
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
File: c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json)
Hash identifier: Vu/bBn6xDPhTbSPUTBOvxdYTtIE6+xQt9sFDjvjnDgA=
Subject key identifier: 23:83:CF:34:BE:89:98:3C:77:30:04:E6:D7:24:48:87:00:0A:B5:27
Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Certificate serial: 0563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
Manifest number: 054F
Signing time: Thu 26 Mar 2026 23:14:37 +0000
Manifest this update: Thu 26 Mar 2026 23:14:37 +0000
Manifest next update: Thu 02 Apr 2026 23:14:37 +0000
Files and hashes: 1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: banY6s+PqgeUVwWdETPGp0b3m6K6CJGhcDJXvkXc6Ig=)
2: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: Chq3dYly7My4Q8PklpLWnHQt3rosp5Ahuq1dGPO+d4M=)
3: 7F8113B6D4DC11F091B5A227C4F9AE02.roa (hash: Kb5ukJ2yV0LLo+vAzqQ8VWRHEE3xT5Y505QcDOL5rkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221
Validity
Not Before: Mar 26 23:14:37 2026 GMT
Not After : Apr 2 23:14:37 2026 GMT
Subject: CN=69c5bddd-0c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:b0:1f:04:90:85:43:0d:41:90:19:8f:b9:
43:d3:54:94:dd:05:53:e0:1d:5d:51:ea:f0:e3:77:
88:47:c7:f8:c6:7c:f3:a2:5a:78:ad:96:69:86:29:
7d:26:b8:29:ac:80:70:d1:a1:db:eb:66:20:8f:1b:
c3:fe:51:58:51:e5:3e:76:20:88:ef:79:41:cb:e3:
18:b6:24:e4:45:e4:9e:1b:be:a4:77:9d:c9:2d:07:
62:34:1f:5e:65:84:a9:92:75:a7:8f:a7:7b:2c:4e:
c8:04:25:ec:f2:e9:b9:d6:67:6e:d9:a8:9e:0e:6c:
9b:9c:33:05:0b:af:54:b5:98:48:39:af:ab:40:4c:
50:70:ce:7a:9d:0c:da:d1:cc:07:2c:4d:e9:13:c1:
73:72:3d:04:d4:6d:ae:43:05:c8:5a:63:5d:d3:f3:
cd:3f:a5:c3:0a:58:24:2a:8c:83:95:dd:7c:ba:60:
bf:1b:36:1c:d0:2f:f8:fa:47:aa:a6:20:2e:a2:b0:
2e:d3:0e:45:95:48:29:e3:20:36:f9:95:61:24:a6:
41:e2:13:68:21:5d:6e:70:c9:62:ca:14:7f:9d:c9:
6b:0f:56:0f:ca:e3:85:97:39:cd:6d:2d:af:17:d6:
cd:64:62:08:1b:fc:b5:f7:e3:2e:e4:f5:d3:5d:7c:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:CF:34:BE:89:98:3C:77:30:04:E6:D7:24:48:87:00:0A:B5:27
X509v3 Authority Key Identifier:
keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b4:b6:1e:ad:62:fc:25:36:1e:ec:0e:6a:de:b7:ae:7b:41:
e3:45:ea:ca:a2:ce:fb:08:3d:d4:4f:25:ca:c7:6b:a8:28:a1:
33:90:d3:b9:18:7f:b7:37:0d:ac:0f:0f:72:dc:2a:da:6b:8d:
9c:4f:e1:d4:92:9c:e6:65:1c:a5:52:37:3b:34:c3:6c:34:bf:
ab:4e:ed:1e:78:6d:99:ab:c0:f7:31:ff:a6:f5:32:2b:2b:e5:
bd:15:4e:59:34:37:0d:5a:f9:7f:c2:6e:1d:8d:68:8c:67:6a:
aa:b8:37:ab:70:b4:8b:cb:32:0c:5a:54:4f:45:8b:ca:5e:70:
6c:b3:36:49:0a:1f:a3:d4:db:ae:88:d5:59:a3:bb:c6:a4:47:
cc:2e:74:b5:18:f7:0d:82:f4:35:57:42:ef:f3:53:2f:69:86:
c4:9a:51:b3:00:d6:0f:78:b7:4a:56:14:c8:3a:73:36:f7:91:
5d:93:fa:53:10:7f:b7:3f:df:50:e9:83:2c:43:43:df:07:f9:
fa:16:e2:55:82:6a:09:32:6c:45:35:c8:e5:dd:13:74:8a:fb:
2d:82:ec:01:24:58:73:55:ac:2c:c3:cd:2c:2f:c8:f5:6f:61:
e5:2a:36:41:f6:e6:33:2f:40:a6:e6:e6:fa:01:bb:e1:f1:67:
cf:af:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:31 2026 by rpki-client