
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json)
Hash identifier: x9m0pJqpgI36oc/z20JlX2RS/wulcbMSOQbpxlKZIjw=
Subject key identifier: BF:3D:B4:72:99:CA:7B:FC:9A:50:D1:AF:C8:6C:43:DB:8E:51:D1:46
Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
Manifest number: 0141
Signing time: Wed 25 Mar 2026 04:35:06 +0000
Manifest this update: Wed 25 Mar 2026 04:35:06 +0000
Manifest next update: Wed 01 Apr 2026 04:35:06 +0000
Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: c4td23G/oJ/avVbv6KmEcfq0RfsNdUaODKaX19DFLmw=)
2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: RzM5XYHpAe7uWEPFy0Uicf76LJbJuN++zhp1wy8rKjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Validity
Not Before: Mar 25 04:35:06 2026 GMT
Not After : Apr 1 04:35:06 2026 GMT
Subject: CN=69c365fa-e9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:ee:5e:1a:c4:73:a3:3e:19:5a:71:d3:f1:
d0:a3:bb:6e:cd:03:71:a7:5b:0c:5e:35:7c:09:68:
d0:19:6e:35:70:ac:4b:bb:f1:d9:98:a5:10:1a:57:
43:d5:2a:4d:0b:e0:eb:fc:60:49:9c:2f:02:c7:1b:
71:90:a8:9c:7a:29:29:cf:79:36:ad:be:5a:d6:29:
dd:01:69:32:12:f8:c3:46:b3:60:d4:37:0f:5c:70:
c7:73:78:2f:6e:5b:36:bb:3b:8a:7f:99:d3:ce:1f:
0a:2f:71:db:76:20:db:05:af:4e:2c:5c:6a:b3:8c:
8c:ec:69:ed:15:ea:15:33:0b:91:d1:36:82:ce:a9:
a0:fb:61:0a:95:cf:d9:05:60:8a:82:a9:2b:64:ad:
ee:ce:1a:62:0d:32:60:78:36:7e:02:15:9b:87:cf:
5e:2f:5a:2f:97:13:ba:16:51:03:38:e3:53:40:4d:
58:f4:e2:9d:fd:41:73:77:f1:dc:c2:70:6c:e2:7e:
08:fc:ce:ba:47:26:40:fb:77:70:11:64:4f:ca:ae:
10:e9:df:db:5e:c4:51:bd:08:8f:8b:12:12:d9:b9:
4c:7e:c9:a1:48:22:a4:e2:15:ab:d7:c9:7a:f7:c8:
8f:d4:fe:fb:bc:5e:d4:12:d8:e7:e3:a3:04:98:87:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:B4:72:99:CA:7B:FC:9A:50:D1:AF:C8:6C:43:DB:8E:51:D1:46
X509v3 Authority Key Identifier:
keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a7:b5:3b:a5:ed:71:5c:c5:71:44:af:c4:60:6b:b6:9b:2e:
65:1a:e2:bc:65:b6:9b:c6:ee:85:db:9c:f9:c8:2e:e8:74:fa:
c3:d7:e0:67:ec:b1:d7:36:2c:b9:08:1c:8b:4c:e8:f0:fb:d0:
d1:7a:3c:6d:9c:62:20:83:cf:78:82:fc:14:16:42:bd:1f:05:
9c:dc:dd:6e:3e:3c:33:dd:00:2b:91:90:d4:c0:c2:01:98:04:
d8:2d:e8:5f:06:90:10:0e:6f:b5:d8:6e:5d:10:d0:71:fc:db:
3b:9e:88:02:ad:eb:29:0e:ba:1b:b9:fc:11:ca:b3:4b:0d:cb:
8d:18:03:47:75:0e:12:fe:fe:60:fb:94:a8:40:c2:70:8b:9b:
67:44:4c:2c:c2:1d:2a:ff:77:d1:a1:9f:81:55:a6:b5:ed:b2:
91:d2:40:f0:40:3e:ba:fa:cf:05:3c:08:25:23:46:a3:a2:db:
0f:11:7d:2e:df:c2:cc:07:f3:0f:b0:6a:e1:5c:67:cc:81:8e:
9b:4c:7d:bf:bf:94:c1:d9:d7:22:de:5d:a8:20:e8:4a:11:c6:
26:6b:e7:22:cb:97:0d:75:39:79:03:27:9f:62:3c:ef:1c:76:
0d:1d:01:17:0a:23:3b:d5:e1:5f:83:a1:dd:bf:9f:ec:40:63:
30:49:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:46 2026 by rpki-client