
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier: M909iiviHFYi5kzyBAV71pVFjJsZ1eiVaaSUAuA8H+8=
Subject key identifier: 69:3B:C3:93:76:29:A9:48:70:B0:B7:D1:D4:BD:F7:1A:BE:58:50:21
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial: 045D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number: 0447
Signing time: Fri 27 Mar 2026 00:01:11 +0000
Manifest this update: Fri 27 Mar 2026 00:01:10 +0000
Manifest next update: Fri 03 Apr 2026 00:01:10 +0000
Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: nBam355Xa8sh0/+mSYhNmZ52Nt2kU2nYRihYsyD1brY=)
2: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=)
3: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=)
4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Validity
Not Before: Mar 27 00:01:10 2026 GMT
Not After : Apr 3 00:01:10 2026 GMT
Subject: CN=69c5c8c7-5257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:c4:f4:e1:3c:cb:78:42:8b:c2:da:b8:71:
a0:25:01:94:db:34:0f:27:a1:b4:a7:db:c9:0d:9c:
f7:0c:13:ec:77:86:81:11:2a:dc:4c:cd:46:76:0d:
9c:10:a1:13:bd:d9:a6:cc:79:78:d9:0c:5b:75:2e:
fd:e4:e5:9d:8e:aa:cc:4e:87:b7:f2:9b:43:12:e1:
d2:49:e7:25:4c:fe:4b:cf:b3:81:53:69:a0:94:91:
0f:3b:db:3f:f4:95:c0:c8:c1:39:9b:b1:f8:4f:a7:
ab:94:3f:8b:af:c1:2a:24:11:d7:98:7b:c9:63:ec:
fe:87:b7:85:d3:c6:f7:7b:af:16:9d:7f:00:ed:9d:
59:49:47:fb:da:59:6b:6a:1b:c3:d1:09:a1:3c:2a:
0f:1c:28:c3:56:51:c4:d0:47:8e:e4:05:10:f2:42:
14:30:e3:91:92:d7:28:b7:12:8b:bb:3b:fd:75:4f:
1e:4a:05:bd:6d:b5:0a:8b:41:9c:62:e0:a4:40:d4:
21:84:4e:22:10:d0:4b:c9:e4:bd:ae:b3:a8:62:75:
97:4f:74:f6:e6:b6:de:41:f4:39:a3:36:df:27:b7:
f2:5d:18:41:1e:86:65:46:33:6a:54:d8:4b:8e:63:
97:53:53:d3:c7:7d:26:be:f0:cc:66:f2:85:94:ea:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:C3:93:76:29:A9:48:70:B0:B7:D1:D4:BD:F7:1A:BE:58:50:21
X509v3 Authority Key Identifier:
keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:53:01:d9:6c:98:48:88:65:22:b6:76:02:71:f3:a5:f4:e3:
dd:2a:d7:a5:92:67:e0:13:fc:15:51:d1:d3:3f:81:ca:c8:cd:
ba:b0:ac:25:87:99:b6:f0:b3:1d:fd:9f:04:63:71:c0:d7:55:
23:6c:93:f7:75:2c:53:cf:4e:80:c1:9c:1d:9f:8e:c6:f1:a1:
c7:f6:e4:c0:f1:95:34:3b:ac:9a:11:6f:ef:4f:33:21:f2:7d:
51:5e:bb:42:6d:c0:bf:63:95:e6:49:46:65:f0:2f:28:cb:12:
46:e7:4d:fa:97:c9:eb:5a:4d:86:5a:65:50:56:55:1f:b0:e1:
63:c3:4b:21:1b:b1:ca:0f:aa:ac:be:9d:e2:6c:e7:d7:c0:33:
44:55:03:45:e8:69:5d:04:76:ad:c0:f4:92:c4:e2:9c:b3:95:
dc:56:e6:65:3e:32:c9:ec:f4:4e:16:d8:82:38:5a:78:e8:0e:
35:c1:07:8b:4f:55:93:b4:54:5c:cc:3d:58:d0:b6:92:14:a4:
be:e9:e8:14:96:32:2a:2e:77:f1:d6:70:b4:b9:a8:39:9e:c1:
fb:80:68:86:d4:35:cd:8f:1e:1c:bc:66:65:81:e2:52:2d:67:
bd:68:ed:dd:38:36:7c:51:e0:f6:c8:21:1d:1e:70:2b:09:5e:
3a:87:11:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:58 2026 by rpki-client