
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json)
Hash identifier: oz7Z6FZwmEaYW7Pr9hgP01HFQ9oRrtWhgRQO0aUb7ac=
Subject key identifier: 46:CD:9F:30:28:BF:E4:A6:B7:44:1A:B9:DA:23:C3:2A:43:FC:F7:8A
Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48
Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
Certificate serial: 351E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
Manifest number: 5213
Signing time: Thu 26 Mar 2026 15:15:47 +0000
Manifest this update: Thu 26 Mar 2026 15:15:47 +0000
Manifest next update: Thu 02 Apr 2026 15:15:47 +0000
Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: VFDJgVy75mQgsW13oNzCzUvFIq2kEbId4EyjPdt4Nd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl
rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 15:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13598 (0x351e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
Validity
Not Before: Mar 26 15:15:47 2026 GMT
Not After : Apr 2 15:15:47 2026 GMT
Subject: CN=69c54da3-ef9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:7b:a6:33:01:f6:c1:cb:52:d4:a5:bd:9a:
50:bc:09:96:9f:cb:43:1e:8a:f1:b2:c5:2d:c4:53:
eb:55:47:8c:eb:0a:dd:31:2e:9f:4b:31:31:6f:ad:
02:72:94:20:87:63:54:2e:c8:de:d3:9b:dc:ad:20:
ef:87:e7:0f:12:8d:0d:9b:61:cd:66:a8:de:e2:06:
af:a0:0a:cc:1a:a5:48:14:ed:98:16:52:cd:0a:8b:
63:40:c7:71:6f:4e:42:37:50:66:5d:d3:c2:19:32:
8f:e4:54:f6:9c:a2:5a:d3:80:5b:f7:55:13:a2:73:
2d:fe:d7:24:41:86:2f:ac:30:cc:23:12:39:e8:bd:
33:9c:1f:30:49:1a:86:fd:d3:92:55:38:15:80:7d:
d0:1a:aa:3a:9f:64:42:d6:59:3c:bd:e2:7a:2d:e3:
b6:19:d1:b1:10:ba:23:7c:e5:89:f2:d5:2c:49:96:
4a:3d:8d:5e:b1:2c:2d:67:d5:4c:44:f8:3c:fa:3f:
4d:89:bf:0d:0a:fc:77:a3:7c:ef:95:c8:6a:8d:20:
b1:1f:6e:db:7a:5a:66:db:5a:63:26:34:69:e5:91:
4f:a3:66:ad:35:b6:ed:82:53:12:b7:c6:d0:5a:7b:
e2:34:bf:5b:25:b4:1f:81:c8:80:e7:7d:7b:9d:e3:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:9F:30:28:BF:E4:A6:B7:44:1A:B9:DA:23:C3:2A:43:FC:F7:8A
X509v3 Authority Key Identifier:
keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:31:87:a7:02:c0:78:19:70:2f:0b:32:c4:b7:4a:41:9d:c0:
51:85:3a:d2:d8:70:73:6a:f1:ce:49:c2:6d:97:7e:97:d7:de:
f5:8b:48:67:db:4f:f6:e2:bc:61:cb:d3:82:18:a1:91:08:24:
4a:17:2b:99:24:0b:ea:bb:2c:31:71:0e:59:f6:2f:9b:f0:c1:
dc:9c:5e:85:b6:aa:5c:b7:5e:48:e2:46:6e:b5:e9:98:79:8f:
5e:3e:bc:e9:7b:5b:37:5b:bd:cf:8a:dd:69:94:f9:11:10:d6:
47:ba:09:a5:d7:37:0c:3d:b9:b7:25:f1:31:21:eb:53:13:ef:
34:8b:ee:19:06:2a:2b:82:e2:fd:ed:11:b7:ed:7b:02:28:40:
7b:15:b7:35:0b:2b:a4:47:cf:7e:f6:28:ff:9f:d2:48:6f:69:
5b:e2:79:30:69:ea:43:e3:ed:98:ab:98:34:6b:fb:2b:5e:a0:
08:93:84:64:01:dc:ea:59:07:d2:db:67:92:9a:62:82:df:3c:
83:45:06:bb:a9:d5:67:e2:1d:52:21:50:8a:af:88:03:60:fa:
8c:87:41:e2:80:17:e5:6a:1e:ee:91:de:f8:58:16:a4:cb:d1:
99:a2:f0:50:15:36:f9:22:3e:56:aa:4d:59:4d:a2:73:31:ad:
bb:65:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:31 2026 by rpki-client