
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json)
Hash identifier: rUYH3sPNzHwkpb6w/eI+JgdPC+thKyxkEBIs/lAkSmI=
Subject key identifier: 70:91:B8:0D:99:52:8A:DF:2B:13:48:CE:1B:B8:14:76:9D:43:D5:13
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
Manifest number: 0104
Signing time: Wed 25 Mar 2026 05:19:39 +0000
Manifest this update: Wed 25 Mar 2026 05:19:39 +0000
Manifest next update: Wed 01 Apr 2026 05:19:39 +0000
Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: TnTNiBZuidZWCPQ6csjjyXxOhs4SFHtg204wawoCFys=)
2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: LUj3nw3I/55jfghfKNbIADhEH+zObxvm94ONzxqJb9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Validity
Not Before: Mar 25 05:19:39 2026 GMT
Not After : Apr 1 05:19:39 2026 GMT
Subject: CN=69c3706b-03aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:3c:98:97:30:46:cc:bf:88:e4:5b:94:4e:
ed:09:3d:d3:28:16:2a:bb:4b:a2:a3:fc:c7:c2:de:
73:c1:4e:b5:0b:e2:58:9c:7e:e6:ea:ad:50:9c:dd:
86:2f:bc:ce:bf:65:2b:6d:e5:0b:c0:4b:13:c3:07:
fa:51:d4:17:a1:f7:cd:95:9f:d6:1b:b2:46:39:45:
61:74:81:5b:d5:b2:88:c2:ac:ef:62:45:8a:72:73:
2f:4c:aa:b3:e8:c4:bc:03:0e:67:23:f8:b6:85:92:
4f:64:16:73:d3:89:17:2d:f6:ae:d8:a3:f0:c8:3b:
c8:b1:dc:dd:9c:44:5a:da:2f:56:35:db:9c:83:f8:
44:c4:b4:0a:cb:89:48:a8:1d:88:22:ad:f3:3b:34:
3a:0c:c0:b8:56:98:2d:a1:7b:ab:a3:24:5d:d6:47:
1b:16:b1:0b:d8:c7:d4:3a:e2:4b:2b:e3:2c:33:5f:
85:3f:8a:8d:0c:79:80:38:cb:b4:3e:6d:43:a5:24:
56:c4:ef:37:19:c0:25:eb:a1:39:ca:58:9e:e7:93:
87:68:60:ff:97:0b:3a:40:64:7a:4e:ae:43:dd:00:
75:aa:6b:76:11:a7:d1:dc:89:ad:63:b1:14:5b:ee:
e9:5f:ca:93:fb:8a:a1:7e:f9:a9:5a:74:3a:ae:9b:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:B8:0D:99:52:8A:DF:2B:13:48:CE:1B:B8:14:76:9D:43:D5:13
X509v3 Authority Key Identifier:
keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:dd:c9:bb:ec:38:de:b5:ce:8d:5d:79:37:a6:42:a2:0e:1d:
99:f6:64:97:bf:04:96:7d:59:7e:74:90:dc:f0:e5:1d:a2:c4:
f9:dc:c8:61:71:c5:00:57:33:a2:af:15:34:49:aa:c1:32:8c:
63:99:d5:8c:49:6f:1b:89:79:db:1b:d2:0e:ac:be:cf:e4:82:
38:08:52:9f:40:af:02:d9:4e:a6:a8:33:88:da:63:76:db:a2:
4f:37:c4:b6:cb:53:92:dc:3d:40:8d:47:18:68:88:8c:c5:97:
0a:68:09:7b:3a:ee:0b:1a:e2:61:de:51:80:35:9b:90:d2:45:
54:19:01:b8:38:f6:ed:ae:88:9f:b6:fa:97:84:bb:14:44:be:
de:61:a9:11:4d:93:8c:d4:e2:e5:75:ab:79:27:10:10:3c:be:
24:1a:cf:e1:b2:a5:09:da:33:31:4d:4c:e9:69:99:82:fd:aa:
22:56:ed:d1:9a:ee:e3:9f:05:1b:42:d5:4a:6a:5f:a1:69:a6:
32:19:25:f3:22:b9:e4:33:b3:4c:bc:3e:1d:02:6c:a9:f8:42:
2f:61:0f:30:be:20:ea:52:a6:ab:f5:1e:83:d0:9c:13:e3:2b:
84:2f:57:99:99:58:87:91:28:b0:d3:d0:21:f5:5f:1e:08:cd:
d7:a9:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:17 2026 by rpki-client