
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json)
Hash identifier: 35bTujiwXM3IjuMT5dS6ej6539Hohgh+f2Yimfe+n9I=
Subject key identifier: 5A:A8:2D:68:C3:DB:16:13:44:D8:F3:FD:CD:A3:0E:99:55:98:4E:23
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
Manifest number: 01D6
Signing time: Wed 25 Mar 2026 02:54:44 +0000
Manifest this update: Wed 25 Mar 2026 02:54:44 +0000
Manifest next update: Wed 01 Apr 2026 02:54:44 +0000
Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: M9UeVex5VhrWFhvSWr3xhEq79mzh9RgTK96PDhoYRhU=)
2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: 6S2UbDPQhc0s/ttHg30hgcMezorQYndA+hy2IrwcJyg=)
3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: Dn+JL4IFF8F6udJCXJBfFR0N/JW0riYqK/noh4aF+Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: Mar 25 02:54:44 2026 GMT
Not After : Apr 1 02:54:44 2026 GMT
Subject: CN=69c34e74-fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:94:cc:0c:2b:f3:12:d2:23:3d:77:1f:a1:17:
de:13:8b:71:95:c9:cc:91:1c:57:22:68:ce:5a:a6:
b6:d8:e1:5f:e9:c6:71:03:4f:24:88:15:04:c1:0d:
a5:69:92:e8:fd:f2:92:08:45:05:17:21:48:e1:1a:
9d:7d:8b:e1:4a:36:56:07:e2:33:67:3d:92:0b:fb:
53:7c:68:8d:c9:1f:15:3e:26:7f:c7:99:89:00:c5:
94:b9:87:00:99:4a:00:07:9c:92:12:ed:d1:cc:40:
30:83:6f:f9:43:6c:46:84:3b:53:01:db:a1:8f:68:
0a:97:a3:8a:91:02:d1:d9:31:6c:23:e3:a6:cd:2e:
1d:b7:c6:c8:f8:e0:01:81:6b:09:c9:3f:b0:81:31:
aa:cd:db:bf:49:fb:52:55:e4:91:12:e7:6c:a9:05:
43:57:5d:e1:31:e6:57:56:47:eb:8c:55:8a:f0:41:
ae:30:f0:6f:61:c2:44:0d:78:94:2d:78:b1:17:f7:
b7:e2:a8:bd:4a:3f:8b:6d:af:ba:5a:ad:f0:84:71:
a2:75:12:b9:60:e2:eb:f2:ce:de:18:7b:e5:06:5a:
7f:3b:b4:e0:85:4f:22:c8:bf:26:69:3e:55:83:fe:
78:fe:08:f9:b9:0f:0a:54:1f:0d:17:37:24:c8:c6:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A8:2D:68:C3:DB:16:13:44:D8:F3:FD:CD:A3:0E:99:55:98:4E:23
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:82:8d:88:fc:f2:45:f3:dd:d3:6d:18:f2:ff:32:a1:aa:cd:
d6:2a:9d:40:b9:9b:6d:1f:b9:06:7e:22:3d:84:04:94:5e:4f:
7d:f2:aa:79:d2:c0:51:d7:e7:7c:b1:94:5a:cf:80:be:20:96:
dd:bf:44:28:84:19:28:45:5e:ea:ff:d2:ce:4d:0a:1b:10:86:
dc:08:92:ef:a5:4d:5e:fd:74:2d:d2:8f:79:eb:ff:d1:0b:2d:
61:8c:8b:01:3d:04:cb:99:83:bf:29:aa:70:f5:37:ca:ff:6b:
aa:2a:dd:e2:b5:a4:df:8d:89:2f:39:34:46:0a:e7:3c:f0:7a:
c7:cc:9f:5f:19:ae:f6:84:40:45:4b:f7:42:d8:d4:c7:03:89:
47:46:c5:1b:40:41:40:46:4d:b9:c0:d1:91:e7:0a:8a:93:fb:
48:15:9a:22:40:22:a4:c5:a6:99:de:af:f2:25:29:24:a6:6b:
f8:ce:4e:6b:ee:67:7b:c5:df:fc:5d:9d:97:2b:c5:4b:a0:92:
7e:0c:65:e1:5d:95:e0:2a:ab:b1:b6:d6:19:7c:29:f7:a6:4a:
80:7f:b3:36:b2:b9:11:41:3e:5f:83:74:5f:0a:b9:e6:3b:39:
9f:8b:79:e0:31:a4:fc:1e:24:a7:f2:e9:02:59:92:18:36:f2:
c2:8a:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:03 2026 by rpki-client