
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
File: U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft (raw, json)
Hash identifier: 9YJV2iTIkLEm3mE/jn1ty94jL2BY8716d5SZEwPRMsQ=
Subject key identifier: AF:AE:AC:BD:3D:B1:95:82:D4:B9:2E:3F:12:17:EE:CA:B0:E1:7C:01
Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
Certificate issuer: /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
Manifest number: 012F
Signing time: Wed 25 Mar 2026 04:49:47 +0000
Manifest this update: Wed 25 Mar 2026 04:49:46 +0000
Manifest next update: Wed 01 Apr 2026 04:49:46 +0000
Files and hashes: 1: U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl (hash: CxgfkpwjOyxva3u2bwNpduV12YGgeo81Zv/D3QRKz7A=)
2: 38D25300639D11EFB668775FC4F9AE02.roa (hash: orwyoS8UfNw3CU4v8yNK3/VV+51QmqRq4/4q/snL/As=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl
rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Validity
Not Before: Mar 25 04:49:46 2026 GMT
Not After : Apr 1 04:49:46 2026 GMT
Subject: CN=69c3696a-5d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:92:b3:53:4e:62:c1:5c:69:eb:92:1a:d4:
6a:93:27:c3:06:93:15:0f:84:2b:28:01:b9:17:8f:
ac:5a:37:52:46:89:0b:3d:7f:fb:5a:40:df:99:b0:
11:97:91:0b:b1:bd:5d:39:c4:80:74:b1:d6:c3:19:
d2:87:fd:92:b3:99:7e:87:99:cd:ac:e1:19:7f:ec:
0a:55:fd:65:41:54:ef:77:b8:c3:f8:aa:37:98:9a:
f2:5b:a7:53:d5:0a:ba:c6:96:1a:29:b6:e1:00:2f:
b5:4f:25:73:aa:f0:36:6f:61:c5:18:d3:e8:d4:b5:
2d:3d:54:09:82:d5:37:8e:57:f8:6b:13:b4:86:8b:
fb:cf:db:9e:e9:9a:40:5d:5b:40:60:df:53:71:1f:
33:5e:78:89:73:b7:a8:d7:02:27:bf:f2:0f:aa:ab:
ed:24:a4:ed:2c:f5:17:33:3a:35:3c:d6:d9:2a:b3:
e9:42:2d:34:6a:71:5e:02:bd:de:9f:19:1d:2d:e8:
9f:14:fa:63:94:0a:46:2e:47:c6:7b:07:60:b0:61:
a8:3d:16:0a:0a:7b:93:01:3c:93:ef:a8:d6:1d:f9:
5f:eb:98:e2:f5:66:b3:48:4b:f0:e2:66:bd:c5:ae:
d4:99:80:7f:86:cf:05:55:aa:95:5a:b7:a5:5d:5f:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:AC:BD:3D:B1:95:82:D4:B9:2E:3F:12:17:EE:CA:B0:E1:7C:01
X509v3 Authority Key Identifier:
keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d4:fd:fe:80:05:91:21:3e:9e:81:96:3c:bc:69:14:70:ec:
8e:f8:5b:2d:d3:13:26:48:eb:92:93:09:f4:57:a0:97:ef:4e:
6d:c2:f3:a0:df:c7:c0:23:26:5c:3c:25:c7:c3:ad:02:53:94:
e7:3c:f9:11:1e:b1:71:d7:a6:61:ed:86:0b:4d:ba:6e:b8:94:
08:b8:31:81:00:bf:50:53:e4:63:67:c0:45:7e:76:7b:95:aa:
fd:2a:bd:d9:a1:f6:64:51:8e:b5:1b:2d:16:80:52:23:7d:d9:
8b:84:dd:be:3e:3c:46:ad:ee:6c:0c:58:b0:e9:93:0a:c0:09:
d7:b9:b6:3f:fb:40:ee:00:44:9f:3e:c2:fe:ae:b3:b1:29:97:
83:c2:44:2e:49:2a:b7:da:63:82:20:25:3c:a5:bd:50:b0:3a:
a8:78:ce:21:96:05:21:fe:a7:b7:21:2e:68:11:4d:af:82:00:
a8:5d:b5:8d:0a:11:0c:cc:53:e7:d4:98:81:c0:f1:e6:1f:cc:
3c:1b:c9:2d:b6:3a:61:fc:a3:52:f3:f7:14:87:94:e0:0f:12:
76:83:0a:cf:27:c8:9f:55:c5:09:51:33:89:54:38:c8:8d:83:
16:d0:89:7b:e2:0c:3c:c0:76:e2:ec:f9:dd:33:c5:17:b9:7a:
e6:6c:9b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:33 2026 by rpki-client