
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json)
Hash identifier: f9sMZvWbOyonPs3DmFnjG7RAfpbL/4UjzaCmRAr9lU8=
Subject key identifier: D7:72:7F:C6:0E:60:2A:1A:A9:F5:02:13:0E:0E:2E:6D:37:55:A2:74
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial: 0872
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
Manifest number: 085C
Signing time: Thu 26 Mar 2026 20:39:30 +0000
Manifest this update: Thu 26 Mar 2026 20:39:30 +0000
Manifest next update: Thu 02 Apr 2026 20:39:30 +0000
Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: 1AEyqcKrubXa/tEgp0kaD+TbbwytV6syerewo3/1lwQ=)
2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: kBeeEqAw0diDfwSiGukPQsABNUsAeKM1rhQVHNmy2e8=)
3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: 13j05vQUfvPRrMenp6QmYgbweEm9kfIO8RUApE0qUPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Validity
Not Before: Mar 26 20:39:30 2026 GMT
Not After : Apr 2 20:39:30 2026 GMT
Subject: CN=69c59982-57e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:a3:f3:25:09:67:e6:71:e7:c6:07:db:08:
96:e3:ab:d9:35:d3:82:b0:bf:c7:bf:a8:af:c6:27:
a9:d8:44:4f:80:7b:2e:12:96:99:f3:c2:fa:af:67:
e8:59:b6:c8:54:ad:4c:7a:a6:1c:29:61:80:1f:3f:
e7:06:b3:9c:c2:03:a8:dd:e6:f8:05:ec:52:5b:55:
24:10:85:2b:be:b6:2b:dd:a1:13:15:2d:b2:f8:3e:
a9:a0:ef:c9:f7:b5:0e:be:73:bd:7e:68:dc:ee:9a:
68:15:9a:ca:fa:26:8a:e6:d0:76:19:2c:45:b8:85:
96:3a:72:c2:a0:9b:20:4c:e8:bc:57:4b:dc:33:82:
84:ea:f7:c9:ac:4d:7c:83:f6:36:78:4b:d5:84:2a:
64:f2:71:ae:d9:ed:58:1d:6d:8a:25:6a:27:18:c3:
17:f1:92:be:b0:a9:8c:af:74:80:27:72:ea:2a:c5:
db:78:0b:61:8c:65:b3:e8:38:46:a9:a9:bb:2a:4e:
57:16:8f:fe:7e:94:f1:99:b5:a2:01:2f:5e:37:6e:
2d:2d:6d:21:de:85:cf:55:8d:fe:e5:6e:a2:20:da:
08:0a:33:ff:9e:d4:33:3b:f9:4e:0a:ff:d5:22:c8:
d1:5d:73:ce:50:ac:56:f1:f0:7d:5f:1e:3e:cd:48:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:72:7F:C6:0E:60:2A:1A:A9:F5:02:13:0E:0E:2E:6D:37:55:A2:74
X509v3 Authority Key Identifier:
keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:2e:8b:05:c0:4a:25:34:87:7c:31:79:fa:af:a4:90:49:ed:
00:ec:55:18:ce:3b:41:62:4b:e2:4c:b6:7c:09:f3:d6:31:10:
ff:9e:97:63:20:59:79:b1:ce:c5:79:a6:db:e1:8a:86:67:ac:
e9:a8:26:e2:63:b7:c3:db:45:91:06:b2:6e:de:77:3a:ba:f8:
9c:f5:32:34:39:43:bc:8c:7c:8e:0b:2e:00:2a:be:f3:a9:91:
30:93:65:31:42:da:87:26:18:81:e4:ae:50:21:fc:a5:bb:4a:
bf:82:be:33:00:46:59:ba:48:d2:28:33:38:9d:fd:eb:a3:d1:
56:34:50:df:c7:19:d5:82:2c:c7:14:e3:83:15:e1:24:eb:5c:
ac:57:05:c1:9f:64:b7:86:e0:a2:88:d6:53:ea:e9:ff:16:7e:
81:66:0a:49:49:bd:27:17:96:af:56:b8:d8:b6:c7:67:a3:71:
f5:47:23:0c:48:c9:35:94:e4:4c:52:a6:47:ba:1e:29:d2:dc:
9a:f5:4c:ca:6b:a6:17:b3:7e:8e:c5:b3:11:5b:e6:d1:76:db:
52:7f:44:33:a2:20:33:5d:04:d8:3c:ca:93:4e:05:04:05:f0:
a9:d5:6b:ba:6a:cb:53:6c:af:ce:a8:31:dd:27:0a:0d:85:60:
12:d1:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:58 2026 by rpki-client