
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File: Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier: od6G8qQs3P4+MHD0n3seEpwL1ShFTXG7VFoTMFU/fPU=
Subject key identifier: D6:33:DE:4E:D1:39:4A:2E:EC:B8:29:FC:CD:77:3A:9A:0D:AB:1C:67
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer: /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial: 03CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number: 03BD
Signing time: Wed 25 Mar 2026 00:20:29 +0000
Manifest this update: Wed 25 Mar 2026 00:20:28 +0000
Manifest next update: Wed 01 Apr 2026 00:20:28 +0000
Files and hashes: 1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: AWU9puzWcpZwb74IasPDl1ezWbh8QB8a3IDPSEPSzR0=)
2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: oi0ODtPojLY2F+SV7gig6XP6ZXcFVtXAEvyeqSGBUVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 971 (0x3cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Validity
Not Before: Mar 25 00:20:28 2026 GMT
Not After : Apr 1 00:20:28 2026 GMT
Subject: CN=69c32a4d-6e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:c5:8e:f0:85:ad:78:0f:a6:46:03:cf:c0:
24:81:d8:e6:54:58:95:ca:f9:82:07:e4:80:f4:a8:
69:60:6e:a3:c9:9a:52:77:3b:28:72:4c:38:8c:61:
f0:50:c7:21:cb:e7:75:b4:6e:61:39:f0:24:b6:07:
3b:de:b3:f5:85:aa:fe:9e:a8:0e:2a:d8:76:3e:af:
28:77:93:55:62:62:8a:41:83:0e:71:15:28:01:c2:
dd:7b:58:50:f1:3f:7e:f6:fd:55:cc:30:64:ef:7a:
89:45:59:2f:1f:16:47:f9:4e:f2:94:5c:fb:f3:25:
55:88:90:b3:08:72:e9:cf:ff:db:eb:0d:4c:ff:de:
ce:b6:29:77:ba:06:cf:4c:0c:75:78:24:d1:7e:2e:
aa:72:e1:8e:8b:64:31:4f:59:8a:b2:c1:05:10:9e:
09:b7:c2:aa:6c:f3:b1:ce:f7:66:28:85:41:d0:b9:
69:09:a5:f0:bb:da:98:7d:f0:81:b5:fb:12:d3:f9:
87:63:c1:32:e6:83:e8:60:67:d8:eb:3b:36:e3:19:
88:02:42:12:e4:88:ef:7d:cb:56:b8:51:a7:ae:12:
48:c4:7e:56:07:63:70:f8:93:ec:88:95:cb:85:5d:
89:8a:73:be:5f:cc:fd:0a:aa:79:a4:4e:f6:ac:ff:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:33:DE:4E:D1:39:4A:2E:EC:B8:29:FC:CD:77:3A:9A:0D:AB:1C:67
X509v3 Authority Key Identifier:
keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:45:d6:b2:19:ee:a3:7a:af:74:ad:a4:50:82:92:83:85:5c:
a2:a9:29:4a:8f:94:82:97:44:06:97:2f:4f:7e:97:53:25:fd:
2b:db:01:49:04:7f:8c:cb:2a:5f:b0:fe:d4:08:c3:66:09:65:
63:48:b4:74:17:30:0d:af:4b:b3:87:75:b1:6b:5d:98:1a:97:
bc:ed:1c:6f:2f:42:3d:04:d5:11:55:f1:15:84:0b:2f:9d:8a:
0e:5f:a5:27:ed:9b:21:c2:40:e4:c3:1f:92:40:92:6f:10:6f:
33:c8:55:63:57:e4:0b:dd:51:d9:be:3b:1f:91:de:12:50:96:
8c:56:0f:fa:10:02:33:26:e6:53:58:4d:48:7c:a0:0e:14:00:
44:c0:59:bb:08:01:59:e0:21:9b:98:90:e8:7d:12:19:7f:78:
fb:f0:65:6e:82:27:41:a1:7d:c6:82:5d:84:60:22:bf:3e:a6:
d8:f9:59:9c:e1:28:59:6e:49:04:d8:96:d6:16:60:02:cf:8d:
3f:16:91:91:86:bc:07:a7:58:e1:33:e1:c3:9c:b1:bc:79:b1:
fe:3e:e9:2d:11:62:69:c9:5e:7f:e0:5c:fe:c0:45:71:7b:7f:
b4:33:50:8c:89:d9:71:5b:3e:e0:be:2f:1b:9e:63:bc:65:3a:
f8:22:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:46 2026 by rpki-client