
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
File: 57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json)
Hash identifier: G55s3PIzCZRu0iI+cl0pI+6cRMptCd4x/JCmvyne9lg=
Subject key identifier: 04:2F:F6:E3:56:09:6E:C6:4F:AB:A6:C9:B9:C5:7F:5B:31:D7:3C:F0
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Certificate issuer: /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial: 0EA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
Manifest number: 0E8D
Signing time: Tue 24 Mar 2026 17:36:40 +0000
Manifest this update: Tue 24 Mar 2026 17:36:39 +0000
Manifest next update: Tue 31 Mar 2026 17:36:39 +0000
Files and hashes: 1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: K5MJFZ1rRg8FFV+0pdiPPfYfjvb4m3Bun9y2lMOA5yk=)
2: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: 00zBsBKgY45h9leLMrh5bnhoj9xQVpyWuZdsxJiXRmQ=)
3: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: euR0nP+kaFd6kQu0agN5nMyxfPmJbVXruQJYUEGKZTU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3746 (0xea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Validity
Not Before: Mar 24 17:36:39 2026 GMT
Not After : Mar 31 17:36:39 2026 GMT
Subject: CN=69c2cba7-0159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a5:3b:d9:74:d9:ad:4e:b6:1e:d4:ee:e6:26:
5f:bd:3e:43:3f:e4:ef:e9:6a:fd:98:c8:b7:78:fb:
3f:33:cf:f2:18:1b:6d:bd:cc:ba:60:e6:66:91:35:
42:2d:6b:b3:99:2e:38:d2:c5:2c:c8:96:59:7d:3e:
b5:c5:a0:cd:6d:97:e9:a5:e1:c3:b1:d9:35:40:6f:
18:12:2c:9e:93:90:a6:9d:7d:6a:ae:f3:3b:ba:f1:
5a:c8:23:0e:f4:45:80:33:41:76:dc:f8:39:48:62:
1e:0c:b4:ac:25:bb:6c:42:44:eb:13:23:27:8b:1e:
25:2d:31:59:39:25:34:04:3d:35:bc:97:ed:1c:37:
4f:21:86:c7:65:b9:37:47:1e:a8:54:94:95:b6:b3:
73:47:af:38:28:82:2e:1b:b7:98:ec:11:5f:e9:a9:
39:94:7f:38:bc:66:41:25:90:cd:0b:2c:07:b2:08:
ef:6e:68:c7:cf:47:f8:8f:64:ce:77:fd:71:0a:ba:
f6:01:d5:b3:4d:7a:cf:4d:f7:64:30:ce:f0:ba:65:
73:90:9a:2d:3a:c7:01:b2:8e:c5:f9:48:b7:0f:29:
22:b5:b3:38:27:1e:a0:fc:cc:9e:76:f2:cb:ed:52:
cc:5c:0e:1b:79:51:47:91:d5:41:7e:fb:c3:2d:c1:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:F6:E3:56:09:6E:C6:4F:AB:A6:C9:B9:C5:7F:5B:31:D7:3C:F0
X509v3 Authority Key Identifier:
keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:71:a0:3a:f3:60:71:2c:bc:5e:4c:6e:f4:b2:f7:fa:44:fd:
51:1e:a8:bc:47:cf:4a:df:87:d3:50:08:5b:f9:fd:62:2d:2b:
5f:fa:37:f9:44:01:fb:7f:5c:30:29:57:c5:3a:f7:d4:b2:ed:
a0:84:49:81:3e:56:70:00:57:a6:2f:d0:22:d7:e1:36:0b:a6:
93:f6:c6:12:9a:13:ad:e0:c4:0a:9b:e4:ef:e6:82:70:27:8f:
ba:63:31:25:45:55:08:4a:37:b7:4c:c7:5a:ad:94:ca:1e:92:
75:76:f4:8e:8c:f8:33:d9:c2:59:4f:19:98:02:c3:97:11:a0:
5a:40:10:4f:dd:bb:44:f7:5c:37:39:c5:b9:a3:c4:8f:51:7a:
a1:09:46:a3:fe:2b:3c:80:58:8b:62:b0:2e:6f:69:fa:b0:95:
42:31:75:cc:10:7a:04:4d:7e:53:25:14:ce:bb:18:35:6a:aa:
b2:f4:6c:98:fa:17:75:6c:d7:79:93:e2:e0:9e:fd:9a:dc:f4:
2a:81:c7:ce:0b:31:99:46:38:dd:af:9f:b5:5b:fe:9d:73:bc:
66:d9:c9:90:97:e7:1e:6e:e4:ca:8c:b5:0c:c6:62:7f:f6:2e:
b2:d9:90:14:10:b2:8a:98:f6:c8:c9:6a:18:ea:6b:0a:52:9d:
e8:14:80:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZBMzkxMTAvBgNVBAUTKEU3QjQxQjNEMjU2RUM2QkQwQ0U3MTIxQjM3MERFNDc0
MUI4MzVFNjEwHhcNMjYwMzI0MTczNjM5WhcNMjYwMzMxMTczNjM5WjAYMRYwFAYD
VQQDEw02OWMyY2JhNy0wMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7aU72XTZrU62HtTu5iZfvT5DP+Tv6Wr9mMi3ePs/M8/yGBttvcy6YOZmkTVC
LWuzmS440sUsyJZZfT61xaDNbZfppeHDsdk1QG8YEiyek5CmnX1qrvM7uvFayCMO
9EWAM0F23Pg5SGIeDLSsJbtsQkTrEyMnix4lLTFZOSU0BD01vJftHDdPIYbHZbk3
Rx6oVJSVtrNzR684KIIuG7eY7BFf6ak5lH84vGZBJZDNCywHsgjvbmjHz0f4j2TO
d/1xCrr2AdWzTXrPTfdkMM7wumVzkJotOscBso7F+Ui3DykitbM4Jx6g/MyedvLL
7VLMXA4beVFHkdVBfvvDLcHKwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQv9uNW
CW7GT6umybnFf1sx1zzwMB8GA1UdIwQYMBaAFOe0Gz0lbsa9DOcSGzcN5HQbg15h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzOS83MzBGMDBCMkIx
QzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhyME01eEliTncza2RCdURY
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzU3UWJQU1Z1eHIwTTV4SWJOdzNrZEJ1RFhtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkEzOS83MzBGMDBCMkIxQzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhy
ME01eEliTncza2RCdURYbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvXGgOvNgcSy8Xkxu9LL3+kT9UR6ovEfPSt+H01AIW/n9Yi0rX/o3+UQB+39c
MClXxTr31LLtoIRJgT5WcABXpi/QItfhNgumk/bGEpoTreDECpvk7+aCcCePumMx
JUVVCEo3t0zHWq2Uyh6SdXb0joz4M9nCWU8ZmALDlxGgWkAQT927RPdcNznFuaPE
j1F6oQlGo/4rPIBYi2KwLm9p+rCVQjF1zBB6BE1+UyUUzrsYNWqqsvRsmPoXdWzX
eZPi4J79mtz0KoHHzgsxmUY43a+ftVv+nXO8ZtnJkJfnHm7kyoy1DMZif/YustmQ
FBCyipj2yMlqGOprClKd6BSA8A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:03 2026 by rpki-client