
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json)
Hash identifier: E15qVPYbsTPvD22rKv2AXY8V7gMwkq93L7SIRX5KZ04=
Subject key identifier: 00:1B:B8:2E:C9:54:F8:A3:D8:99:93:A7:42:3B:80:8E:32:1C:B0:A8
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
Manifest number: 0208
Signing time: Fri 27 Mar 2026 02:33:03 +0000
Manifest this update: Fri 27 Mar 2026 02:33:02 +0000
Manifest next update: Fri 03 Apr 2026 02:33:02 +0000
Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: 1Yzi3bVOS7RRuSAtBoOQ1ZSI4dQFWkCmM2Oea07ZEGc=)
2: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: gmHCuGwwGdskOl0yDHbyTBMAcXHOfQCNCZcwm8Huj/8=)
3: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: IuheNySTJfqKw1oRWfEQ6uKpyOE2XLm2ym5cGUW5YKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Validity
Not Before: Mar 27 02:33:02 2026 GMT
Not After : Apr 3 02:33:02 2026 GMT
Subject: CN=69c5ec5e-65ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:8d:20:11:51:1a:61:f5:66:f9:bb:36:a7:
f6:f8:e7:7c:92:37:c8:38:80:e7:5a:72:16:55:96:
33:61:2f:2c:e6:bd:05:ec:c9:ab:33:2e:ab:e5:6e:
3d:52:15:47:16:b2:cd:db:25:2c:06:a0:88:3c:f8:
a8:48:73:e5:65:16:80:f3:e8:e7:18:e0:08:9a:c9:
dd:35:e3:95:56:20:d9:db:2c:7d:5e:9f:eb:cc:6c:
ba:2d:10:ce:6d:70:db:d6:52:9c:8a:49:b2:32:45:
f8:80:98:52:0a:20:4f:bb:71:bf:7d:b1:39:5c:93:
33:1c:18:07:af:95:3b:86:0b:0e:be:51:6a:75:15:
0d:b7:9d:9e:13:f8:54:bd:8f:42:85:df:20:b8:0e:
43:29:3e:be:b9:23:91:25:b2:3b:14:98:9e:b5:84:
a0:74:ce:49:83:04:5a:45:03:1d:0b:1b:23:ba:2c:
a5:e5:d8:db:04:58:a3:d2:71:5f:8f:9e:52:26:20:
e1:dc:f2:cc:fd:9b:05:6c:f0:8e:39:ae:20:98:c3:
71:db:7d:5b:1b:11:2e:fa:f6:7e:aa:75:21:78:eb:
66:5e:7e:02:e8:a2:4f:27:d6:e4:d9:73:20:02:fa:
9d:90:ae:1c:30:47:93:4e:9b:87:62:4a:30:4e:c8:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:B8:2E:C9:54:F8:A3:D8:99:93:A7:42:3B:80:8E:32:1C:B0:A8
X509v3 Authority Key Identifier:
keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4a:a6:60:d6:ce:c1:89:dd:df:f5:de:e0:28:8f:21:03:df:
c4:2c:f5:1e:4a:fd:48:a6:4b:45:f8:5b:59:0e:fe:21:ff:62:
40:db:bd:ee:2c:14:bc:61:e6:75:55:c8:3a:6c:8e:27:9b:4e:
e6:34:de:e7:89:83:b7:2e:45:0e:76:94:e9:a9:36:7a:9f:22:
3f:99:16:13:29:56:39:dd:3f:0d:96:da:f5:a1:3b:92:50:6b:
86:40:7c:5d:eb:66:c9:a3:ca:85:f9:71:84:03:43:6a:3a:fc:
63:94:e6:2d:75:02:aa:89:aa:2f:76:d1:5e:f8:c6:ce:04:77:
c9:41:eb:5b:30:36:5b:ac:34:b2:b5:e5:80:b4:62:fc:c0:d1:
02:c0:4c:9c:1c:87:13:4e:e3:b8:36:96:fc:50:f7:5e:b0:1f:
8e:6e:9e:ef:92:c4:8a:2f:db:94:eb:7f:24:8f:c7:0c:77:e0:
79:4e:e5:c1:61:05:2d:81:9f:da:1a:22:77:7a:4f:5e:42:37:
bf:64:3e:e4:14:d1:95:78:98:23:ce:64:fc:af:47:42:5e:f2:
3d:cc:45:58:55:47:68:3c:6e:fa:44:57:84:22:48:6c:2e:d0:
9a:f6:1e:7d:cd:46:2a:69:cf:8a:9e:77:c0:4e:cf:1b:e5:8e:
d8:d6:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:07 2026 by rpki-client