
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json)
Hash identifier: JipdLNZmuLZKj0JtUVRE0XU/356vEvTRwnh7VhJJglQ=
Subject key identifier: 54:59:AC:13:81:8B:B3:C9:B9:10:DA:38:F5:B5:F7:A2:D3:14:3D:FA
Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC
Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC
Certificate serial: 0361
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
Manifest number: 035B
Signing time: Wed 25 Mar 2026 00:34:51 +0000
Manifest this update: Wed 25 Mar 2026 00:34:51 +0000
Manifest next update: Wed 01 Apr 2026 00:34:51 +0000
Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: 5X5Hn+SCpoOq5xljmhCtVXBNSEWSBxOIg+MHP8cDwLc=)
2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: 8K+tbBqygn5Cepj/v5AzwIQ0fcUMd7as7jI1naDpakc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl
rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D415B, serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC
Validity
Not Before: Mar 25 00:34:51 2026 GMT
Not After : Apr 1 00:34:51 2026 GMT
Subject: CN=69c32dab-2c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:9f:5d:f8:42:be:67:15:28:b6:4c:6d:16:
09:d4:b8:dc:10:78:9a:77:8f:81:e5:0e:e7:17:4a:
9b:7f:b7:14:07:b7:5b:4c:6b:34:ac:cf:e0:78:79:
83:91:ef:6a:60:b0:3c:9a:0c:f0:dd:e5:1f:23:f4:
36:25:02:71:cf:58:6e:e7:d7:b1:92:30:83:f0:ee:
89:21:c9:c4:9c:ec:10:74:00:34:8e:ee:68:b9:eb:
c6:e9:32:a2:08:ed:94:69:b0:e1:8d:bb:e4:0d:c4:
3a:4f:e0:b8:a1:bb:63:90:ee:9c:46:38:7d:f3:db:
30:f4:dd:cc:6b:1a:d2:28:bb:80:bb:63:98:25:be:
bc:80:79:30:78:4e:79:b8:57:86:db:a2:bf:3a:97:
8f:bb:5c:84:b7:07:46:51:8b:21:f2:79:08:f2:ed:
73:5f:8b:9a:b6:a9:85:a7:cd:de:e8:7d:b9:4a:2d:
0e:97:e4:00:e9:d0:c8:ef:9c:8b:92:46:76:ca:de:
9a:50:c3:88:de:13:3d:a4:27:96:3d:3b:00:94:2b:
d6:6c:0e:ec:f7:28:75:ab:43:88:20:26:5b:3f:1a:
9e:b1:92:90:9f:96:da:3e:9f:ff:b5:d1:3f:75:06:
c6:15:30:0a:47:64:e5:be:66:a5:d8:97:48:41:35:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:59:AC:13:81:8B:B3:C9:B9:10:DA:38:F5:B5:F7:A2:D3:14:3D:FA
X509v3 Authority Key Identifier:
keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bc:dc:ef:95:6c:3c:3a:05:e0:b8:7b:5f:97:01:0f:a4:94:
7c:d5:e2:7e:a9:e9:e3:74:e5:df:32:73:dd:ce:62:77:a3:26:
61:a4:91:6e:3a:1b:31:08:8c:fb:85:98:75:27:26:cf:c9:26:
fc:a7:d5:ab:d4:e8:f6:02:03:15:e0:e1:45:b6:02:03:68:90:
51:5b:dd:30:c4:5b:83:51:d5:37:71:c0:1f:4a:2d:53:bb:fe:
f3:66:0d:3e:b5:34:06:6b:92:0e:c9:fb:7f:0e:a5:1c:45:fb:
29:ff:8f:1d:25:9d:34:0a:69:ba:2f:cd:dc:53:31:18:42:d8:
67:10:42:09:09:82:1f:27:84:c2:93:19:9d:fd:05:8e:28:3a:
2c:42:9c:87:85:c1:77:0e:39:62:67:b1:fe:d8:57:62:69:21:
58:a5:f9:4a:f0:38:36:86:d5:f8:d9:1b:fd:bb:13:a1:75:28:
f5:58:c1:5b:f9:cc:a3:46:c9:c6:74:14:e6:b9:df:5c:59:e5:
6d:c7:eb:3a:14:76:24:d6:17:18:b2:aa:70:c8:39:c0:88:40:
67:d8:48:af:2a:64:88:b6:02:df:34:62:0a:a8:5b:10:42:36:
e3:11:42:36:d8:58:f7:e2:a5:eb:5c:c5:f8:81:98:1e:95:19:
e0:1c:c9:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1
OUFDNzY2Q0MwHhcNMjYwMzI1MDAzNDUxWhcNMjYwNDAxMDAzNDUxWjAYMRYwFAYD
VQQDEw02OWMzMmRhYi0yYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxNOfXfhCvmcVKLZMbRYJ1LjcEHiad4+B5Q7nF0qbf7cUB7dbTGs0rM/geHmD
ke9qYLA8mgzw3eUfI/Q2JQJxz1hu59exkjCD8O6JIcnEnOwQdAA0ju5ouevG6TKi
CO2UabDhjbvkDcQ6T+C4obtjkO6cRjh989sw9N3MaxrSKLuAu2OYJb68gHkweE55
uFeG26K/OpePu1yEtwdGUYsh8nkI8u1zX4uatqmFp83e6H25Si0Ol+QA6dDI75yL
kkZ2yt6aUMOI3hM9pCeWPTsAlCvWbA7s9yh1q0OIICZbPxqesZKQn5baPp//tdE/
dQbGFTAKR2Tlvmal2JdIQTW3mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRZrBOB
i7PJuRDaOPW196LTFD36MB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx
Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha
c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDE1Qi81QzU0MzY4NEYxQ0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZz
OFMzZmNtWDVZbTFackhac3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsbzc75VsPDoF4Lh7X5cBD6SUfNXifqnp43Tl3zJz3c5id6MmYaSRbjobMQiM
+4WYdScmz8km/KfVq9To9gIDFeDhRbYCA2iQUVvdMMRbg1HVN3HAH0otU7v+82YN
PrU0BmuSDsn7fw6lHEX7Kf+PHSWdNAppui/N3FMxGELYZxBCCQmCHyeEwpMZnf0F
jig6LEKch4XBdw45Ymex/thXYmkhWKX5SvA4NobV+Nkb/bsToXUo9VjBW/nMo0bJ
xnQU5rnfXFnlbcfrOhR2JNYXGLKqcMg5wIhAZ9hIrypkiLYC3zRiCqhbEEI24xFC
NthY9+Kl61zF+IGYHpUZ4BzJbg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:32 2026 by rpki-client