
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
File: E0jUaqcLAwOwQCPwSmMFi01pY7c.mft (raw, json)
Hash identifier: 8VFVSZKVKE7aiOXIvQxhwj2GfFS1Za239j6wbZq4Jdc=
Subject key identifier: BC:33:AE:17:D9:60:B8:C5:AA:21:0F:9D:EC:E4:41:65:E5:3F:46:D0
Authority key identifier: 13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
Certificate issuer: /CN=A91D30A3/serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
Manifest number: 10
Signing time: Wed 25 Mar 2026 08:17:51 +0000
Manifest this update: Wed 25 Mar 2026 08:17:50 +0000
Manifest next update: Wed 01 Apr 2026 08:17:50 +0000
Files and hashes: 1: E0jUaqcLAwOwQCPwSmMFi01pY7c.crl (hash: JLRkuMwGETFOy9+bqWa0jdZriElQJnlDp/RmGMPKXKs=)
2: 5417C204181311F1BB2D572D153D8C67.roa (hash: H47VU5jKVIkhr4upeiTnHoZK3wbZs9wvqmAqlKqwqns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl
rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D30A3, serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Validity
Not Before: Mar 25 08:17:50 2026 GMT
Not After : Apr 1 08:17:50 2026 GMT
Subject: CN=69c39a2f-162e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:e7:f9:63:39:48:6a:3d:9d:a7:66:30:07:
2e:97:5f:09:ba:03:88:3b:80:b7:17:b1:ef:48:3c:
9f:fb:f0:b3:59:0d:33:87:92:8b:7a:44:fd:ba:d0:
3a:50:62:1c:37:77:fe:20:03:f6:1a:98:04:22:e8:
ca:28:d0:e3:90:28:2e:50:bf:ce:34:6c:df:ce:4e:
0e:73:6f:75:89:6c:e7:4f:2e:35:7b:0e:c9:ae:48:
fe:76:c6:fa:8d:9b:92:1d:d7:8c:9f:53:4d:39:70:
53:c9:8b:7c:27:bb:b4:09:e3:26:f1:3d:a6:58:6e:
28:10:2e:7b:c9:d7:bc:64:3f:d7:50:3f:0f:28:c4:
cc:0a:18:3d:cb:f8:f1:12:d6:66:e1:05:fc:d0:c7:
19:89:42:bc:f4:d4:46:7d:f5:e0:21:f2:c9:03:29:
8f:8f:1c:f2:37:9b:41:a5:6a:fc:ec:18:91:78:de:
9b:d5:7d:c6:c4:0f:62:93:b5:57:39:e3:a5:01:d7:
25:0d:3b:f4:50:69:90:1c:95:7e:b3:96:8f:12:53:
90:78:56:ed:c0:b3:38:0c:d5:32:82:1d:16:ac:d2:
31:de:bd:0e:75:16:36:0f:64:a6:c3:bc:4f:06:30:
90:95:8a:3f:5b:3d:43:35:0c:de:e0:22:f1:39:7d:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:AE:17:D9:60:B8:C5:AA:21:0F:9D:EC:E4:41:65:E5:3F:46:D0
X509v3 Authority Key Identifier:
keyid:13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8e:5b:18:05:4a:61:bf:f7:3e:97:9b:bb:ac:2d:e8:5a:69:
bc:6d:5d:cb:91:bc:82:2e:31:ef:0a:23:fe:9c:cb:ea:01:94:
2d:a1:42:bb:67:be:22:16:6e:fa:59:5a:92:17:c2:8b:94:23:
b7:31:e0:fd:3f:dc:44:4e:34:52:ac:40:40:c1:ec:e1:78:5d:
99:1e:5e:ae:da:9c:25:63:83:0f:95:6d:97:e4:7e:b3:4e:5d:
85:52:a5:d5:de:46:cb:48:96:27:ab:23:58:ab:bc:89:32:3e:
a1:0e:6c:18:e1:95:39:9d:e5:a3:dc:b8:36:42:83:f4:ba:ec:
76:6b:aa:a7:06:24:7f:5f:0f:14:72:66:5d:b8:4e:78:f4:a2:
d9:60:fa:b9:d9:3e:cf:49:ca:40:0d:7d:69:ac:87:de:21:ad:
6b:dc:e3:04:f7:08:3a:36:18:c7:dd:38:3c:df:e8:97:a5:8c:
fe:53:bb:ec:bc:42:c7:3f:cf:57:08:16:64:0c:3b:d6:e8:aa:
33:38:36:93:de:11:42:85:d4:bf:45:6a:09:78:56:c1:f9:ca:
9b:87:30:68:46:11:ad:54:df:da:4b:29:96:2c:b8:3b:a4:45:
6a:eb:18:92:58:91:7d:0f:38:e2:6b:02:62:3d:c7:42:3b:b3:
f8:a5:d5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:39:08 2026 by rpki-client