
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier: 6UE8hbqNghEcQ71GM/ylwSQyV2TZSXDBa6IEq8CIS1U=
Subject key identifier: E9:56:D6:87:F8:3A:A4:6A:BB:61:45:93:44:63:FE:E3:E8:7D:F4:31
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 14A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number: 1438
Signing time: Tue 24 Mar 2026 16:48:32 +0000
Manifest this update: Tue 24 Mar 2026 16:48:31 +0000
Manifest next update: Tue 31 Mar 2026 16:48:31 +0000
Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: TpqQVnOozHBfuW9wY+ZblvgTjqfEjYa95WVTNnb5DWE=)
2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: xKENUn13Ef2bP0B62DPkEXchyNaPtBjxu7QmsrqxB9E=)
3: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: XTo7hzo+YS5Mx8+cYSyBvlAGKzskb8sqYpNZv6UbZw0=)
4: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: wFgqxtjBGSnNz0V3JbbMZbJffl0S6xGyyA4P8cQ+F5Q=)
5: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: RY4kpnbvPpjFeHSCdD9BLyLv0qAmm+duLbNyMu+5+gA=)
6: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: JVqWfxQ3Imk/tHtB1lFlgnw7x7J3sXEP1K4IX9cY6Sk=)
7: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: 35M/vR3gb3Yiy8oN9cgMH76bee2iK7+OfBfGhUwH558=)
8: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wx0Bxj5s6AtaxYxKTNAOFbXAlN9uVO+TgC5goivQpV0=)
9: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: qFYywIbpjRFT5ByV5zfgerp4DpadK1bWKX1LRe0ll+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5288 (0x14a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Mar 24 16:48:31 2026 GMT
Not After : Mar 31 16:48:31 2026 GMT
Subject: CN=69c2c060-35f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:97:59:cf:95:6d:e2:08:b7:d1:12:16:32:
89:4b:1a:db:39:ba:9e:19:9a:2a:79:ff:c6:9b:99:
71:75:01:d1:6e:db:88:23:a8:b9:97:62:85:2a:b1:
fd:90:ab:4b:5b:8a:50:f2:6b:da:b8:b4:cf:4f:21:
6c:68:62:42:a5:22:9f:73:50:fe:8d:a2:7e:6c:93:
3a:08:d2:13:ac:a7:f0:21:75:8f:ed:7b:fc:31:97:
28:42:f0:9b:4f:3e:26:58:92:63:97:fc:64:5f:44:
9c:c5:37:34:4f:02:44:96:02:d0:69:94:f8:15:99:
15:f2:f2:56:e9:45:39:b1:70:d5:9a:96:43:cd:9f:
0c:a3:8e:32:35:f6:e5:2d:fe:6d:c8:83:61:aa:bf:
ad:88:68:04:0f:f6:d2:7a:ce:bf:fd:21:ac:2c:e3:
82:04:12:9d:e7:8d:e0:2e:7d:e0:5a:b8:7e:e2:c0:
8c:18:54:bb:36:2a:bb:fd:ff:2f:ca:cb:6a:54:58:
25:87:46:ab:3b:e4:cb:6f:e0:fb:b0:0e:c5:c0:55:
50:ba:a6:e6:a3:0d:98:0c:b0:f0:b6:d0:2c:eb:32:
81:9f:7c:f1:16:5d:1f:d0:08:3c:b7:ab:df:49:92:
a3:1c:5c:c2:ce:f2:03:34:b0:76:28:29:0d:bb:e4:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:56:D6:87:F8:3A:A4:6A:BB:61:45:93:44:63:FE:E3:E8:7D:F4:31
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:34:21:3d:d5:8e:54:4d:2c:39:31:7c:00:31:91:50:29:69:
f1:7b:27:9e:e9:60:51:57:8f:dc:81:b8:c7:73:ba:e7:7a:5a:
1e:92:15:9a:a3:df:31:22:92:cc:4d:9e:5f:3d:27:a6:b4:c0:
0b:ae:69:28:91:5e:eb:a8:8d:19:a3:b3:d5:95:44:b4:d6:cc:
1c:fc:21:eb:8f:02:6b:ef:ee:3f:58:00:47:a5:69:fb:77:47:
e4:11:a6:d9:6f:3b:b8:52:21:10:e4:0c:b8:7f:48:fa:66:49:
2d:bc:2e:eb:b6:c2:f1:d5:35:02:0f:91:6e:e7:08:64:8d:2c:
fb:6e:a0:f8:d0:68:0d:a5:0a:4f:1d:c2:7e:f0:f8:d9:3a:9a:
1c:29:b0:05:ca:8d:1c:52:d6:3b:c6:ab:82:b5:05:6c:8a:d8:
46:63:68:f2:4e:69:bf:ef:5c:de:82:d2:e2:00:a5:66:99:52:
b0:05:56:93:d9:f9:46:0f:15:39:31:eb:b6:a1:d9:50:06:11:
70:91:8f:72:dc:b5:54:ba:38:16:55:ea:57:29:a3:6c:37:28:
48:d5:1d:db:f0:99:9b:61:09:fe:ca:e8:77:d0:4a:13:a1:22:
7d:67:19:1a:4a:cf:43:54:a1:11:ac:38:0f:a4:57:82:7d:09:
ad:12:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:41 2026 by rpki-client