
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
File: s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json)
Hash identifier: c0GTk6McNJXIAIXu9N8XgKAwOcu2qs89ZgjSaG7z1BI=
Subject key identifier: 03:B1:A1:4D:35:BA:15:31:FA:3B:56:F9:ED:9D:0C:C2:C2:46:EA:59
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Certificate issuer: /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial: 0B8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
Manifest number: 0B77
Signing time: Tue 24 Mar 2026 18:57:32 +0000
Manifest this update: Tue 24 Mar 2026 18:57:32 +0000
Manifest next update: Tue 31 Mar 2026 18:57:32 +0000
Files and hashes: 1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: JbEIstVhigCwfDkK40Auu5M3FMkIvIu9RWLTDm0FUnw=)
2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: 1+jD0Tan+qw9lGGMHwgX8x7RXas01clsSnD+5FJCfx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:57:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2957 (0xb8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Validity
Not Before: Mar 24 18:57:32 2026 GMT
Not After : Mar 31 18:57:32 2026 GMT
Subject: CN=69c2de9c-51b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:d5:34:49:05:2f:61:ee:3d:60:fc:cf:89:
2f:cd:4c:ef:62:4c:4e:7a:1e:68:1c:b0:68:bf:aa:
31:73:0f:a5:1f:b5:14:b4:47:7c:95:55:fc:9d:be:
92:6e:ea:79:49:0e:a3:14:5a:33:4e:85:31:a6:46:
13:90:05:12:4a:d0:a5:36:3d:7a:59:23:89:68:b7:
40:2d:15:9f:e1:f1:ab:9b:5b:66:08:34:4c:3a:65:
9d:a7:6d:26:ac:e2:d4:76:58:4c:ba:dd:5b:2b:d1:
fd:b3:1d:50:fd:b6:fe:9e:c5:d5:4d:5f:a9:18:19:
15:74:b0:ca:86:5d:47:a2:8b:df:ef:6a:4a:1a:0e:
d4:2b:31:d1:e2:db:46:0f:c1:f4:47:c1:8c:fb:1d:
3e:cd:59:e7:0f:2f:bc:07:5c:14:b2:7d:6a:94:c9:
af:92:e4:25:00:ae:88:2a:1b:17:d1:88:e7:42:bc:
67:ad:3f:89:c5:86:03:3d:dd:48:55:e2:8a:27:73:
e1:37:33:ea:3c:2c:53:aa:c2:74:7b:61:24:f1:1d:
9c:fe:50:88:0f:58:8e:f1:3a:d5:32:62:ae:f6:fd:
5a:38:52:92:a2:de:d9:56:d2:d4:54:88:66:fc:48:
b0:47:9c:58:7b:f2:00:5f:c3:f3:0a:8f:57:22:ff:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B1:A1:4D:35:BA:15:31:FA:3B:56:F9:ED:9D:0C:C2:C2:46:EA:59
X509v3 Authority Key Identifier:
keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:f0:22:41:a8:3d:b9:0f:9a:ea:dc:14:4e:25:1c:36:5a:d9:
c8:66:9a:7b:27:88:d1:a2:70:dd:f9:e4:ba:2f:2d:fb:b8:40:
5e:0f:f9:68:39:d4:b3:3b:44:4d:64:8a:59:c3:71:a7:cb:4e:
eb:59:f2:b2:ee:95:ea:7b:8d:19:44:4b:0f:78:01:b8:b3:57:
43:78:5c:5f:68:96:eb:2a:62:82:db:4f:ab:a5:95:90:83:80:
21:46:0d:43:d7:25:28:99:4f:1c:72:17:ba:57:c5:0f:1f:79:
d3:ed:d7:87:11:34:7a:36:8f:98:f1:5d:10:be:df:11:74:aa:
2d:7a:19:b2:3f:34:a6:74:f7:93:49:28:bc:e2:5a:53:ee:85:
83:41:7c:75:ca:eb:30:34:fa:55:bb:e9:44:d7:33:88:26:0f:
6a:ce:d2:20:92:17:f5:e2:2d:0f:a3:01:ea:77:6c:18:10:03:
20:22:43:15:06:13:d8:10:0d:5c:e0:e8:93:1f:94:da:71:b5:
82:ba:d0:06:86:3a:99:c7:dd:45:7d:88:0b:61:40:ab:87:a5:
67:dc:8a:11:ba:08:44:76:2b:b7:2c:fb:87:0c:d8:98:e4:f6:
4a:5d:8e:a3:34:b1:2e:97:63:10:4c:29:eb:4e:da:b9:4f:be:
f7:d1:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:02 2026 by rpki-client