
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
File: 83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json)
Hash identifier: nt4G0WWl86tWISwymR9C928QKkfTYn+aVwYEydqWMCg=
Subject key identifier: 96:28:08:34:21:59:3E:17:03:6C:BE:19:D5:B5:6A:E7:02:81:5B:FB
Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Certificate serial: 0A23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
Manifest number: 0A18
Signing time: Tue 24 Mar 2026 19:35:03 +0000
Manifest this update: Tue 24 Mar 2026 19:35:02 +0000
Manifest next update: Tue 31 Mar 2026 19:35:02 +0000
Files and hashes: 1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: 7Tg6mMAlf2jwzOQXc80kbyHoe7PUaieJ74puiKK8xg8=)
2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: ouYBwpfCXuAbXe6I0vrvzKSbU872/FUx3W+kR5PDwWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2595 (0xa23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Validity
Not Before: Mar 24 19:35:02 2026 GMT
Not After : Mar 31 19:35:02 2026 GMT
Subject: CN=69c2e767-d504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6c:65:c1:eb:58:6e:bd:00:fa:a0:9f:38:b4:
26:b8:3f:18:8e:ce:f1:fc:47:b1:92:98:13:54:39:
6e:2b:0a:99:f7:8d:fe:c8:46:79:d3:bd:3b:a3:9a:
52:c5:37:54:de:d0:5d:64:21:3e:3b:e7:20:74:3f:
c5:98:3f:2d:4c:21:6f:aa:12:9f:f7:81:d6:d3:78:
ec:5e:1a:b0:a2:d4:13:76:c1:6b:81:52:a6:74:3a:
55:6e:91:ab:42:65:c9:34:c7:d6:d8:b5:b6:30:fb:
c3:f0:e6:71:59:e8:1d:d4:c5:b0:7a:3d:ca:06:31:
6a:e6:19:5a:2d:53:a8:22:6b:85:86:11:20:84:54:
c5:7a:1a:45:39:2b:ab:93:66:39:13:7b:42:76:49:
45:d3:1d:01:c2:d0:a9:21:ca:67:95:ce:ad:26:69:
9b:ae:b6:05:40:53:9c:30:73:fe:a3:ef:c8:fd:81:
f1:2a:e0:3d:f9:0a:33:dd:ce:b9:61:6e:20:e8:3a:
5c:f6:c1:f2:b3:3c:ba:c7:73:5b:7d:fc:ce:2c:94:
e5:89:a8:97:b4:88:9f:ab:82:6e:e8:36:61:41:24:
81:51:0d:01:cc:dd:44:6b:eb:dc:92:0e:cb:3c:ba:
56:2b:c7:8e:59:7f:12:87:41:1b:fe:12:9c:bd:c4:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:28:08:34:21:59:3E:17:03:6C:BE:19:D5:B5:6A:E7:02:81:5B:FB
X509v3 Authority Key Identifier:
keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:44:b2:bd:e1:15:b5:75:a4:1a:b7:af:bc:af:8c:ae:d5:c8:
31:a6:0a:dd:ae:89:e2:19:d0:87:3f:f0:34:b9:9a:88:60:a4:
65:67:b0:d2:ce:59:5a:8c:48:72:f2:f2:b8:db:72:3f:18:1b:
c7:82:b3:86:64:11:e1:65:f8:dd:50:e5:bc:a9:69:b0:29:bb:
df:a5:09:d7:a9:36:02:4b:c2:04:9d:6e:f9:c0:b6:1b:11:3a:
28:30:cb:77:1c:3e:51:d6:59:ab:01:88:25:50:e7:82:6f:03:
31:25:89:ec:e9:64:df:2f:63:88:25:2d:31:ce:40:6d:2b:a1:
41:d8:8a:f2:19:ca:aa:f9:30:e6:de:22:bb:f3:88:1e:19:be:
f6:06:7f:c5:1b:5e:93:32:5c:35:8c:51:95:96:c5:5c:f7:db:
a2:f8:4b:ee:20:01:f1:10:70:35:89:eb:cd:b1:4c:23:77:1b:
a3:e3:92:d1:54:2f:8a:60:41:22:cc:12:9b:18:70:b6:90:25:
15:fa:8e:57:4b:60:fc:d3:62:0c:22:ba:b8:b0:b1:ca:cc:cb:
f4:c6:b3:d7:66:b4:54:8e:dc:02:53:f6:8a:1a:10:5a:e3:b5:
b5:16:82:f9:c9:32:a8:38:9d:8b:5f:8d:5c:18:20:d0:fa:2d:
c8:bd:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:30:50 2026 by rpki-client