
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier: 0FoCSbZaHLSHpY6lGy/E64+4YCygkogkHm4RAQISPBo=
Subject key identifier: 64:D5:49:14:11:C6:64:BB:D4:5A:FF:67:1D:A8:C9:E2:63:B4:EC:6D
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number: 73
Signing time: Wed 25 Mar 2026 07:01:48 +0000
Manifest this update: Wed 25 Mar 2026 07:01:48 +0000
Manifest next update: Wed 01 Apr 2026 07:01:48 +0000
Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: rHc9A4tUPsXpolUU8qVgJGC9tD3hih1H6j4XbSZxItw=)
2: BAC878D0799511F098E98265C4F9AE02.roa (hash: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A=)
3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Validity
Not Before: Mar 25 07:01:48 2026 GMT
Not After : Apr 1 07:01:48 2026 GMT
Subject: CN=69c3885c-fba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:61:39:c5:7e:70:ba:2e:37:76:e0:f7:70:
51:08:fd:d4:4d:29:6d:af:3b:0f:35:cc:c0:72:1c:
06:73:7b:2d:1c:d8:e1:3a:3a:96:f5:cd:70:11:ca:
ae:8c:04:e6:c9:52:2b:50:bd:85:d7:a3:a8:52:4a:
5c:2f:d6:1e:b8:a8:7e:e6:ff:37:80:01:98:be:2a:
f6:66:95:1c:d4:cf:2f:6d:8d:64:c0:59:e0:a6:3f:
6e:8d:71:25:5a:6d:6f:32:ce:88:73:e1:d8:46:d4:
1e:7b:8c:2a:3d:9e:7a:db:b7:d9:84:51:23:7a:61:
3c:91:de:85:d7:e1:83:c3:2d:34:6d:a9:df:b2:6f:
f8:20:6b:50:70:57:d3:ce:fe:3b:e2:9e:4a:7c:54:
6e:6f:b2:2c:72:ca:c3:30:fb:e0:86:30:27:88:22:
9b:f1:98:6a:12:15:88:2a:e5:9a:3e:b8:05:3a:ec:
03:51:13:a2:2a:f2:a7:a2:d8:1f:b1:5f:73:ff:cc:
56:c2:c6:af:f0:55:38:12:fe:8d:90:c9:2e:1b:94:
3a:be:d7:56:fc:0a:92:ed:c3:b6:72:8a:e7:4d:84:
7b:fa:38:76:49:ee:d6:ae:5a:dc:b2:06:07:6f:c7:
79:f3:49:80:73:fa:9f:f3:fc:64:6c:79:78:5a:78:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D5:49:14:11:C6:64:BB:D4:5A:FF:67:1D:A8:C9:E2:63:B4:EC:6D
X509v3 Authority Key Identifier:
keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0b:c6:6a:f7:de:5d:e2:ac:ae:04:8f:f7:80:d2:72:3b:cb:
b8:5b:bd:fd:d4:7a:1f:7e:43:87:c1:26:2f:05:13:ba:c7:d8:
5b:58:d5:7a:43:b9:9e:0b:20:10:ff:9c:ce:8b:fe:11:ab:a4:
57:1b:52:9a:eb:82:3b:ab:19:2b:43:49:1c:04:c7:67:6d:76:
2d:b0:47:b1:17:8c:88:6e:1c:7c:e7:8f:31:f4:2b:f4:cc:cf:
89:d4:4d:2d:51:44:f4:5a:4d:f4:bd:e2:61:30:5a:ee:14:a4:
14:5d:11:4b:e2:61:28:6c:6a:60:95:b8:19:73:fa:c8:95:b3:
12:89:ca:7d:02:ed:4f:7e:58:ef:d4:b6:52:43:f3:2a:65:11:
de:47:dc:4e:c5:04:7b:21:47:03:70:5c:43:12:0f:a3:a1:d5:
ca:ee:9b:0b:51:0e:88:14:d8:e4:37:ef:f5:76:1e:f9:45:c3:
cc:41:42:a0:4e:b1:09:e4:4a:ab:8e:f6:ad:28:4c:8c:a7:1d:
1f:19:1e:ef:57:0e:b6:05:d6:69:70:a9:87:ad:94:36:04:d1:
1f:91:ab:f2:c5:85:68:a0:40:59:11:36:ad:bb:e6:2c:48:6d:
bb:0b:e2:06:86:b9:9d:30:cc:0f:c1:d7:27:b8:8c:92:d6:d3:
e6:c6:2a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:10:03 2026 by rpki-client