b0:e0:
59:dc:49:5c:53:f6:39:01:f3:94:86:20:61:e5:7f:
af:7e:93:79:4a:4b:ca:28:75:db:ab:e2:b7:e0:15:
e3:2c:a2:38:79:af:c8:14:72:93:5d:b9:a1:f4:46:
54:82:c6:85:5e:bc:85:9a:31:75:6a:95:29:d8:89:
69:43:06:79:5b:ea:49:2b:c5:60:e9:9f:a8:82:27:
91:af:0d:56:a9:f1:eb:c5:f4:17:45:cc:f6:f7:b5:
64:c4:cd:d5:fb:b3:63:f4:83:b9:dd:4b:52:18:6c:
92:59:46:b3:93:2f:82:31:8a:0b:14:06:6d:9f:53:
a7:b2:fa:7f:f4:42:01:42:91:3d:63:2d:ec:e9:43:
86:fa:5f:19:5a:74:df:51:1b:bd:4a:a4:3e:5d:84:
ad:5b:b8:99:24:a7:8d:14:2e:51:5f:c2:04:c6:d6:
f1:34:51:88:49:ef:66:e1:de:93:31:7f:77:dc:d7:
25:fe:40:49:f9:d8:72:88:02:75:d7:27:1c:ab:11:
11:54:da:79:21:4d:14:b2:7f:b9:d8:c5:75:87:0a:
32:5d:59:2e:13:db:fb:8b:92:c3:cd:68:29:22:76:
97:97:86:d5:6d:07:bc:b2:e5:14:18:66:94:2a:90:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1E:EC:25:3E:0A:47:FD:2C:86:23:D1:28:8E:07:E3:AB:2B:53:D0
X509v3 Authority Key Identifier:
keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c3:31:aa:14:ae:97:50:0d:88:b7:28:c6:05:01:d0:3e:27:
5b:79:32:4b:ed:a8:f4:ab:23:a6:17:90:0a:74:77:a0:9d:d4:
f4:53:35:2f:ed:68:6a:87:eb:46:b1:28:ab:b4:da:23:cc:db:
35:ab:79:26:18:10:6f:de:04:68:c3:b4:a5:94:f7:10:91:26:
4f:5b:ec:7e:51:c4:40:79:a3:21:45:72:58:59:8a:ce:87:4c:
d9:5a:3d:e4:03:fa:5b:68:1b:d7:68:45:40:78:61:ce:1f:c0:
4b:2d:fb:9c:33:d1:7b:b9:e5:ad:a3:ce:74:0b:69:6a:2e:c8:
e0:2f:4a:ce:c2:47:d7:e6:d4:19:01:08:ad:75:14:85:94:6a:
a9:c8:a1:a4:24:d3:ca:fd:9b:e8:99:73:49:6d:a5:c0:d8:81:
60:51:b9:a0:1d:bd:f8:06:2e:bf:67:79:ee:5c:8f:d4:25:02:
62:71:28:ef:bc:69:4e:47:0d:ae:48:6f:a8:71:36:d7:16:f9:
8d:9c:12:ae:78:49:8e:c9:91:dd:a1:54:aa:a5:80:bb:05:6c:
13:41:99:8a:df:80:38:e5:c9:ed:2c:a4:10:80:29:d4:b4:70:
91:4f:fc:70:5d:58:dd:ee:b4:46:cc:44:72:0b:84:11:18:bc:
f7:af:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:34 2026 by rpki-client