
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier: 7wj+023UnwFDlXRaLG7JM2AbBqaHJbA8JsCrkxJQDcU=
Subject key identifier: 1A:93:F7:08:50:D9:60:05:E0:3A:28:38:8A:DA:24:5D:8F:EF:E7:DD
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number: 0127
Signing time: Fri 27 Mar 2026 05:12:00 +0000
Manifest this update: Fri 27 Mar 2026 05:11:59 +0000
Manifest next update: Fri 03 Apr 2026 05:11:59 +0000
Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: Op7sl+5/g/bRzsIjmfn+gYEV3D5rMF/rgExp2lMHkLw=)
2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: QHT2EqJHyPujaDEriJMd/9h9fPZLETh+MJuliPGlg9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Validity
Not Before: Mar 27 05:11:59 2026 GMT
Not After : Apr 3 05:11:59 2026 GMT
Subject: CN=69c611a0-5bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:b0:c2:67:a8:17:94:ba:d8:1f:ac:ac:41:
2a:30:40:91:b9:fc:c0:08:31:bd:52:2f:fb:95:51:
90:3d:68:41:9e:31:54:d3:c2:8b:19:9b:77:c5:7b:
38:1e:08:49:6a:66:a8:28:9c:2d:14:a3:2b:da:6c:
a7:f2:4a:e0:9e:35:f6:97:fc:96:7b:20:0a:51:4d:
4e:49:fd:8a:4b:f4:27:b0:4f:05:64:db:8e:54:8c:
f5:4f:58:f0:44:cf:5d:aa:5b:e8:91:16:01:93:29:
9e:a1:ab:4a:77:4c:8a:23:aa:e8:c3:c1:6e:93:b6:
df:70:fa:66:78:35:e3:5e:03:32:a2:1d:37:9f:b6:
0e:56:6f:ed:dc:96:27:d6:86:a6:ec:ec:a5:e5:03:
10:b5:1d:23:3e:dd:2a:6f:12:91:c3:7c:dc:69:88:
f6:bb:ec:82:e4:ec:9f:c3:cd:66:85:a4:83:35:c9:
4c:37:03:87:3c:0a:74:f4:f7:9d:ba:cf:91:9c:7f:
b0:34:81:7a:31:ac:9a:31:87:6f:ab:50:a0:e1:c2:
b4:d5:aa:46:8d:78:01:f7:79:b7:a8:17:0c:b3:0b:
f8:f7:2e:cf:c4:9e:ee:3e:13:62:85:92:ae:76:af:
6f:8f:74:54:8f:4c:e0:7f:f4:6f:bf:ff:33:c9:58:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:93:F7:08:50:D9:60:05:E0:3A:28:38:8A:DA:24:5D:8F:EF:E7:DD
X509v3 Authority Key Identifier:
keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:95:58:de:3e:ef:05:41:b7:8d:4b:77:54:d6:30:9d:87:11:
79:09:4b:90:e2:5d:82:f3:ef:2e:96:14:4d:d8:57:4a:d5:c4:
bc:e3:dc:d3:04:d4:72:f2:a5:14:41:2f:1f:d9:c7:d5:0f:8b:
83:d3:a1:63:4e:00:2f:33:1c:8f:c7:c7:07:19:7c:50:a7:37:
1f:4d:7e:38:fa:21:43:db:8c:b8:67:51:a8:9b:cf:f8:b7:ab:
74:21:eb:67:6d:b8:48:6a:6c:3b:36:fa:99:3e:c9:ba:7d:2f:
e3:64:e2:b8:81:db:d6:97:35:76:ce:f1:da:41:2a:1c:8a:b6:
4d:d2:54:56:38:dd:54:39:d1:2b:a6:b1:24:f5:00:df:7e:de:
f6:a2:be:a3:25:79:78:8a:97:c1:f1:f4:7a:85:03:93:18:fc:
10:f2:8f:19:19:cd:7d:d6:61:45:05:ec:e6:00:8a:99:b1:57:
32:19:51:8b:44:44:5e:e5:be:5f:81:8c:4c:fe:6b:5b:1c:93:
fb:a4:31:20:28:a1:1f:50:67:b2:6d:03:52:dc:40:ce:5d:27:
e8:8f:e1:a8:c9:fb:08:2b:8e:ed:ac:18:d9:d5:03:02:7c:6d:
60:a2:3c:3a:71:43:bd:e9:bb:21:1d:bc:30:19:d9:2f:5a:3f:
76:e7:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:01 2026 by rpki-client