
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json)
Hash identifier: NYk9X5N0FYticfLSBv0W/lIdVVuzlBVafGD3t28HQe4=
Subject key identifier: C3:30:F5:F6:A3:58:EB:13:8C:4E:56:FF:4C:6E:A6:72:1F:55:30:4D
Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Certificate serial: 0CE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
Manifest number: 0CD9
Signing time: Tue 24 Mar 2026 18:10:32 +0000
Manifest this update: Tue 24 Mar 2026 18:10:31 +0000
Manifest next update: Tue 31 Mar 2026 18:10:31 +0000
Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: eX+dz9Bk2LuffKw6UxyofmOfJXVABjGjlmPeYmOQdwc=)
2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: b1VtTeZ3i3+p56WxtkqO9+Z/XK8otu366dEwvuMxQIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3301 (0xce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Validity
Not Before: Mar 24 18:10:31 2026 GMT
Not After : Mar 31 18:10:31 2026 GMT
Subject: CN=69c2d398-b5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:16:26:cf:38:92:44:27:db:a8:11:b4:9f:
bd:0b:b3:e5:80:19:68:2b:bd:ac:55:2b:d0:60:4f:
f8:79:f5:43:10:2a:5f:ff:89:0a:6e:7f:81:c5:49:
c8:77:7c:4d:a0:04:f6:df:e3:b5:4e:e4:68:cc:5e:
12:3e:95:9b:98:fe:46:df:ee:c4:2c:37:84:ac:3e:
e3:56:4d:08:a7:02:fc:2b:f5:20:18:f9:a8:21:ff:
6c:25:6e:76:45:7d:52:d1:df:99:59:63:88:27:5e:
eb:d4:5c:be:ef:00:30:cd:e3:61:67:48:90:24:17:
04:8f:da:4d:c2:3a:4c:16:70:65:20:d9:93:3b:ff:
57:a5:bd:80:c4:7f:fc:20:27:04:ab:cf:f0:08:a3:
c1:96:bc:b1:c8:55:6b:7b:1b:86:f5:66:d7:b2:92:
c2:55:9e:49:df:01:73:98:56:8e:fc:6b:f8:c5:8f:
26:09:09:65:b0:b8:50:9f:86:5b:7d:55:ec:62:13:
c8:06:29:03:da:78:c0:a6:ce:6a:72:1a:fa:f9:30:
16:0c:14:56:47:36:2d:8b:f1:54:db:e1:c2:4d:d9:
3b:d5:79:b0:50:5a:57:a9:6a:52:99:83:e9:a7:26:
b2:c4:8d:28:c5:83:7d:f7:39:84:ce:08:55:10:9b:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:F5:F6:A3:58:EB:13:8C:4E:56:FF:4C:6E:A6:72:1F:55:30:4D
X509v3 Authority Key Identifier:
keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d5:68:07:ea:46:e9:8f:71:06:96:f4:64:60:a1:de:d2:b9:
fa:3e:8d:00:fa:60:be:6a:5c:b9:af:a5:fd:89:27:70:8c:d4:
61:b1:57:ce:a3:d2:e4:a4:53:4f:d4:88:3d:9d:04:46:6c:fe:
d3:91:64:8b:3b:ef:85:3b:65:23:3f:14:2d:37:54:2c:0c:0a:
5c:e1:e7:22:0d:dd:8a:1a:61:70:35:52:8f:f2:ea:60:e3:b9:
3d:bd:dd:4e:29:34:77:98:95:f4:ac:83:28:50:17:d9:27:ed:
a7:cc:55:5e:0a:d6:5e:62:b0:4d:6d:fb:7e:7a:80:50:bb:53:
fe:ee:d6:bb:57:c2:99:90:6d:a1:8d:ae:2a:e6:28:6a:93:8e:
8b:cc:0c:23:75:71:50:7a:50:6d:24:7a:bb:ef:18:da:fa:91:
01:5e:77:e6:11:91:c9:29:da:16:c5:3c:51:1e:42:9f:c2:6c:
0e:80:78:28:68:0e:d5:b6:10:22:41:11:f6:e8:21:03:74:c7:
d8:9a:3d:1a:e0:1f:d6:82:c1:ea:f3:df:d8:fb:0d:42:7d:c7:
e0:b6:7c:39:a6:31:ac:a2:60:74:42:12:08:98:68:ed:ef:bf:
bc:44:6c:30:bb:49:db:0b:29:15:04:e1:71:cc:8d:0e:8d:71:
79:16:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:26 2026 by rpki-client