
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json)
Hash identifier: kzdyZBjP8GEVa4MtHUFyxanQCPmNy6uwkEP5E57Xw6M=
Subject key identifier: 26:60:49:38:87:17:38:35:65:E4:2B:C7:89:EC:2B:37:98:73:91:9F
Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
Manifest number: 0252
Signing time: Fri 27 Mar 2026 01:51:28 +0000
Manifest this update: Fri 27 Mar 2026 01:51:28 +0000
Manifest next update: Fri 03 Apr 2026 01:51:28 +0000
Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: Pq2X8YnQBN4WDHtyFdY5N+Dd09rTVmnUdx5zd+W06Gg=)
2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 6qNNz/jU6Jc8rG9yGhVLuObMTM5ias6oQqU63sjwttY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Validity
Not Before: Mar 27 01:51:28 2026 GMT
Not After : Apr 3 01:51:28 2026 GMT
Subject: CN=69c5e2a0-7a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:0a:e9:b8:3f:52:65:71:70:8e:71:88:64:
f8:c0:0c:dd:17:57:ba:95:2d:f3:7d:13:cc:25:5b:
bb:d0:8b:31:20:78:0c:c7:64:76:be:5e:60:f8:ec:
78:14:bc:39:b1:53:fc:bc:35:a1:b2:b8:54:d8:a5:
42:10:6f:df:9c:1a:3d:b9:2c:c4:28:22:a2:6e:78:
e2:d9:26:2b:b7:86:2e:0d:65:a3:d5:bb:bc:ab:03:
39:18:b0:36:dd:4f:78:35:92:8c:0c:9b:b2:1a:10:
af:56:96:50:44:3e:2e:64:82:07:01:b7:2e:6e:f8:
ce:7a:6f:a3:87:d4:89:63:6b:cd:08:78:8e:c5:b5:
de:30:77:2b:e1:47:81:9d:20:21:db:03:3d:46:6f:
56:c5:3b:bb:3b:cf:a0:e7:39:7f:81:71:de:1b:7d:
9d:fd:13:70:9d:63:e7:1d:ac:2b:67:04:65:15:1a:
b2:1f:a0:3d:6e:ad:10:96:6f:0a:73:d6:96:51:5a:
7e:47:64:57:b3:54:e1:45:b7:5d:9c:a8:37:76:f4:
ac:39:42:0b:70:59:35:25:04:98:ab:27:15:34:b9:
8b:28:28:84:31:1b:f6:bb:e1:a7:9a:cb:d6:f7:d6:
6e:f3:fd:0e:bf:ab:d7:97:a3:e5:60:28:01:25:1c:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:60:49:38:87:17:38:35:65:E4:2B:C7:89:EC:2B:37:98:73:91:9F
X509v3 Authority Key Identifier:
keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:16:36:6f:24:c9:ee:4c:7f:17:26:6b:9a:6d:c6:fd:7c:7a:
f2:44:5a:18:9b:e9:30:7a:c3:7c:9b:c4:92:c9:0f:c0:07:3f:
fe:f3:b0:9b:4c:4e:22:1c:3b:d8:67:65:49:68:e5:6e:8b:b7:
63:24:fb:65:f6:c2:da:be:98:62:81:a8:91:e7:1f:99:63:bc:
40:46:c5:6a:63:41:8d:58:a1:37:52:d6:da:a8:3b:cb:73:d2:
61:c9:57:92:6e:e7:ca:eb:15:21:09:b9:2f:9a:c0:6d:38:90:
bf:f6:14:42:24:31:5d:64:6c:b0:16:50:ce:e3:06:18:7a:03:
b2:80:15:aa:7b:2b:9e:8d:9a:b0:d4:85:a4:cd:e5:17:b3:db:
b0:7e:5a:f3:da:34:28:dc:28:7d:6d:d1:a3:a7:d2:6e:bc:48:
d4:e0:2e:55:dc:f0:42:ca:dc:bc:3a:17:e9:65:bc:eb:4b:55:
ca:8a:b7:61:79:7f:56:d4:ea:be:1b:08:a1:af:01:c2:14:39:
72:85:05:aa:97:6d:07:58:87:29:f7:bb:6c:57:e0:f3:36:59:
05:1a:91:bd:87:29:7c:ff:96:7b:9f:5e:6b:02:c5:b9:ee:64:
de:27:a0:97:70:37:ea:ab:67:cc:6c:e1:89:3b:ce:a6:c1:bc:
24:bc:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:51 2026 by rpki-client