
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
File: mV1wqX9WsuAAuspuykNz5iB7uY0.mft (raw, json)
Hash identifier: 2ijjW0kdxckTk/es6OVmcK7gxp5xva4yZtOP3YMwN8M=
Subject key identifier: B7:99:4C:26:14:7B:78:07:78:78:64:BE:01:86:C9:2D:75:E0:0F:CE
Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
Certificate issuer: /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
Manifest number: 2E
Signing time: Wed 25 Mar 2026 07:54:30 +0000
Manifest this update: Wed 25 Mar 2026 07:54:29 +0000
Manifest next update: Wed 01 Apr 2026 07:54:29 +0000
Files and hashes: 1: mV1wqX9WsuAAuspuykNz5iB7uY0.crl (hash: W7Zr7dqNQKXno50vv8Eb9C8tr9DR04J34k3K8oellIQ=)
2: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (hash: 18c0IjqREvvCbFh1OonuDqpoKVFbN0WBr8JimtNfp4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Validity
Not Before: Mar 25 07:54:29 2026 GMT
Not After : Apr 1 07:54:29 2026 GMT
Subject: CN=69c394b6-7125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:f1:02:fd:64:bf:a3:f9:7e:6b:e9:cf:94:
c2:ad:b2:67:8a:15:c6:4c:59:0b:aa:59:11:91:6a:
fc:e7:b4:17:da:ab:d3:3f:1e:db:09:e8:b4:15:f2:
d6:f8:9b:0e:0e:52:71:d5:74:59:cb:d7:8c:a1:3e:
3c:5c:0f:c3:42:7d:51:8e:84:3a:75:88:71:be:30:
19:8e:3f:88:10:1f:be:dd:07:0e:cc:98:9d:b4:95:
25:a1:f4:20:bc:25:ed:75:ab:f1:21:35:ee:22:a3:
bb:37:0f:81:1a:9a:56:46:14:a5:e8:5c:6b:75:72:
c0:39:4c:3a:54:56:da:c4:8a:ff:08:cc:f1:63:3a:
6d:70:7e:4b:11:a6:e7:0d:39:18:73:dc:eb:7f:7d:
94:82:84:b9:9b:17:c4:45:db:7d:c7:7c:9d:d5:28:
e5:99:b3:52:8f:0e:a7:08:d0:62:13:7b:15:de:d8:
db:8d:66:b6:cb:fb:57:86:96:e4:6d:17:97:ba:39:
74:9c:68:85:31:b7:20:96:38:5a:89:5d:99:7c:32:
f3:81:10:c1:29:c5:00:07:d5:74:95:ed:79:88:03:
fb:3f:90:5e:27:17:af:3e:3b:77:58:06:d7:ce:f0:
4a:9f:1a:26:aa:b9:4c:b2:62:20:d5:86:24:6e:98:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:4C:26:14:7B:78:07:78:78:64:BE:01:86:C9:2D:75:E0:0F:CE
X509v3 Authority Key Identifier:
keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4e:5a:c5:54:c5:62:c9:77:00:ae:01:98:90:8c:ea:81:8b:
e3:36:f5:b7:97:76:ec:75:91:d0:a5:e3:89:e6:37:ae:6d:9b:
a3:25:92:c5:8f:29:25:60:4b:3a:d4:8e:87:03:fe:a0:ce:3b:
75:9d:3d:91:19:6f:86:54:f0:30:07:e8:ee:af:a3:a6:e3:32:
aa:a8:d3:14:f4:0d:0e:c1:83:a4:e5:a2:f6:92:61:d8:f9:4e:
af:ae:82:4b:91:eb:cc:d3:c4:dd:68:93:90:b4:01:6f:be:e7:
c5:55:2d:57:40:f6:67:d6:2e:94:5a:60:db:9e:f9:0f:a4:b3:
b6:03:ea:03:f4:64:d4:44:f8:fa:24:23:c9:b3:93:00:97:db:
06:2b:ea:53:1e:3c:ad:cf:18:3a:51:ad:a7:d0:80:e8:3c:99:
97:76:0f:d6:29:9f:0c:ea:46:a5:98:98:0c:9e:2d:fb:22:9c:
e4:35:9c:ee:92:d6:2d:c9:c9:08:1a:30:a3:19:d0:fc:c4:09:
be:f9:e0:be:94:bb:58:89:46:f9:13:32:d5:61:20:17:d8:f4:
d9:1a:23:4f:20:cd:3b:69:77:ab:65:84:27:86:87:e9:88:24:
b9:77:db:47:35:93:02:22:35:fe:2b:9d:2a:f9:27:90:b2:fa:
5b:44:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:15:51 2026 by rpki-client