
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json)
Hash identifier: akm1gtARMhAlqrM6k81T6r5GQ4c3t5mz/Xh8IzgBi5Q=
Subject key identifier: BD:27:41:0F:38:B2:64:72:BF:3B:71:CE:30:10:0C:BF:97:20:0F:03
Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09
Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
Certificate serial: 3578
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
Manifest number: 48DF
Signing time: Tue 24 Mar 2026 14:20:55 +0000
Manifest this update: Tue 24 Mar 2026 14:20:54 +0000
Manifest next update: Tue 31 Mar 2026 14:20:54 +0000
Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: 0YzOtwyG4Qeo91vp9u1exCSedhAN1oMdSLLR20HgAos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13688 (0x3578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
Validity
Not Before: Mar 24 14:20:54 2026 GMT
Not After : Mar 31 14:20:54 2026 GMT
Subject: CN=69c29dc6-fc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:a8:c2:53:30:03:99:a4:4d:ed:11:d2:2f:
10:c6:7b:85:aa:42:36:49:43:86:99:98:60:46:80:
e0:5b:56:05:23:88:ea:ff:5f:74:7a:61:45:88:1a:
ef:21:4a:85:54:b1:33:5c:d0:63:fb:d4:0e:27:72:
74:a7:d9:be:cc:7a:00:68:f0:e8:b7:b3:48:ac:0d:
e2:e9:52:39:a5:3a:6f:4c:d8:00:e6:25:79:3c:64:
ab:27:b7:27:99:1b:0a:ff:e1:79:2b:44:4e:99:b7:
cd:74:f8:6d:7e:7c:ac:55:6b:9a:5e:dc:4a:b2:00:
58:1e:6a:9d:23:e4:f4:6a:24:f7:4a:68:4b:1f:3e:
04:91:4e:1f:8f:31:94:49:f3:3e:31:ad:d3:45:25:
71:63:d7:a4:d3:be:c1:1f:30:81:73:34:32:e8:84:
0e:74:f9:c0:42:15:ba:62:90:1b:83:8b:1f:bb:a5:
c6:c2:d9:cd:36:00:b6:87:ca:94:41:e9:4d:08:b3:
73:17:18:f9:76:2b:13:0c:14:18:5e:61:1a:b2:eb:
dd:17:30:a1:d4:65:7d:32:88:72:81:17:24:1a:14:
93:ee:e0:72:d9:75:c6:8b:02:ba:97:47:3e:ed:c6:
40:6d:6e:a0:22:c8:ca:a5:0b:2d:9a:5b:5b:73:be:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:41:0F:38:B2:64:72:BF:3B:71:CE:30:10:0C:BF:97:20:0F:03
X509v3 Authority Key Identifier:
keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:26:55:2b:d6:03:f7:67:8c:79:9a:59:9f:4c:e0:1d:6a:6b:
a4:2d:c8:94:9c:f8:fe:ea:89:40:67:bd:b0:8f:74:e9:5e:5e:
62:c4:c2:e0:58:4a:75:b0:6c:d2:62:01:98:08:a9:91:6a:76:
b6:30:a2:70:da:42:17:de:f4:f0:be:e8:c2:92:1c:72:3f:37:
dd:1d:81:3a:bc:4c:ef:e5:3e:32:29:4e:15:be:22:c7:b8:2c:
23:df:f4:c0:90:d0:69:ce:92:0f:ba:03:71:43:e7:04:e7:91:
08:87:18:9b:4f:b3:4a:35:90:80:70:c5:5b:c9:9a:da:91:a2:
38:6d:53:77:ca:e8:8a:f5:7a:c1:f9:3c:da:9b:dc:8a:c3:4f:
41:b2:2d:0f:46:3c:af:00:17:a6:9e:62:5b:96:0c:06:02:96:
0f:22:fa:b2:8d:a5:e3:ef:4b:83:b5:55:fb:f3:43:09:b4:de:
c4:00:f7:72:53:57:e2:94:9c:e8:00:4d:fa:f3:72:7f:f0:c3:
eb:9c:b1:89:97:75:dd:78:9a:5a:48:d6:c9:66:a3:ee:c8:9f:
54:9d:c3:a8:b6:24:7f:e8:93:96:2f:f3:d0:8d:90:d9:fb:08:
32:d0:7d:53:65:8f:ab:ef:14:23:94:ed:7c:d2:04:21:db:0d:
fd:28:dc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:37 2026 by rpki-client