
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json)
Hash identifier: JnTWgQk47KHDmsCHnxYadSyIQguPS/J0lHbi+mFdK2A=
Subject key identifier: D7:03:ED:36:FC:9B:59:8A:C9:7D:91:4A:A2:23:E2:9D:68:A6:60:BC
Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1
Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1
Certificate serial: 045A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
Manifest number: 068E
Signing time: Thu 26 Mar 2026 23:57:54 +0000
Manifest this update: Thu 26 Mar 2026 23:57:53 +0000
Manifest next update: Thu 02 Apr 2026 23:57:53 +0000
Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: /mwZVSLyvxom1//1inz7ZeRWDQXDCfwIi8NHHLxj/A8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl
rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114 (0x45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1
Validity
Not Before: Mar 26 23:57:53 2026 GMT
Not After : Apr 2 23:57:53 2026 GMT
Subject: CN=69c5c802-3fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:dd:35:b1:45:0a:74:68:51:78:99:b2:79:
f7:89:87:26:21:71:7f:69:36:ab:81:14:0e:67:34:
2a:51:bb:03:87:f1:4c:42:5a:6d:6c:46:ad:ae:5b:
81:29:f3:7a:ad:ce:ca:41:26:52:3b:1d:cb:35:12:
4f:c2:0a:ee:3c:7b:ab:8f:2a:d6:3c:02:ee:df:e0:
80:40:aa:95:74:aa:b5:88:40:cf:28:4f:70:15:e7:
5b:49:cf:9f:f4:5e:df:f1:11:3e:dd:20:e2:bb:7d:
e8:8b:87:2b:cd:c3:8b:ca:60:69:3d:c2:f7:29:36:
c9:74:cd:aa:4d:6b:8c:6e:9d:bb:5b:ad:dc:b5:3d:
0f:3a:c3:58:cf:2d:c3:fe:7e:61:4a:92:cb:ed:aa:
c5:18:ff:27:d6:38:e6:c4:e8:fd:2f:01:ef:e0:b1:
41:6a:7b:c7:03:52:b5:58:4a:d9:5e:21:21:ea:63:
5a:a5:c5:b5:00:41:47:86:3c:59:9f:7c:42:5d:6f:
c8:27:f1:f6:cb:8d:d5:1d:e6:85:32:97:cf:88:52:
67:61:27:19:97:a8:88:cd:0b:0e:d1:04:55:d1:d2:
b0:26:bd:f0:43:70:30:88:f4:76:86:fb:cc:c4:4a:
75:a7:5c:e2:42:70:c0:92:e9:d2:6e:47:50:d8:13:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:03:ED:36:FC:9B:59:8A:C9:7D:91:4A:A2:23:E2:9D:68:A6:60:BC
X509v3 Authority Key Identifier:
keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:a3:c0:c5:e4:9a:59:46:5e:4a:b9:a0:05:0b:c6:47:75:c3:
75:fc:8a:50:6e:fc:8f:6a:4f:66:65:d0:b3:68:71:15:c6:49:
2e:8a:1d:30:fc:40:92:d6:cc:c6:8d:4a:ab:ce:1e:92:21:9b:
8f:d3:93:b7:a7:6f:9e:49:57:2a:2b:51:3a:a2:99:cf:ec:5d:
47:d5:4b:6b:b2:60:49:6d:92:c5:4c:0f:e5:3e:0f:06:b7:c4:
de:16:21:f4:05:5d:30:18:7a:73:75:4b:19:02:ee:af:54:4c:
d8:2c:bb:17:f4:0a:28:28:66:6e:fe:51:c5:b9:b1:53:73:ce:
07:84:c5:09:ad:81:08:aa:6e:ca:4c:c7:ec:07:4b:8f:df:89:
22:34:ed:4d:14:a9:62:6a:41:17:62:05:57:79:c9:77:fb:9d:
9f:fc:63:47:2a:0a:60:e1:f9:7a:7f:b3:7e:44:25:7b:d7:20:
75:17:64:c3:d1:4e:ef:8a:28:fc:ad:f7:f2:82:e5:b5:f3:13:
c6:cf:96:43:36:c9:af:60:13:f5:e5:9b:2f:15:22:a9:3e:df:
1c:c3:e2:b6:46:d2:64:41:b1:37:1f:58:78:8c:e8:bb:43:ce:
a7:68:97:36:f3:f4:e0:c2:a1:17:8c:0f:b5:f8:a6:62:73:59:
74:8d:ff:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:57 2026 by rpki-client