
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json)
Hash identifier: mgTQ8ZqfnZMj3aWXuYdLAMa5AYSDhCVV7XWhIYdcis4=
Subject key identifier: 89:B5:E8:84:52:FF:08:E9:ED:38:F0:B3:AC:6D:80:AE:57:D4:24:D0
Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
Manifest number: 0187
Signing time: Wed 25 Mar 2026 03:51:53 +0000
Manifest this update: Wed 25 Mar 2026 03:51:53 +0000
Manifest next update: Wed 01 Apr 2026 03:51:53 +0000
Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: u53jAy5ajRDFnOHMOjrF5cDbY9Z+4wrSHYN+Liz0auA=)
2: F74BBA0E307C11F09D502B0DC4F9AE02.roa (hash: 6PumaaWqeEWlSvcpp1tovC+UqR/XcnLSAY4hmR5KoDY=)
3: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: z9EDVnBrrvYkKd0g5cZsXbHmSVTdTt1qtDE8mfboD8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Validity
Not Before: Mar 25 03:51:53 2026 GMT
Not After : Apr 1 03:51:53 2026 GMT
Subject: CN=69c35bd9-d9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:ff:95:9c:9b:a1:20:e3:53:ba:5d:22:bd:
2a:6c:78:1f:47:07:41:07:db:23:00:87:02:82:1a:
36:f5:a3:dd:1a:bd:6b:58:40:2b:3c:48:a6:1c:a8:
49:a4:5b:76:1e:88:21:88:d9:f7:8a:31:7e:ec:5e:
25:91:d6:9f:9f:87:68:1d:33:89:10:6c:97:de:57:
23:53:3b:a5:69:29:06:fc:c5:ff:4d:ea:af:75:47:
63:54:bb:cd:43:47:aa:64:d3:86:44:7e:e4:d4:4f:
f8:da:e7:4b:0f:b3:2d:fd:0f:fa:f6:93:ca:df:4b:
fc:86:19:1d:61:97:3d:61:dc:e3:22:43:8d:43:03:
39:ca:64:0d:e2:74:6e:3e:33:d1:ff:60:79:67:c9:
af:a6:96:18:c4:42:30:4a:2b:68:21:44:6a:68:d4:
b7:33:1a:2e:91:51:6a:68:cc:cd:9a:cd:2a:c7:41:
91:db:05:4f:a8:8c:09:fb:af:b6:f9:55:f4:d0:c4:
53:61:50:0c:5d:af:6f:d5:f3:53:cb:05:37:31:d0:
1d:04:5d:c1:75:5c:46:e7:ea:15:a3:4a:09:1b:58:
b7:bb:9a:53:54:6b:89:b1:d2:dd:70:dc:65:76:85:
dc:5c:be:9d:de:bb:5d:5f:41:7c:86:a7:c8:be:da:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:E8:84:52:FF:08:E9:ED:38:F0:B3:AC:6D:80:AE:57:D4:24:D0
X509v3 Authority Key Identifier:
keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:24:69:da:8e:c6:c2:3b:69:7f:53:f0:4d:11:bd:d9:5b:ca:
2f:96:db:c8:7f:94:5d:99:0a:14:86:6d:91:a0:e6:58:33:b4:
70:3b:85:39:4b:19:86:11:a1:8b:e6:0b:35:06:8a:12:50:8b:
43:f7:3f:63:fe:36:6f:6c:02:82:30:e1:e5:df:a7:13:d4:77:
3b:dd:d5:ee:ec:c7:7e:3d:13:48:d6:9c:ad:0e:f8:f1:25:45:
3d:9f:82:49:52:9d:0c:02:23:05:c9:c0:4c:b0:43:73:ab:3a:
65:25:0f:4b:96:06:92:5e:1b:d7:d4:f4:0d:da:8f:cc:42:87:
ab:40:a3:cf:a5:32:6c:3d:0f:6c:ed:d6:a2:7a:f5:5b:fb:70:
60:81:99:84:04:ce:9d:a1:26:0d:a2:fd:d1:a0:51:db:35:11:
3e:cb:c7:4e:07:2b:e6:74:cd:11:42:85:05:a5:a2:f3:69:b9:
8b:cd:dd:cf:b0:18:18:56:c3:07:be:b8:55:d4:bf:9e:22:ef:
14:5b:89:df:dc:2f:1b:4c:09:64:3f:48:30:e5:d4:f1:42:59:
3c:7a:6b:48:f0:0c:23:77:11:fe:62:48:99:21:ba:0f:88:1f:
be:4f:26:51:ca:55:36:f7:0a:d5:1b:09:e4:b4:a8:75:b8:31:
a2:1f:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:43 2026 by rpki-client