
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
File: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json)
Hash identifier: AHicEjtX8SNLfcxeAZObEmQZglRFpxTMmU0UMSNKP/c=
Subject key identifier: B2:76:2F:96:C5:6B:DE:88:C3:F6:5B:21:9C:1C:30:05:5C:11:EC:0F
Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29
Certificate issuer: /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929
Certificate serial: 02AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
Manifest number: 02AB
Signing time: Wed 25 Mar 2026 01:06:06 +0000
Manifest this update: Wed 25 Mar 2026 01:06:06 +0000
Manifest next update: Wed 01 Apr 2026 01:06:06 +0000
Files and hashes: 1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: PauFPmrU/MjkxN51AlNpI+j3Iz4V7tcp4r6mSFWjSEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl
rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9019, serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929
Validity
Not Before: Mar 25 01:06:06 2026 GMT
Not After : Apr 1 01:06:06 2026 GMT
Subject: CN=69c334fe-f1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:9a:23:30:f2:0a:1b:e1:3a:4f:31:f0:10:
38:a7:06:18:02:e3:26:cf:6f:59:c4:ec:69:2a:0e:
92:eb:09:4e:3d:9a:cf:90:b1:8d:b9:45:ca:ce:d4:
76:1b:68:0c:01:2e:14:7e:1f:2f:83:30:40:1d:04:
5f:72:42:34:6a:ec:b9:85:30:6e:9e:d1:73:20:20:
fe:09:c0:2a:21:08:b0:0c:09:33:fc:ab:a4:1e:3e:
e8:90:1e:01:a8:24:d4:d1:a4:2c:3a:13:92:bf:55:
3c:d7:29:49:74:29:5c:b7:a3:ac:0c:fa:af:9c:2b:
21:f1:dc:b7:2a:38:a3:85:25:0d:0a:21:9b:91:f0:
c9:68:ec:ca:15:07:23:5d:8c:61:a2:80:68:a9:b1:
7d:a4:6a:e3:57:76:45:1d:ee:91:0c:cd:f9:fb:3c:
20:54:2d:74:85:0d:09:a7:c1:a8:0d:9c:6e:10:bd:
8c:0a:b6:e3:55:7f:bc:98:90:39:ba:36:1e:e6:86:
b3:d0:24:ce:7d:45:74:c7:41:a7:22:26:ef:ff:b1:
37:41:ae:53:f5:63:82:e3:d8:46:0e:c3:be:86:4e:
ae:af:0f:79:95:92:d0:2b:cd:ef:19:6e:79:22:21:
ca:7e:68:a9:dc:c7:0a:a6:87:03:0d:5f:ad:e4:c7:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:2F:96:C5:6B:DE:88:C3:F6:5B:21:9C:1C:30:05:5C:11:EC:0F
X509v3 Authority Key Identifier:
keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:0e:09:5e:0c:ba:a7:02:17:ca:da:17:76:2e:05:94:33:95:
13:f7:9a:27:b2:ee:6b:27:fd:85:c2:ad:0c:3b:4a:11:69:0e:
ff:8b:ed:f6:e6:13:aa:d3:76:be:a3:14:09:fb:33:f8:3e:a0:
8b:4e:10:3d:0e:58:2a:20:71:00:ff:f9:08:9f:99:99:eb:7d:
07:8c:5e:a9:d2:a8:1b:21:70:6f:b3:d4:dc:ae:a1:7e:f3:52:
0d:c7:09:48:a6:36:c9:e9:d0:e6:be:89:74:c8:99:03:89:21:
f2:4d:f4:4f:fd:87:8f:f4:38:31:09:8a:cb:8f:e0:3d:e8:8c:
a5:54:08:07:02:79:76:40:2d:58:fb:06:fb:cc:4d:86:51:ec:
8b:c9:ed:2f:72:b5:d6:43:c9:9d:68:a8:ce:fe:c3:49:e7:e5:
f4:c2:c8:ef:d2:e7:eb:47:bb:60:eb:5f:04:07:3a:bc:83:4d:
52:f1:b4:71:40:ce:6d:de:d6:c4:1b:43:ba:d4:42:8d:fe:9b:
45:7c:9f:af:87:17:14:ef:64:22:f3:e8:f7:61:a9:f8:06:45:
f2:bd:a2:88:ca:97:b2:18:95:e2:7c:68:85:5f:5d:b0:cb:a9:
57:e6:73:8a:9a:fb:80:fd:18:91:d9:1c:3e:68:ba:4b:5e:8a:
8f:f2:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:51 2026 by rpki-client