
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
File: awKSxgJwici6idjGWhozDUiLCiw.mft (raw, json)
Hash identifier: TkXcDgKTLXuB1DtHATQTVCK+DySOtnH5Q+fU33ytnDQ=
Subject key identifier: C1:D7:CC:57:16:8F:77:F2:C1:21:70:B3:8E:D8:E0:5F:D0:AB:FE:C6
Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C
Certificate issuer: /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
Manifest number: 011C
Signing time: Wed 25 Mar 2026 05:02:47 +0000
Manifest this update: Wed 25 Mar 2026 05:02:47 +0000
Manifest next update: Wed 01 Apr 2026 05:02:47 +0000
Files and hashes: 1: awKSxgJwici6idjGWhozDUiLCiw.crl (hash: MFWkRB5WNFfoN6KG2gA1Z3WnmTeXUPQxPQZXPdhGHS8=)
2: 17782970808311EFBB9C2A46C4F9AE02.roa (hash: 7TZMrJ7cU5AnQKT56JZoo3GclFGMSMDdP1Hrz561DNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl
rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
Validity
Not Before: Mar 25 05:02:47 2026 GMT
Not After : Apr 1 05:02:47 2026 GMT
Subject: CN=69c36c77-019a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:6b:34:15:a0:cb:8d:56:3f:7d:02:09:6e:
55:0f:a4:aa:52:6f:6c:4a:1b:2c:13:90:45:b5:89:
be:b9:79:b2:fa:a2:d4:b5:56:bc:c5:97:94:b7:dd:
be:54:c8:cc:f9:d7:0a:22:8f:02:bb:cb:d2:31:bf:
e4:96:63:67:d6:74:9d:1a:d2:0e:c6:fa:4e:50:30:
c6:97:b4:64:c1:67:99:43:f6:95:39:0d:82:4b:2c:
c3:14:78:77:da:67:c0:c4:96:fc:13:73:81:da:8f:
f7:4a:58:dd:ac:29:f5:e1:db:de:cd:8d:56:0b:85:
40:3a:9f:7d:c7:cd:b8:a6:8f:07:a3:ff:dd:1d:01:
5c:88:68:19:a9:76:ea:2a:57:98:c1:5f:d0:11:49:
8e:b2:dc:82:68:38:26:9b:ed:b3:0a:b4:d6:6d:bf:
91:88:da:44:6c:81:37:37:a8:d2:50:44:81:78:f3:
94:82:54:11:22:0b:35:2f:87:64:f8:e0:85:9b:f3:
11:7b:9a:52:77:24:e1:32:60:98:a0:34:69:16:c0:
1e:41:1c:d9:13:04:f2:1b:ae:9b:84:89:34:34:6b:
74:94:6b:3e:74:ce:d3:2c:04:87:05:79:93:13:87:
bd:d4:e8:6e:1c:3a:61:fb:e1:5a:f8:19:12:3b:13:
a4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D7:CC:57:16:8F:77:F2:C1:21:70:B3:8E:D8:E0:5F:D0:AB:FE:C6
X509v3 Authority Key Identifier:
keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f6:41:13:0f:9f:36:9d:69:de:47:54:87:03:a9:ff:9d:1f:
42:bb:36:c7:48:88:9c:06:87:90:7a:87:cc:55:e6:0c:93:b3:
00:5d:69:d2:f4:b6:a2:6b:82:f2:d8:f7:18:f1:f2:08:a9:ae:
6e:28:bc:60:57:fe:72:06:e8:f8:ca:3d:1d:1b:c6:56:ac:06:
19:85:ee:e7:e7:68:50:60:07:5d:4c:43:4d:a9:dc:2c:94:95:
40:cf:85:4b:ce:0d:a7:d8:28:06:41:73:e9:9d:3e:5d:42:83:
71:ec:66:3f:54:ab:53:e9:e2:b6:64:b3:7b:c5:d6:a5:2f:3e:
2a:16:61:bd:47:86:eb:6e:ea:76:e9:ca:9a:28:61:34:a7:0b:
a1:ae:20:50:52:93:84:55:da:f0:7d:3e:56:43:92:b1:96:5b:
9f:aa:1c:1c:4c:54:68:cc:75:76:36:84:a9:08:31:89:bf:fa:
22:5f:18:08:92:2a:0a:c9:10:6a:20:52:1d:e9:5b:cc:27:25:
93:bc:38:e0:1e:f1:16:3c:1f:d0:83:0d:dd:fd:f0:2d:20:a1:
87:81:ab:2f:c7:94:d0:81:6d:17:6a:69:b3:4c:b4:75:de:b8:
90:ad:57:07:60:71:02:9f:b4:88:8c:09:04:ca:c8:47:8e:06:
9b:8a:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:18 2026 by rpki-client