
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
File: ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json)
Hash identifier: OrhEbbbBzEZ+AqBn4/Sj7z6OTHqI0pyWyOhnxzeNECQ=
Subject key identifier: C4:2F:7F:96:94:78:9A:17:1E:32:53:48:3B:51:4D:66:E6:F6:54:3B
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial: 04B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
Manifest number: 04A0
Signing time: Tue 24 Mar 2026 23:41:00 +0000
Manifest this update: Tue 24 Mar 2026 23:41:00 +0000
Manifest next update: Tue 31 Mar 2026 23:41:00 +0000
Files and hashes: 1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: UqW0/RuLsBbn1SAkUJEK8W4HWw1LO5JkugPV4N3rsQE=)
2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: jtPs82NLVd21ee8+NCk8Ufzq1PTdaAHag74elLulFv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1202 (0x4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Validity
Not Before: Mar 24 23:41:00 2026 GMT
Not After : Mar 31 23:41:00 2026 GMT
Subject: CN=69c3210c-88e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:28:cb:84:04:7b:9a:c0:64:e2:cc:b8:f3:
5d:3d:02:ca:6a:33:98:37:53:61:36:da:aa:55:ef:
5b:c7:c3:99:f8:18:87:b2:5d:14:01:14:e7:88:95:
e6:e6:b1:a6:42:8f:72:8c:e0:d2:37:a8:50:e9:e9:
ad:7f:e8:f8:b4:d4:2f:7a:77:78:a6:4c:6c:3e:53:
44:08:3b:de:e4:72:87:be:ae:54:37:da:0e:00:5d:
18:18:85:db:27:94:be:ea:21:3d:94:81:5a:40:da:
49:f3:c9:c8:f5:62:e6:27:e2:23:69:8a:0e:2d:89:
05:35:f6:9b:e6:72:00:54:52:36:7e:84:1d:4d:60:
a8:63:50:f9:d6:93:ab:d1:98:be:11:3e:3f:79:2f:
2a:99:8e:f6:88:d5:15:bc:0b:5d:b0:c1:64:4a:54:
53:8c:52:19:e2:48:c4:0e:9f:41:98:8a:fb:d5:4b:
71:4b:8c:fe:65:cb:61:69:4f:9a:a2:01:a5:a5:6b:
12:6a:e1:41:c1:18:34:74:a2:d8:07:5e:06:54:3a:
1c:75:91:9d:03:04:24:0f:d8:34:11:fa:86:69:89:
5d:12:8b:e9:64:e0:cc:c5:2b:ae:05:43:06:9c:d3:
31:e8:69:88:47:ae:80:67:a6:02:5c:ed:84:ff:8e:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2F:7F:96:94:78:9A:17:1E:32:53:48:3B:51:4D:66:E6:F6:54:3B
X509v3 Authority Key Identifier:
keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7c:32:0f:58:2c:9c:b2:ff:a3:0f:49:8c:09:15:a7:cf:24:
51:cc:9a:b6:a7:5d:44:ec:3c:92:71:f5:3e:ed:3c:bd:59:92:
62:ff:5a:7d:25:a4:3b:4c:37:c0:51:d8:08:a3:48:9a:0e:a3:
3f:c1:81:7b:e8:3c:5b:d8:a3:b7:90:0e:f9:4c:e1:7d:df:5e:
69:ef:13:b5:22:ad:85:fb:bc:18:7c:15:2d:fb:f3:30:9f:74:
fe:11:46:41:1a:87:d6:20:4f:9a:11:b3:85:61:8e:af:4e:e6:
6f:e1:0b:67:48:e4:e9:29:5b:4d:a4:c1:66:06:55:4e:3b:2f:
c5:97:c6:f0:f7:1f:1c:76:1c:cf:53:e2:73:5e:2e:e1:8d:01:
ed:fd:56:41:4b:3d:d8:d8:e2:ff:00:d5:f2:8a:fd:93:dd:63:
8f:a3:df:a0:2b:c7:1e:4e:ed:0f:b6:f6:5d:01:97:4e:85:03:
3f:13:41:b1:eb:76:eb:ec:7f:fe:a0:4e:32:20:66:d8:45:b6:
78:14:c6:e2:0d:14:bc:27:6a:9d:1e:e3:a1:5f:6a:11:4a:56:
e5:5d:4f:a3:5a:7c:db:4f:0d:79:d4:74:4a:e0:73:e4:5b:d4:
70:96:92:ce:3b:aa:be:26:6f:de:7a:90:79:0c:a6:5b:f3:9a:
0a:34:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:54 2026 by rpki-client