
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json)
Hash identifier: KaWtlh4NGIX85Tdk3BW2SKxxXG9eLNWnGb/3OKpfvwE=
Subject key identifier: 4E:1D:3E:43:FB:75:1F:8D:C8:A4:26:37:98:8F:6C:CE:90:96:53:1F
Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
Certificate issuer: /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Certificate serial: 0791
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
Manifest number: 233B
Signing time: Thu 26 Mar 2026 15:49:48 +0000
Manifest this update: Thu 26 Mar 2026 15:49:47 +0000
Manifest next update: Thu 02 Apr 2026 15:49:47 +0000
Files and hashes: 1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: W4zDsyO2KGh1gNpRC12CQGXPPr7Z9MrkRq0TM3o6s28=)
2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: lPrloJGC9fRoPJ5nXnuFUs4bSREmY0P/1nt0P5cs2LM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl
rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Validity
Not Before: Mar 26 15:49:47 2026 GMT
Not After : Apr 2 15:49:47 2026 GMT
Subject: CN=69c5559c-9835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:f8:31:b8:f8:c1:26:25:16:1a:07:29:13:
bb:e3:5a:44:67:e9:58:0b:58:e3:53:ae:4a:83:ed:
4b:38:cb:49:20:6b:2c:29:93:8c:ac:2f:d3:bd:54:
44:b7:75:81:88:25:10:ae:d3:8e:d9:5e:23:fc:ed:
d6:2e:20:71:f0:f2:bf:3d:7a:af:b4:db:e4:84:60:
c3:97:eb:39:33:35:69:a9:c0:70:dd:3a:f6:4a:8c:
14:08:f1:42:64:5e:e0:74:e1:1b:3c:a1:fc:79:71:
f8:23:ca:08:52:31:a7:d1:d9:a0:be:20:5b:1e:ba:
75:81:34:d5:70:aa:30:2a:45:87:ba:84:2b:6f:a3:
48:da:ff:05:75:77:72:74:36:bc:9b:b3:11:b8:62:
df:95:67:ed:6d:9f:82:0e:b7:cf:36:d9:48:9b:da:
e2:3e:88:9a:f5:03:02:c8:3e:38:9e:df:54:42:af:
95:11:b4:41:44:81:bd:82:c2:67:ec:64:8c:1f:a5:
7d:2d:fd:63:e6:b8:46:55:22:89:6c:0e:04:99:94:
29:c7:4b:94:3b:0e:3b:f6:6a:90:78:92:23:a1:60:
b2:5f:9a:b9:7f:87:78:b1:41:99:bc:ea:50:81:2b:
83:c5:34:3d:c3:66:7e:84:19:e0:81:12:06:11:f0:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1D:3E:43:FB:75:1F:8D:C8:A4:26:37:98:8F:6C:CE:90:96:53:1F
X509v3 Authority Key Identifier:
keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:30:62:00:2e:39:e7:6e:a2:0c:60:46:25:be:05:7c:b2:52:
e0:3e:88:88:00:49:3b:7e:63:6f:d0:b3:21:99:0b:8a:f5:b5:
c9:f1:f4:e2:d2:70:48:88:fe:ec:47:0a:fc:63:17:e3:e5:ad:
32:65:58:fd:28:22:5a:b1:22:98:a0:7b:7e:a3:04:5f:1e:f8:
d7:43:e3:d1:94:33:fc:aa:23:46:99:6c:ba:a1:d8:9e:9c:21:
55:f2:c6:4b:04:d9:98:30:21:ae:1a:e8:c5:44:80:12:b6:f1:
35:20:7a:70:b5:69:65:1d:9d:9d:bd:9c:37:91:02:e8:ab:cc:
8c:e5:b9:bb:f1:a4:9e:5f:84:69:e3:f3:2d:d3:38:ae:31:78:
93:f8:e5:f0:13:00:78:e6:dd:00:d3:30:b7:88:b7:18:6d:ad:
94:0d:28:ab:58:0a:e6:2d:22:a5:30:39:ee:fc:80:e0:ef:00:
85:37:94:07:fe:2b:9a:71:83:dd:9e:0c:94:2c:3c:fd:62:5b:
d9:c9:b5:70:c2:2c:ad:7d:b0:6b:eb:8b:b5:b1:41:a2:50:46:
2e:35:e3:24:85:1b:16:fe:3a:46:c3:fa:4d:79:f6:fe:dd:3a:
24:00:fa:97:17:a1:cb:88:36:1f:23:6b:5b:24:0a:ac:d2:aa:
70:4c:55:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:30 2026 by rpki-client