
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json)
Hash identifier: ZvtozDhexI6AUeBtbbDmqbw44lLdvdpqL9OeQtVwCBA=
Subject key identifier: 80:98:0A:67:D9:4B:F9:58:06:51:B4:B1:2A:EF:C2:C2:D5:99:C2:53
Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
Manifest number: 0142
Signing time: Wed 25 Mar 2026 04:32:48 +0000
Manifest this update: Wed 25 Mar 2026 04:32:47 +0000
Manifest next update: Wed 01 Apr 2026 04:32:47 +0000
Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: 2UCaA8QbYlt8LakCLVnPwYT7uxicEq15XH2zFHSf2U0=)
2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: Luwtev83Zs6KUCyFMF7rPFNFdO+XLcijtYlkHDR9isU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Validity
Not Before: Mar 25 04:32:47 2026 GMT
Not After : Apr 1 04:32:47 2026 GMT
Subject: CN=69c3656f-0a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:51:c7:d9:3f:5a:40:9c:73:28:c9:4b:54:
02:3e:86:f5:81:ab:a4:74:9d:ef:75:86:65:2d:99:
ae:32:64:33:00:ed:fe:8e:a3:4f:b4:93:57:3c:1e:
0a:f9:7f:57:42:c2:a3:b0:cf:c6:06:59:cb:87:5f:
80:92:e1:96:85:64:a6:c3:4d:15:90:b9:61:96:18:
a1:1b:22:2d:68:ac:98:cc:49:db:23:46:fa:67:fb:
99:f5:3e:81:3d:e6:15:3b:e0:95:39:90:b9:32:c2:
ef:dd:87:3f:0b:df:92:2b:6d:97:25:33:4e:22:40:
5b:d5:48:df:5a:f2:19:08:66:b5:42:f5:4d:cf:ba:
b3:c1:07:a9:b0:72:f7:86:89:ac:92:7b:f9:df:ab:
11:34:6d:29:5f:5f:c1:47:23:8b:1b:b7:30:cf:7a:
aa:da:9d:1e:9b:d0:c4:e6:67:57:27:7a:3f:66:4b:
dc:bb:f7:a4:cf:6c:e3:d6:96:08:fc:a2:e7:ad:ac:
59:45:c5:11:74:45:8c:3b:f2:fc:0d:70:0e:cf:c6:
84:ce:3b:0e:02:c0:88:57:1a:4e:59:f0:66:ef:11:
4c:f1:94:8a:58:dc:99:07:d1:37:b2:78:ff:83:35:
f9:e6:4b:21:f3:8e:7e:ab:28:05:27:d0:14:52:55:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:0A:67:D9:4B:F9:58:06:51:B4:B1:2A:EF:C2:C2:D5:99:C2:53
X509v3 Authority Key Identifier:
keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:58:f4:3d:98:10:e9:27:59:6a:f1:a3:a9:7c:66:e4:29:7e:
d3:e2:53:fa:5b:b8:39:37:19:97:4d:0c:e5:eb:86:2d:5d:99:
8b:ff:4a:9f:5a:84:a5:1f:68:b9:35:bc:c2:48:c7:4c:59:85:
0b:26:90:2a:17:fc:71:99:25:6c:ab:20:8d:f5:53:80:bd:e3:
95:0c:e1:7c:a8:03:95:0e:98:00:bb:da:59:af:13:ba:9f:1c:
ef:f8:54:d5:bc:83:b2:94:9e:77:06:32:cc:f6:b5:4b:4a:23:
90:fb:c5:a5:2a:ff:e8:9c:7e:2b:74:74:5c:ca:5d:cd:53:bf:
b3:85:ca:96:1c:4b:05:69:c2:f7:5b:f3:2a:9b:aa:96:e8:54:
c9:43:b1:8d:83:30:e9:43:51:04:5a:ae:6f:fe:84:d2:33:a8:
ee:a2:45:6b:74:f4:8d:08:5a:e0:14:08:ec:c3:cd:0f:ce:a3:
d5:93:1f:48:c4:e7:91:64:b2:70:4e:b7:5f:fb:84:9f:7b:47:
0c:c1:04:2c:6a:28:3f:e2:65:5c:74:7b:af:c7:d3:ae:50:ae:
64:2f:82:0d:95:83:98:9f:50:18:75:2c:8b:ce:b4:39:82:e5:
79:53:29:7d:55:a9:ef:ed:a4:b3:ae:38:1d:5e:b2:e9:00:d3:
4d:fc:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:37 2026 by rpki-client