
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json)
Hash identifier: BsuNmh8r2Bh63GhocbNmyTIhAfhSx8CEqEtdrJ9Xzf4=
Subject key identifier: 5C:EA:42:8B:C5:7C:CA:F9:2F:25:C2:02:46:8C:DC:6A:75:28:46:8F
Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
Manifest number: 0119
Signing time: Fri 27 Mar 2026 05:24:36 +0000
Manifest this update: Fri 27 Mar 2026 05:24:35 +0000
Manifest next update: Fri 03 Apr 2026 05:24:35 +0000
Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: W3gX/HgPOZQzAcpJHeJA6rKPny/g9wUtpa13D3Kb88M=)
2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: B/TNuMgaTyUyb58Wxh1ho+MvyCpcFyIGCmgXiDCc6KA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl
rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632
Validity
Not Before: Mar 27 05:24:35 2026 GMT
Not After : Apr 3 05:24:35 2026 GMT
Subject: CN=69c61493-e6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:1c:4e:f6:f0:d4:4f:15:72:b6:56:28:ee:
c1:36:6b:9b:d8:ce:12:b9:fd:58:5a:ac:b1:39:0e:
fa:c6:86:61:dc:c2:84:c6:e0:1d:27:52:ca:78:fa:
92:89:f7:a3:73:ee:68:80:e4:23:ee:2f:7e:ca:a6:
73:8d:4d:d8:80:20:46:70:77:71:0f:c1:06:cd:1b:
cf:a1:04:fb:be:b6:03:ad:0c:09:5b:d9:d3:3f:74:
6f:68:9a:7f:f6:f3:60:5f:5e:23:7b:5a:44:d6:68:
1c:42:63:1f:20:21:04:2b:08:69:82:90:f0:a5:8c:
d9:77:61:66:98:62:19:19:7a:52:e3:83:7d:54:00:
2c:77:2c:ce:dc:f9:40:df:1f:01:68:8d:0b:9b:3e:
6b:bb:c7:87:9b:13:d2:65:c7:6e:d3:d9:f9:39:d3:
36:32:70:e2:da:ba:f7:a5:29:65:1e:53:fe:e4:6b:
a3:ca:b9:3c:88:80:89:9f:45:98:22:5f:5b:15:6b:
15:71:f5:4f:81:af:45:da:1e:d3:67:64:d9:4d:3a:
d4:2c:55:c7:db:f6:3f:34:04:6d:73:8d:d5:8e:8f:
25:d6:69:ad:ba:64:72:26:31:2a:b3:69:00:11:c6:
a1:34:c5:ef:d8:89:4a:78:54:96:1c:18:1f:79:a9:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:42:8B:C5:7C:CA:F9:2F:25:C2:02:46:8C:DC:6A:75:28:46:8F
X509v3 Authority Key Identifier:
keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a9:5a:ff:cb:20:74:89:cc:a0:75:e6:6c:f3:63:6b:38:08:
0b:dd:2f:e9:9f:99:f3:a2:2b:72:8c:2d:af:ac:83:a5:ee:3c:
ad:00:9b:fb:4a:14:59:6c:30:22:a6:38:94:6f:1f:8f:76:27:
d2:3a:c9:b7:6b:77:77:f4:e2:06:e9:a5:17:4b:9a:ed:7a:9b:
00:99:65:7d:0c:11:07:ca:28:d1:e0:a4:5c:50:08:ad:71:22:
b1:05:8e:37:13:71:37:06:3e:13:87:6b:bb:2a:6e:f9:33:22:
05:71:0f:40:a7:9f:71:c1:db:85:b2:c1:19:05:d3:c3:8b:34:
ec:25:3c:33:01:14:b6:2a:e9:ab:c6:bb:40:3e:13:e1:7f:a6:
e8:5c:bb:3f:f2:82:4f:9f:4b:d5:52:b9:14:af:0e:72:2d:c6:
be:1b:5a:41:ef:df:31:f0:fb:08:2b:6b:47:88:20:f4:81:73:
3b:46:2a:2c:4d:5e:98:7b:90:76:6f:38:d2:01:ac:2c:b5:0f:
7b:2d:2e:64:60:5f:14:7c:3c:34:7f:ea:25:a9:25:48:1f:75:
08:6e:f3:61:8a:91:89:d0:b4:88:d1:a9:ca:d8:7d:13:fa:72:
0c:a6:28:22:9f:5c:10:cd:33:99:22:80:d3:f6:d4:bc:b4:66:
a5:b7:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:08 2026 by rpki-client