
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json)
Hash identifier: kkWh8yOcJgMDA+eSXTvldOhQVwvc5cceR0gZ9/uOjJI=
Subject key identifier: E1:94:DA:A3:80:DD:D1:82:A4:5E:8C:53:85:F8:F7:C3:60:28:75:D1
Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18
Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118
Certificate serial: 351F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
Manifest number: 351F
Signing time: Tue 24 Mar 2026 14:53:25 +0000
Manifest this update: Tue 24 Mar 2026 14:53:25 +0000
Manifest next update: Tue 31 Mar 2026 14:53:25 +0000
Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: Odk7Nyf80O2Du2+GFqsvJK0ejdjlVqwHPPA/+puI58o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl
rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13599 (0x351f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118
Validity
Not Before: Mar 24 14:53:25 2026 GMT
Not After : Mar 31 14:53:25 2026 GMT
Subject: CN=69c2a565-e9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:9c:fb:8f:4f:75:10:44:a0:38:89:97:fe:
f3:68:d3:65:3a:a8:f0:94:9d:6b:74:7e:1a:a2:98:
49:55:18:e4:29:e2:ca:8c:b8:fd:18:fb:64:ed:3a:
11:a8:b8:c8:fe:d7:7c:3e:eb:93:12:03:2c:ef:f4:
2c:ff:ea:5a:bd:ee:8a:83:ca:60:ab:09:a1:54:dc:
d1:36:46:1b:a7:a4:0d:a7:dd:31:61:9b:5a:3e:5e:
24:c6:ea:02:63:ee:f8:9d:49:96:1b:2e:2b:f8:2d:
d6:58:56:6b:57:68:e1:33:e1:f2:cc:00:99:f7:ac:
f2:5f:c9:5b:d7:73:20:15:9a:0b:b0:30:c0:db:35:
c6:eb:3c:a0:6b:cf:fd:22:d7:71:5f:4b:a3:68:99:
72:39:e5:26:00:ac:db:9a:9d:77:c5:30:95:92:f1:
65:1e:d8:bf:20:d7:14:80:16:ac:a4:53:28:2b:45:
91:44:f3:5c:0c:2e:5b:8f:c9:c0:e7:f2:b8:9d:0d:
44:28:a1:e9:2b:e8:0a:ce:e5:4a:46:8e:54:d5:41:
ca:e7:2e:0c:e2:d3:29:3e:ed:36:8e:25:ba:0a:2d:
5d:18:c6:fc:cf:34:f3:cc:58:f5:24:3c:32:39:8c:
1a:22:a6:45:08:86:4d:d7:a9:5e:52:66:4a:02:61:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:DA:A3:80:DD:D1:82:A4:5E:8C:53:85:F8:F7:C3:60:28:75:D1
X509v3 Authority Key Identifier:
keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:28:27:c0:d7:97:08:44:92:67:03:38:e1:d6:a4:7f:78:3c:
6d:51:81:99:68:5a:75:fb:a8:f1:c2:73:18:06:52:af:a8:79:
b8:12:77:42:f0:29:7f:1e:82:c6:f1:11:a7:89:6f:7f:ab:e4:
6e:d1:e4:05:60:32:f6:62:92:ad:08:c9:84:b9:f5:ae:e2:c2:
a1:f1:39:c9:83:25:c5:f1:1d:df:de:63:f9:5d:42:f8:d8:7a:
75:dd:45:ed:0e:d5:85:9b:05:6e:6c:73:1c:33:90:4a:a9:5f:
e3:53:e1:37:db:fa:79:f0:3d:5c:7c:1a:a2:53:ba:04:a7:0a:
a1:4e:e4:f1:cb:5a:9a:d6:4c:6e:30:8e:28:a9:b1:41:2e:e3:
d8:ae:12:74:60:86:e3:2e:15:72:eb:f4:51:3a:ce:b9:c5:62:
dd:9d:d1:10:05:c1:eb:0b:f5:cc:5a:e2:fc:04:89:f3:85:84:
fd:4f:80:66:17:83:c3:04:e3:2a:85:0d:93:5a:b9:41:4a:02:
fd:f1:13:f7:d8:85:60:f6:84:57:e9:b1:f7:a4:b7:a0:72:31:
56:00:6d:94:18:42:d9:43:cc:24:04:80:82:4c:ce:3a:d9:2d:
ae:75:75:ea:43:ac:cd:e0:49:5b:5d:e0:4e:31:2b:3b:cb:55:
e4:71:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:56 2026 by rpki-client