
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
File: 9fW2D5FdvXIk_85g8fnQXoNwLvM.mft (raw, json)
Hash identifier: QhcLZi65pRx7Ly8IA1bc4oUiQZxxMX8KU0IfiFGT8Sk=
Subject key identifier: 81:C4:18:93:92:F0:35:59:8A:F5:13:DF:ED:79:38:41:2B:D3:50:D6
Authority key identifier: F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
Certificate issuer: /CN=A91E585B/serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
Manifest number: 27
Signing time: Wed 25 Mar 2026 07:58:59 +0000
Manifest this update: Wed 25 Mar 2026 07:58:59 +0000
Manifest next update: Wed 01 Apr 2026 07:58:59 +0000
Files and hashes: 1: 9fW2D5FdvXIk_85g8fnQXoNwLvM.crl (hash: zl4zfGY8jelYUJ5At8a3leGR9svHhiPAv2sKtwcOhSQ=)
2: F59E9504F20611F0B4D6054A4A6F56BC.roa (hash: fJ10i1I3CVn/cq/HNYJ87da7lOqBMrG/ft9ahjiVUac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl
rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E585B, serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3
Validity
Not Before: Mar 25 07:58:59 2026 GMT
Not After : Apr 1 07:58:59 2026 GMT
Subject: CN=69c395c3-176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:2f:df:06:ca:bb:f7:7d:55:fa:0d:29:2f:
2d:27:77:a5:2d:cb:00:ae:3d:c9:d1:ce:f1:fb:28:
62:d6:46:3b:e7:50:6e:70:c1:50:2d:0c:47:0e:a0:
30:36:e0:bc:89:9e:d6:46:77:34:70:20:a9:d1:c8:
f4:f2:64:c3:60:0f:3d:71:c2:0a:e9:e5:65:83:79:
87:c3:e2:74:f0:d2:73:ea:d0:61:1d:56:ee:ed:8e:
83:6b:77:a6:c2:31:46:84:f4:e2:13:38:3b:4b:10:
b2:30:19:70:35:9b:69:1a:b6:4f:31:34:e7:d4:fc:
2d:db:e9:20:18:3a:92:89:fb:0f:b2:2b:33:4e:96:
9a:dc:1f:c9:c7:bd:5c:15:a4:4a:ba:6e:eb:ef:ca:
57:6d:c6:d8:05:bf:09:cb:41:65:ab:66:b4:47:da:
05:cc:75:b8:79:1f:70:65:56:42:b4:62:00:a8:dd:
df:92:24:49:ec:20:cf:f5:df:6d:c1:d0:cb:de:21:
8f:0f:c2:e9:c2:be:65:6f:9b:46:3e:ed:f7:b2:91:
ff:b9:52:9d:a7:1e:63:84:6d:2c:4a:74:d2:49:b0:
87:73:01:1f:97:6c:d5:b3:4e:a6:09:9f:0a:e0:33:
39:1e:13:47:b4:71:a7:45:40:9c:f7:29:ce:b7:05:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C4:18:93:92:F0:35:59:8A:F5:13:DF:ED:79:38:41:2B:D3:50:D6
X509v3 Authority Key Identifier:
keyid:F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:17:ea:b3:62:da:ed:6a:b9:72:bc:86:e8:7e:ea:90:cd:7a:
94:4a:5d:50:48:9d:3e:93:11:7b:50:b6:07:af:00:44:55:49:
1d:9e:f5:72:95:5d:d3:b9:b9:17:90:2a:9b:31:57:34:ee:b0:
c1:bb:86:9f:73:2c:da:a5:8c:73:e4:00:40:b1:60:46:58:02:
36:bf:0c:2f:9f:97:cb:cd:6c:70:f6:04:6e:61:0e:65:ce:c7:
7f:c5:79:1c:f3:a1:70:3e:25:91:b9:2a:6e:5f:27:9a:be:e4:
f8:d5:9d:59:e2:e7:ac:8d:cc:f7:c4:3a:91:51:d5:30:11:7a:
d8:03:bf:f7:9c:8d:c5:69:cd:4d:6f:09:70:51:03:6b:be:ff:
13:41:5d:f9:56:b1:c7:57:28:1b:4e:db:f1:bf:11:1f:43:7e:
c3:1d:0f:30:08:6d:28:72:f4:d6:b9:f3:57:47:d9:f1:af:36:
7a:01:ea:2d:07:90:3c:ab:51:2e:b3:34:ae:bb:73:05:82:86:
2f:1b:f1:14:2c:00:0a:2d:21:81:0f:8b:6b:7d:0e:d0:48:8d:
f5:77:5e:cb:8e:72:2c:da:19:84:f9:e9:25:00:09:41:4d:2b:
ba:54:c7:4b:2d:28:07:fb:cd:13:fc:06:0c:4b:d1:f3:2c:c6:
66:76:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:45 2026 by rpki-client