
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
File: 71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json)
Hash identifier: FZX5veCfJvVCR7nHIRxwJfh9S/rRJ7YTLlANCdQjpNY=
Subject key identifier: AF:69:88:01:91:74:39:81:2E:B8:8E:CB:9E:EE:E5:B8:7D:62:B4:7D
Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Certificate serial: 060A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
Manifest number: 05F8
Signing time: Tue 24 Mar 2026 22:38:11 +0000
Manifest this update: Tue 24 Mar 2026 22:38:10 +0000
Manifest next update: Tue 31 Mar 2026 22:38:10 +0000
Files and hashes: 1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: 1kX1w1OOI2Rtww1cXlQxMrFjqBL9R8zkYaXTCqgcO2M=)
2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: twFwFJC3J8ZUbcarYXRq8YtJ8WV2nBAuve1Zg5XyTww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl
rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Validity
Not Before: Mar 24 22:38:10 2026 GMT
Not After : Mar 31 22:38:10 2026 GMT
Subject: CN=69c31253-0851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:fa:7b:8d:06:67:2e:c3:7b:21:15:df:d7:
b5:22:88:c7:0d:e2:ec:a4:62:37:2e:bb:95:9d:30:
11:5c:e1:dd:ba:a4:63:15:6d:9d:b7:6b:7c:5e:11:
bf:5f:d3:00:1d:e6:ba:69:00:a5:d4:96:33:e5:3d:
69:6f:a4:08:a2:3a:c4:c5:35:76:94:b1:c2:d8:de:
ec:62:5a:6b:7c:a0:ab:d9:66:d7:01:58:bc:e7:15:
8c:d2:04:40:f0:ba:3a:72:17:f7:1c:ba:2e:c9:8f:
7d:23:48:4b:59:1f:41:b4:e5:97:bf:6c:ca:5b:85:
21:5e:d7:0e:46:fe:9a:f2:30:5a:7c:9a:0b:8f:fe:
fb:c6:42:3c:2a:42:f8:5c:18:ee:75:cb:c3:2f:10:
b8:37:b0:2c:5a:dc:d1:bb:f0:39:3b:80:2e:bd:aa:
4c:f7:96:c4:ca:22:07:b8:bd:c8:9d:de:aa:0b:cf:
9d:af:85:61:1d:0c:f2:8f:60:ac:50:6a:19:c4:98:
e7:1d:2b:13:ad:b5:5c:54:26:25:30:28:a4:71:31:
38:e6:47:fe:c1:bc:43:d9:47:cb:c0:98:23:46:d5:
d5:52:d1:43:15:64:7f:02:3e:ec:f9:dd:e2:45:40:
d7:f4:d4:0a:d0:46:85:c0:ff:5d:53:5b:24:5e:ca:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:69:88:01:91:74:39:81:2E:B8:8E:CB:9E:EE:E5:B8:7D:62:B4:7D
X509v3 Authority Key Identifier:
keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:d4:1d:07:7d:c0:bf:18:c4:37:c9:3c:93:e0:5b:be:8f:9e:
4c:a3:93:74:56:c9:65:e5:00:f6:ba:53:fb:de:8a:d7:a2:4b:
09:15:08:e4:4d:90:f5:b9:31:17:f7:62:88:8f:d3:2e:43:a6:
5f:ac:c7:d0:00:41:69:40:c0:76:95:61:36:21:96:b1:2d:51:
20:de:92:ba:15:2a:b1:7a:f7:59:0e:88:ca:a0:c9:7d:79:ef:
42:2d:1d:0a:7b:a8:1d:11:98:1b:b8:8d:f0:1f:33:be:87:88:
68:61:90:5b:2a:e0:e9:96:f4:7b:f2:96:41:bb:90:f2:39:eb:
e1:d1:a3:5a:b9:10:15:ca:8b:a1:de:cc:11:9e:21:07:af:e8:
d1:8a:53:2a:e4:f8:6d:76:27:b3:a4:60:6a:f0:e8:25:f3:c4:
17:37:0a:67:d0:eb:50:91:25:7e:b8:97:65:28:36:58:5b:06:
de:cd:73:c1:59:d4:15:47:53:ad:5d:08:c6:e8:12:29:99:4e:
eb:b8:ad:bd:e3:e2:fa:7d:6a:f7:c2:bb:4a:40:08:d9:31:d6:
01:e8:75:35:63:3e:5b:c2:f0:a6:8d:a1:77:f0:43:3d:98:b7:
c7:ed:13:62:41:51:2f:9d:35:18:9f:ec:94:69:15:0c:73:8b:
61:33:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:34 2026 by rpki-client