
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json)
Hash identifier: movlieEOnDeX39HHqh8iUG9ED1vgH4hs4jJ5CuiwF6Y=
Subject key identifier: 38:24:E1:80:7D:20:7C:4F:98:A5:3E:E2:CF:F6:75:53:D7:25:2E:F4
Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
Manifest number: 64
Signing time: Wed 25 Mar 2026 06:56:20 +0000
Manifest this update: Wed 25 Mar 2026 06:56:19 +0000
Manifest next update: Wed 01 Apr 2026 06:56:19 +0000
Files and hashes: 1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: dOtzYRSQt+AWE00euJchWitpZ2poaEVKVXlWhu5rOYE=)
2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: 8wP/NlNE2Z/JRbzUdllp1czpJ2kBXEzpgll4z9yQeFg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Validity
Not Before: Mar 25 06:56:19 2026 GMT
Not After : Apr 1 06:56:19 2026 GMT
Subject: CN=69c38714-6a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:67:08:8c:26:53:9e:3a:53:d3:b9:cc:3d:
00:f4:b9:5c:3d:76:73:9c:35:c1:25:3f:67:9f:db:
97:61:67:e6:e9:a7:20:ac:ac:58:d0:c8:b8:48:7d:
76:68:42:45:d8:99:58:35:e0:a2:3d:ee:d5:68:8d:
5c:45:d5:1b:d4:85:41:2d:e9:9e:02:aa:c2:ae:06:
f5:07:92:d1:9c:89:d9:3a:1e:ee:41:9a:29:71:df:
25:ca:9c:e1:31:68:56:2d:64:26:31:00:96:5b:8a:
f8:36:6e:b9:52:47:a3:41:de:74:b6:0c:59:c4:bb:
81:ba:58:df:12:09:fa:a0:d0:02:5e:6e:00:da:21:
a7:b4:6f:eb:e5:8a:55:43:4a:9a:b6:88:cc:e8:3e:
d0:75:49:36:6c:8b:0b:6d:b5:0f:69:14:de:81:2e:
20:57:af:39:dd:9c:6e:2a:b2:7f:46:c6:df:35:cb:
4c:0f:1d:f2:e5:d0:95:f6:3c:ef:da:b6:56:e9:c9:
71:cc:57:1d:95:c5:46:1f:83:87:f2:d7:b3:18:96:
6d:57:77:9f:2a:ae:b7:b5:be:89:b3:e7:21:6a:eb:
a6:3a:d6:ab:61:7d:bf:3c:b4:7c:39:e2:5b:c5:6d:
2e:6f:8d:e3:8f:fd:61:5d:7a:f1:57:96:80:6b:c2:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:E1:80:7D:20:7C:4F:98:A5:3E:E2:CF:F6:75:53:D7:25:2E:F4
X509v3 Authority Key Identifier:
keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:60:a8:e1:5c:fc:a8:3f:bc:d8:c9:f1:26:f1:61:cb:5a:55:
e5:5f:15:7f:4f:30:57:c7:b9:e1:91:66:68:1f:ab:2e:b4:82:
1a:2c:5c:21:7a:c4:7c:2e:8c:16:df:b7:56:08:9c:8c:6f:a1:
49:2f:2a:00:93:90:31:d7:87:44:90:3d:7f:a9:ed:a0:5c:45:
87:c8:75:7b:6e:53:00:08:77:a7:49:ff:49:e9:80:b6:81:4b:
30:34:c1:96:12:a8:c0:70:d6:8f:a7:d4:ed:77:d1:a2:02:d2:
46:39:60:bb:5b:e6:2b:bd:67:ee:42:e0:e0:9e:f7:a8:f9:8f:
39:50:8d:6e:cd:7a:81:75:eb:57:8b:70:66:b2:a3:4c:70:c9:
63:90:5d:89:d7:b4:08:c2:45:d5:4a:05:da:66:22:e7:c8:a8:
ef:26:cf:f8:af:03:3a:d6:03:ac:ae:6f:d3:24:3c:cd:a9:94:
dc:22:18:2b:fc:8e:79:cd:8a:c3:d4:d2:c0:ae:6c:7d:d5:5a:
ac:d1:48:30:cd:f6:d8:6a:04:7a:2e:fd:da:1d:01:42:9d:dc:
59:39:63:0a:ac:69:b7:ba:a7:66:6a:02:b7:c1:82:92:13:d7:
ce:b7:6a:8f:00:cd:19:41:86:4a:81:0d:a0:ae:a6:37:13:da:
5a:83:2a:dc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2NzQxNDVGNkM1
OEY4M0NENTAeFw0yNjAzMjUwNjU2MTlaFw0yNjA0MDEwNjU2MTlaMBgxFjAUBgNV
BAMTDTY5YzM4NzE0LTZhMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeJ2cIjCZTnjpT07nMPQD0uVw9dnOcNcElP2ef25dhZ+bppyCsrFjQyLhIfXZo
QkXYmVg14KI97tVojVxF1RvUhUEt6Z4CqsKuBvUHktGcidk6Hu5Bmilx3yXKnOEx
aFYtZCYxAJZbivg2brlSR6NB3nS2DFnEu4G6WN8SCfqg0AJebgDaIae0b+vlilVD
Spq2iMzoPtB1STZsiwtttQ9pFN6BLiBXrzndnG4qsn9Gxt81y0wPHfLl0JX2PO/a
tlbpyXHMVx2VxUYfg4fy17MYlm1Xd58qrre1vomz5yFq66Y61qthfb88tHw54lvF
bS5vjeOP/WFdevFXloBrwpXxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOCThgH0g
fE+YpT7iz/Z1U9clLvQwHwYDVR0jBBgwFoAURH1Zg78NuRGtj9y2dBRfbFj4PNUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxLzMyRUUwQTZFOTlF
OTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBO
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUkgxWmc3OE51Ukd0ajl5MmRCUmZiRmo0UE5VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
QjAxLzMyRUUwQTZFOTlFOTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJH
dGo5eTJkQlJmYkZqNFBOVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBfYKjhXPyoP7zYyfEm8WHLWlXlXxV/TzBXx7nhkWZoH6sutIIaLFwhesR8LowW
37dWCJyMb6FJLyoAk5Ax14dEkD1/qe2gXEWHyHV7blMACHenSf9J6YC2gUswNMGW
EqjAcNaPp9Ttd9GiAtJGOWC7W+YrvWfuQuDgnveo+Y85UI1uzXqBdetXi3BmsqNM
cMljkF2J17QIwkXVSgXaZiLnyKjvJs/4rwM61gOsrm/TJDzNqZTcIhgr/I55zYrD
1NLArmx91Vqs0UgwzfbYagR6Lv3aHQFCndxZOWMKrGm3uqdmagK3wYKSE9fOt2qP
AM0ZQYZKgQ2grqY3E9pagyrc
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:50 2026 by rpki-client