
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
File: R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json)
Hash identifier: mi0/mzhOPMIge20uM3/8yymk1RRKL0jCYXUWlGbEuDg=
Subject key identifier: 57:D8:C7:5C:C6:69:18:E4:C4:C2:36:6B:DC:EE:7D:67:87:88:AC:1D
Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Certificate issuer: /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Certificate serial: 031A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
Manifest number: 0312
Signing time: Wed 25 Mar 2026 00:49:31 +0000
Manifest this update: Wed 25 Mar 2026 00:49:30 +0000
Manifest next update: Wed 01 Apr 2026 00:49:30 +0000
Files and hashes: 1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: cYx3HrCtlyCcVwmSSefdk5eUZurfYPsM7DLly0upd0w=)
2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: QgXgIU4iewVv/gvtM7nRh4tylfGnpHiAGu1ZYVRzjpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Validity
Not Before: Mar 25 00:49:30 2026 GMT
Not After : Apr 1 00:49:30 2026 GMT
Subject: CN=69c3311b-883e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:d3:87:ef:89:1a:59:e4:b3:dc:b7:24:cc:
8a:43:82:1e:90:98:4f:26:92:a5:7f:be:9d:12:0f:
6c:b1:70:3d:f5:8a:4a:f9:3b:bc:7d:c5:b4:7c:1e:
b8:5e:1f:0d:91:c0:68:be:a7:b9:f8:c3:ef:91:90:
5b:b8:8f:08:3a:6a:8d:9f:4c:23:9d:e7:b1:be:88:
0e:74:96:99:d0:20:e7:0a:4e:bd:f4:9d:1d:2c:25:
93:c5:62:e6:f5:32:96:82:7b:ee:9c:49:9f:b5:af:
10:29:1a:01:ce:51:4e:c2:3a:db:fc:58:63:42:e6:
5b:5d:d0:e2:09:36:e4:b5:5e:01:2c:3a:da:fc:b1:
6d:6b:82:01:03:a6:7e:03:15:63:ed:e3:a5:e2:a7:
62:da:56:fe:77:d2:f6:df:00:49:c8:5c:4c:cb:f9:
1f:66:c6:a3:e1:47:28:97:1d:b5:41:d8:20:09:cd:
1f:ba:81:cc:b4:8a:60:a3:41:fa:0f:ae:f5:f8:67:
05:70:c6:8c:6a:a0:58:6e:c1:dc:19:0a:b5:e9:3f:
8b:15:16:31:46:d8:fe:4d:4b:9b:2b:9b:8b:df:d5:
35:bf:85:5f:7e:39:29:b8:0f:5a:d1:f5:e9:8d:f0:
71:50:06:e3:07:80:b5:c7:d2:b9:db:8d:7b:da:37:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D8:C7:5C:C6:69:18:E4:C4:C2:36:6B:DC:EE:7D:67:87:88:AC:1D
X509v3 Authority Key Identifier:
keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ed:4b:61:1b:f3:58:ff:2d:67:b9:b1:96:ce:c0:ce:13:52:
fd:28:0b:1b:fe:25:b2:29:64:40:55:0f:3a:ff:44:d2:0e:0f:
60:04:f2:e3:f1:6b:08:36:82:50:37:77:65:02:53:ff:8d:83:
b2:f2:ba:6a:91:e2:95:f2:b0:c2:3d:75:66:f2:ea:31:2b:5f:
a8:7e:a3:73:1d:5e:40:e3:ea:df:a5:b6:d2:c4:ab:47:be:1f:
85:96:fd:39:d8:63:4a:43:08:36:86:2a:3c:f9:94:54:e6:8c:
76:fc:d5:41:eb:92:4c:b4:01:f1:9e:f8:c5:1a:e7:bd:9a:1b:
e8:7c:94:a2:b8:31:be:0c:77:9e:84:92:82:a5:bd:7e:8a:ad:
24:eb:53:83:0e:61:17:0d:3e:7d:88:9d:eb:b1:7f:7d:31:b9:
f6:5d:36:90:f5:6b:c1:91:12:f8:ea:75:24:d2:6d:d4:3a:0c:
5d:a6:f7:08:2e:55:ca:2b:de:53:96:2b:2b:14:98:36:cd:c2:
58:5a:d1:18:a4:ce:59:44:7d:e7:e1:28:1f:b9:a3:fd:ab:3d:
1d:65:95:21:37:2a:a4:3f:b4:75:67:70:00:42:8a:80:50:39:
83:c4:7f:ab:fc:6c:c5:08:6d:69:94:df:cf:c2:35:bb:9d:3c:
6e:2e:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:23 2026 by rpki-client