
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
File: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json)
Hash identifier: Y6J92J1UArPL9Zy4ZohjhscI2rg3uUA2s7TfS0yDoRc=
Subject key identifier: 9C:23:58:F7:A2:EE:11:51:45:62:7E:B3:86:BE:5F:5E:F3:1C:32:CD
Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
Manifest number: C4
Signing time: Wed 25 Mar 2026 06:08:21 +0000
Manifest this update: Wed 25 Mar 2026 06:08:21 +0000
Manifest next update: Wed 01 Apr 2026 06:08:21 +0000
Files and hashes: 1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: h2+QVY8qRA4JpyP+NrzpsqaN4FntqLsGJ0ijr5lbCWs=)
2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: G7QqbuS3t/iTX6LomgThshVcOQtAVpBN0imWLjN0zDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Validity
Not Before: Mar 25 06:08:21 2026 GMT
Not After : Apr 1 06:08:21 2026 GMT
Subject: CN=69c37bd5-7267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:f7:a2:13:62:18:90:79:3e:59:36:56:2c:
ab:63:8d:e0:66:45:4d:59:e5:83:a9:6d:12:3c:62:
e2:0a:f2:6b:6a:a4:a0:1d:e4:e2:f5:2f:67:6b:53:
fb:70:b0:35:60:43:28:ff:99:88:c4:73:c7:0a:8d:
45:aa:5d:f4:d5:5f:20:eb:41:18:99:85:db:e6:d4:
a4:57:73:47:a9:92:6e:99:8d:0d:02:5e:49:4a:05:
be:05:91:40:5e:33:ff:ba:34:89:35:ac:9e:83:f9:
3e:39:63:fe:89:82:58:ad:db:a4:5d:37:a4:ba:88:
15:bf:6a:75:58:62:09:5c:33:88:5b:32:a2:ea:66:
b4:4e:00:72:44:af:6f:dd:a3:3a:81:fc:b0:e2:e4:
11:59:8a:cc:b4:90:f7:5b:b0:61:3a:1a:e3:c8:02:
ac:1f:0a:ac:c2:bb:8b:12:7d:bf:55:87:33:c6:28:
70:22:36:78:f7:e3:9b:4f:b6:43:09:dd:b2:68:27:
a8:a3:f4:2c:6f:4a:89:76:39:64:45:83:42:6d:c3:
c2:cc:e4:c3:88:57:5a:12:30:e4:48:59:ff:e4:01:
85:00:20:85:b8:19:9f:53:00:0e:cd:00:25:0e:aa:
4b:5c:7d:ba:7c:5d:79:9f:98:4b:57:d7:ef:d5:86:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:58:F7:A2:EE:11:51:45:62:7E:B3:86:BE:5F:5E:F3:1C:32:CD
X509v3 Authority Key Identifier:
keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:92:c9:67:cd:d1:b6:5a:1a:3a:ca:d8:17:86:42:76:a8:66:
dc:af:8f:7b:b6:28:a5:75:0a:be:fd:18:34:d7:b1:6f:00:57:
f5:a7:99:22:97:11:e4:39:7b:c7:5e:39:71:ad:cd:54:e0:94:
46:af:95:24:87:f5:ff:46:1e:9d:38:31:14:d5:35:c4:16:f0:
10:bd:74:5d:7d:ed:46:00:47:55:34:7b:9c:53:d7:29:94:b7:
d4:f9:74:c3:bb:d4:e9:b4:72:66:77:28:c0:99:8d:a4:76:ba:
5c:3b:95:67:e9:c9:70:a0:c2:be:08:4d:b9:44:9a:8e:54:50:
ee:ba:6d:87:6c:c2:7b:ad:94:dc:30:10:50:21:28:cc:b1:61:
04:eb:af:96:e9:c4:27:36:6d:dd:2f:fd:33:92:0f:68:34:35:
45:22:0c:27:0c:da:99:79:1b:99:ec:ac:96:a8:82:d6:66:4f:
e0:9e:25:86:ca:f9:8b:10:98:50:7a:51:52:6a:ef:6c:52:64:
69:f2:32:a6:fa:92:c9:ca:80:0e:03:ab:d0:03:c1:39:b4:a2:
33:d9:4c:ec:64:7e:0e:d1:53:e9:c9:8f:14:dd:86:fb:f3:03:
31:bf:48:12:07:eb:eb:29:41:06:57:6d:3f:e1:68:01:fb:2c:
f3:28:1d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:55 2026 by rpki-client