
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
File: A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json)
Hash identifier: QMsXCiZXF0LiGo3OdEQ07zCkNLS0UmhUDKSGsWCKP4o=
Subject key identifier: B7:AD:DC:5F:20:7A:22:AB:AC:C2:34:DF:CE:FA:06:F6:B6:A0:EA:B4
Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
Certificate issuer: /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Certificate serial: 11E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
Manifest number: 0FA7
Signing time: Thu 26 Mar 2026 17:56:15 +0000
Manifest this update: Thu 26 Mar 2026 17:56:15 +0000
Manifest next update: Thu 02 Apr 2026 17:56:15 +0000
Files and hashes: 1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: aCq2E/X3QljkhXrUxa6tl+Lkwg5iZeKdCMxawR6cqA8=)
2: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: 0DCItTKdRW8XZxl8sAeRR6hAdfjknJyDauG3M3/Il7w=)
3: 161D8022A24611EF966F6286C4F9AE02.roa (hash: tieBAKV+0GGHr9kS20s84IeAoVikBdRSa9yFj4eozUA=)
4: 942F8E2CCB7811F08DD67782C4F9AE02.roa (hash: Z11ubi7+inC7UkMzlIhegyyzoXlEJppMzuzt+jt5MvY=)
5: F13EB484826311F092F0144AC4F9AE02.roa (hash: b7oXVQcmRj7KP29NunQlqn63wrIdTOHyMvTcYe2jo44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4578 (0x11e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Validity
Not Before: Mar 26 17:56:15 2026 GMT
Not After : Apr 2 17:56:15 2026 GMT
Subject: CN=69c5733f-c001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:fb:21:44:7b:7e:ee:95:c6:b8:ad:1d:0d:
51:e5:ae:b5:7a:67:14:e3:b9:70:4a:d8:f4:aa:a4:
ed:d1:70:e4:5a:07:99:b0:bf:02:85:f7:0a:b9:ad:
32:99:e7:96:8f:e5:b6:03:33:a9:2f:25:c8:93:67:
73:f0:38:1c:6e:8c:b9:f8:1e:0b:b8:0c:33:2f:fa:
32:78:21:46:6e:31:b4:f3:00:a8:99:d7:1d:f1:84:
f6:50:74:82:00:c4:a5:8e:10:c2:85:8a:25:bf:37:
01:32:5b:4a:0f:09:b3:66:48:8e:8b:dd:05:8a:09:
4d:38:d6:66:31:c7:45:80:1e:9a:d2:8a:69:d7:b4:
9e:d9:f7:cc:d3:9a:b5:80:63:ea:85:75:be:da:4a:
3b:55:57:f8:58:e6:07:18:7c:7a:cf:93:77:3e:57:
ba:b5:3b:58:cd:98:5b:12:2d:5e:c2:89:12:01:6d:
6b:d7:9d:cb:21:f9:7d:4e:23:f4:0c:1f:fd:88:f5:
c2:c4:01:de:f8:fb:fa:a0:00:de:1b:60:a5:8d:ba:
4d:4e:16:ca:2c:56:28:cf:b4:09:77:29:68:be:f9:
ea:7c:6f:44:b8:39:9d:69:36:ec:82:6a:63:7d:c1:
74:27:5c:2a:55:2e:e1:30:f9:d0:d3:aa:36:b5:27:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AD:DC:5F:20:7A:22:AB:AC:C2:34:DF:CE:FA:06:F6:B6:A0:EA:B4
X509v3 Authority Key Identifier:
keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:29:f5:05:3a:eb:d7:eb:28:6e:2f:73:b3:b9:1e:c1:c0:55:
bd:4c:7f:d5:f0:32:d1:59:ce:b7:51:88:88:3c:c6:d8:6d:e8:
f6:12:38:1b:ba:b1:b6:0e:c9:27:81:ec:e6:f0:5f:5a:77:22:
cf:ba:28:3a:bf:ca:97:f3:8d:ba:60:83:5b:73:6f:f8:f1:a6:
19:ed:4b:09:2f:96:d2:11:d3:1e:86:23:05:78:68:29:b1:d8:
96:95:07:13:d8:4b:29:47:f6:11:78:ba:97:8d:0a:b4:e1:71:
53:0f:43:7c:da:74:bf:d4:d6:a8:f0:b0:65:53:a9:88:34:7d:
82:dc:74:47:30:e1:f0:35:ee:22:37:e3:c9:d0:24:b1:72:e1:
38:e9:fc:f9:1d:71:d1:40:36:2e:9e:0a:d6:e6:6a:20:d5:2c:
04:ed:80:b3:5a:4a:ec:cb:03:e3:7b:83:8c:29:48:7c:6f:92:
14:d4:e2:32:d4:72:cd:b1:95:a6:44:78:36:6f:83:79:84:da:
d8:fe:ef:3b:40:c1:cc:50:6e:ef:65:d8:61:d6:bd:4c:65:d4:
de:a3:ef:55:6b:36:ae:5d:29:1e:fe:fb:ed:a0:36:eb:a2:c1:
0d:7b:57:3d:f8:32:46:4c:49:86:72:35:43:e4:dc:0a:83:41:
75:64:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:10 2026 by rpki-client