
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json)
Hash identifier: RvLC2OPY1uEy/esFrwo1nO2AgFxXAtZiVUmNMgwnnDQ=
Subject key identifier: 78:AF:CD:33:B4:21:61:EC:30:C3:83:C1:65:9F:6D:9B:A3:4C:DB:66
Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Certificate serial: 355E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
Manifest number: 3541
Signing time: Thu 26 Mar 2026 14:16:12 +0000
Manifest this update: Thu 26 Mar 2026 14:16:12 +0000
Manifest next update: Thu 02 Apr 2026 14:16:12 +0000
Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: zcSREwNRwgxbADCGVwnfV57ODLq0sBA+pM4EqStZNK8=)
2: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: UzEPTLsD5T1ajQoZ/gCnYZnBau95KS3L99yADoGvBuE=)
3: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: 1OACpcIMwxDFvy670DP/4OuuubrWAy3MQQBov3eDpOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl
rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13662 (0x355e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Validity
Not Before: Mar 26 14:16:12 2026 GMT
Not After : Apr 2 14:16:12 2026 GMT
Subject: CN=69c53fac-4510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:6a:a1:02:08:22:81:36:52:41:8d:8c:7c:
ca:1e:3c:00:1d:4d:16:8f:a4:26:ee:7b:c7:0d:44:
68:e3:a7:10:98:f5:b2:11:0c:6a:6c:b9:4d:39:05:
ab:db:db:9b:6b:ed:fa:06:43:26:f5:f3:00:ef:e2:
51:4d:23:b4:01:41:bd:46:e5:96:18:f9:02:d2:d3:
6e:4c:08:db:b2:6e:88:de:ca:92:a2:50:20:7c:d3:
2b:d8:11:27:1c:1a:39:f0:6b:bd:94:3b:27:4e:03:
2b:a4:4d:e9:f3:c6:15:60:82:fc:a2:ee:17:67:42:
59:89:e6:9a:c2:a1:b6:ff:eb:f6:35:af:dc:e8:ac:
96:dc:24:5f:12:a6:0b:15:46:17:cc:a4:eb:f8:c9:
4f:bf:98:fc:a4:93:3e:2f:6b:ff:5d:1c:b1:ce:a6:
1c:92:0b:74:d9:a9:f7:5b:21:0d:14:ba:b2:48:e4:
22:87:62:c2:b8:e0:00:52:bd:1c:94:08:dd:44:c3:
4d:04:ae:f1:66:d9:7c:b4:68:f2:54:bf:1b:10:41:
dc:7f:71:a5:0a:74:81:f1:c3:90:b5:2d:81:46:a0:
0a:3a:f3:7d:0b:56:af:f3:05:db:89:54:59:5a:ec:
35:ae:67:bd:e2:ca:5e:bd:cf:9d:a6:d9:6b:ab:37:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AF:CD:33:B4:21:61:EC:30:C3:83:C1:65:9F:6D:9B:A3:4C:DB:66
X509v3 Authority Key Identifier:
keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:a8:18:f2:ef:9b:3a:b1:a2:f4:b8:12:fe:20:06:64:d5:d3:
26:36:e3:b4:ba:96:b9:e8:88:40:07:89:d4:ae:7d:19:e3:6b:
6c:76:72:8e:53:dc:b0:c2:15:4e:79:e0:0e:cf:93:27:56:ae:
36:a7:a1:ab:f7:49:66:f7:62:c6:b1:78:75:62:91:d5:b8:36:
a6:23:26:c5:66:47:37:bd:59:79:53:f8:cc:b7:af:ec:73:21:
6c:b4:69:e1:6d:fa:81:4e:7c:05:00:ea:d5:51:0b:bc:b3:b3:
fb:ad:10:20:91:7e:80:57:1e:09:26:f2:d2:f7:93:3c:1d:1d:
95:ed:3f:ae:92:dc:d9:b6:b3:81:8c:13:0d:f2:36:7d:ec:40:
96:2f:28:33:bf:ac:1a:28:37:2a:a7:b6:9a:5e:dc:fb:3a:08:
45:66:1a:7f:bf:6a:a9:ca:c0:83:68:44:15:0b:25:43:43:3a:
cf:28:17:31:ff:b5:1e:1d:f5:64:7e:93:87:dd:90:14:87:b2:
ce:9f:f2:ca:21:9f:ae:1c:c5:3f:34:51:73:54:da:8a:9a:cc:
08:e3:44:ed:60:7f:f4:cf:af:e9:8d:bb:34:bf:65:82:a7:af:
f5:2b:e9:68:f9:10:32:6f:08:ca:92:40:b3:7c:18:ae:9b:5f:
8e:57:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:41 2026 by rpki-client