
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
File: SDhChq65tguzQoR_K6dhL4TbQ7I.mft (raw, json)
Hash identifier: hBg4mXsvopgM7ImJ3RyKtsoivZMXwbMsUGHv7LV8DVI=
Subject key identifier: 38:94:55:0C:76:D7:8B:07:7C:30:57:82:FD:EC:3C:12:0F:7F:65:53
Authority key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
Certificate issuer: /CN=A91E6369/serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
Manifest number: 24
Signing time: Wed 25 Mar 2026 08:11:54 +0000
Manifest this update: Wed 25 Mar 2026 08:11:53 +0000
Manifest next update: Wed 01 Apr 2026 08:11:53 +0000
Files and hashes: 1: SDhChq65tguzQoR_K6dhL4TbQ7I.crl (hash: K5TNh0tc1xET+RVdTfeDYyCWaiGejsP3lTVP59CJ4Xs=)
2: 5CCD0A3C186B11F1A49ED6DE323D8C67.roa (hash: /T0qY7CsRtoFS+lodVUIgOp2mv9nPTD25O9ozCsvMyA=)
3: F85CEC2417BC11F1A40B39FC393D8C67.roa (hash: Lk3LIKj/GiDK4MdOByMKxwMl2tprlDsVLGGIsH3ZkXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Validity
Not Before: Mar 25 08:11:53 2026 GMT
Not After : Apr 1 08:11:53 2026 GMT
Subject: CN=69c398ca-b5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:60:92:b9:d5:ef:51:4d:73:48:e6:d4:30:
4d:24:cb:bc:cb:18:de:30:2d:ab:f2:1f:bb:1d:17:
57:54:9f:71:61:bc:02:0f:65:62:13:1b:5e:0c:d9:
99:d9:9c:d2:8f:43:2b:1c:24:7b:10:90:7e:dd:11:
33:df:83:6e:52:40:43:4d:94:ce:49:02:61:35:a2:
29:de:1e:9d:05:8c:72:34:09:3c:a1:02:44:b9:2d:
13:53:ce:7c:42:38:9e:00:f2:88:93:fb:13:2e:64:
dd:30:7f:dc:58:a9:73:41:f0:71:49:88:67:25:05:
6b:06:5b:58:1f:4f:ad:1c:91:4d:c3:c2:87:fc:ba:
bf:84:76:d4:bc:56:b4:9b:c1:d3:76:da:39:a1:4d:
ac:13:84:4e:9a:6b:09:a0:39:a5:e5:8a:13:65:4a:
bd:f5:ed:27:80:e6:f6:c4:dc:0b:0a:0a:29:67:54:
d7:a4:2c:99:83:af:82:72:38:3f:b9:7a:a4:3b:a8:
37:1f:6b:08:62:b7:b0:55:b1:d1:5c:7d:89:31:0e:
e1:b4:cd:69:ce:40:ae:96:d3:98:e9:61:27:7c:fc:
e2:cb:d4:9a:4e:75:25:82:67:8f:fe:75:ea:0d:06:
61:e4:f7:14:8b:33:26:48:27:b2:99:9c:e9:16:c4:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:55:0C:76:D7:8B:07:7C:30:57:82:FD:EC:3C:12:0F:7F:65:53
X509v3 Authority Key Identifier:
keyid:48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:2a:49:71:da:75:20:96:fb:4c:e2:1e:6b:ff:ad:f0:ae:b7:
25:ea:a9:ac:a0:7b:de:d4:6d:e0:52:9d:9f:6e:19:71:1f:ec:
09:7f:1d:8f:ff:75:29:14:5e:7e:67:e1:4f:fa:66:f0:b1:0c:
0c:2c:e5:54:ff:04:66:f8:09:e5:3c:68:45:53:4c:11:c1:ac:
93:bd:90:8b:72:b6:d0:48:82:a3:4d:86:bc:d8:8b:f5:11:38:
16:87:63:c2:cd:bd:2e:08:f5:f4:ac:0d:65:56:59:3f:96:41:
04:21:40:97:53:24:f0:f8:de:cb:0a:a0:8b:1e:ec:12:89:ab:
e2:0d:5d:2d:12:eb:40:e2:a7:75:eb:a9:81:20:00:15:15:a8:
0c:98:8c:37:02:54:39:b1:f9:15:38:8a:fc:cb:bd:fe:15:6d:
93:0a:33:60:b7:20:c9:7c:d5:14:2a:7e:b2:12:76:91:51:9f:
9d:06:81:d8:50:68:be:cb:19:8e:bd:af:55:ca:c6:18:51:e2:
5f:bb:e1:3b:82:c7:c4:41:49:f4:7d:5c:10:1a:3f:bd:10:0d:
db:65:be:d8:32:70:a2:25:99:0f:8c:02:c8:f7:e7:99:21:7e:
6f:10:8f:6b:bd:74:65:bd:47:7b:00:89:eb:44:d3:b8:19:49:
c6:c0:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:03:08 2026 by rpki-client