
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json)
Hash identifier: CSe0hTUpLoFSCimuecG5SZVMLs62o0j7SB1QACwCFYA=
Subject key identifier: 34:9B:C8:7D:D9:29:EF:5D:CC:5F:19:B1:0A:43:B3:40:CF:37:D2:BC
Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21
Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
Certificate serial: 0917
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
Manifest number: 090E
Signing time: Tue 24 Mar 2026 20:03:52 +0000
Manifest this update: Tue 24 Mar 2026 20:03:52 +0000
Manifest next update: Tue 31 Mar 2026 20:03:52 +0000
Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: o3OkuoppbjfvYco274de0XJXj1jdL4+8cpGZrmsuWDQ=)
2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: Z/q3Sn+bG/2MqO5zayEdrpBR4UkNKUijCjfuQZVUaYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl
rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
Validity
Not Before: Mar 24 20:03:52 2026 GMT
Not After : Mar 31 20:03:52 2026 GMT
Subject: CN=69c2ee28-54d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:15:8b:a3:b9:9a:4c:6e:7b:34:b2:b0:0b:
36:59:5b:38:e4:1c:eb:7f:07:25:ff:28:e7:f8:b3:
ba:3a:e6:62:ff:20:44:ef:df:39:f0:85:df:b2:de:
8f:7d:a1:d8:7c:7f:f2:70:a5:de:67:3d:93:ce:ef:
8a:62:f5:6c:3d:e2:72:2a:9d:00:89:0a:d7:d6:6e:
8b:ce:6d:a1:d0:bf:5a:26:bc:c9:5d:68:95:10:d2:
cc:db:9e:7f:9a:34:5c:b3:b7:5b:e9:08:86:55:4b:
d4:d5:d1:bb:0f:54:ea:22:c1:d6:9e:9d:8d:aa:23:
5e:b8:e3:00:cc:f1:c2:03:12:a1:eb:05:82:33:5b:
95:e6:10:bf:03:53:ef:4a:0c:00:4e:4f:e9:1a:4a:
2e:09:d5:a0:b8:82:1c:c7:b5:9b:a1:f5:07:11:e5:
23:20:f4:69:ea:05:f4:c4:3e:89:60:de:2f:26:e3:
e6:5f:06:dd:ec:bd:47:2b:9f:91:f3:17:ed:90:b2:
96:4e:62:b1:1e:2b:bb:dd:22:1a:b8:d7:34:57:4c:
6c:c1:f6:67:e9:49:bc:23:9a:1a:a9:c4:68:5f:61:
3b:1a:43:7f:16:ad:a5:2f:3a:e4:bb:00:ef:e6:ff:
1a:69:23:70:59:c2:a8:93:14:f8:13:38:e1:e1:a8:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9B:C8:7D:D9:29:EF:5D:CC:5F:19:B1:0A:43:B3:40:CF:37:D2:BC
X509v3 Authority Key Identifier:
keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:e8:db:ba:97:1f:c0:74:dd:e8:74:4a:73:ce:58:46:68:72:
d1:06:25:77:e7:75:cb:37:13:c3:ed:21:06:b8:fb:97:11:2c:
62:9a:d9:92:f8:91:8b:27:24:84:f7:b9:98:0e:d0:21:7b:5b:
f9:88:c6:af:c3:f6:4a:5c:b4:bd:fb:21:96:6c:11:d7:ce:58:
fe:58:3f:0d:31:55:e1:8b:89:1a:7e:78:b1:56:49:e9:75:ba:
91:f0:ca:9c:dd:74:01:17:20:52:85:05:d1:62:e5:fe:80:0f:
68:47:51:13:34:c3:e9:c1:5a:ce:ee:73:88:ff:69:d3:c8:42:
d7:2c:84:ad:31:8c:76:d4:31:ea:79:a8:6e:9e:06:8c:fd:16:
02:b8:e0:ba:13:5e:dd:da:48:3c:66:ca:3e:49:6a:24:9a:28:
19:c3:95:a8:ae:d5:fe:b3:20:03:23:0d:fd:3d:bc:22:b0:6a:
83:b4:48:f9:19:d8:df:db:e2:5a:86:21:a0:d5:77:f6:5d:6a:
11:d3:cd:ea:3b:d5:2a:ab:67:f4:7e:ad:62:93:be:ae:a7:a0:
e6:bb:76:58:98:4e:34:cc:6f:b0:21:73:11:05:1f:e2:02:cf:
5e:b7:d9:7a:20:55:ef:98:3c:95:90:c9:92:14:a1:e7:61:d6:
ed:0d:42:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:02 2026 by rpki-client