
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
File: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft (raw, json)
Hash identifier: 3i8jbaM5gWVYYXONDcHpgXDuOt69HeNQr/J8jmmWrrs=
Subject key identifier: 9E:EF:44:87:BA:7B:32:9A:83:FB:9E:D7:D2:60:8B:77:E1:6A:95:11
Authority key identifier: D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4
Certificate issuer: /CN=A91EB820/serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
Manifest number: 80
Signing time: Fri 27 Mar 2026 07:16:12 +0000
Manifest this update: Fri 27 Mar 2026 07:16:11 +0000
Manifest next update: Fri 03 Apr 2026 07:16:11 +0000
Files and hashes: 1: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl (hash: tzguE4fWNm2gwqfnrY27HcimrTdSN/rsfXIyvsBIa5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl
rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB820, serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4
Validity
Not Before: Mar 27 07:16:11 2026 GMT
Not After : Apr 3 07:16:11 2026 GMT
Subject: CN=69c62ebc-319a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:ae:0d:04:0f:75:63:b2:59:e0:7e:68:e5:
5e:2f:e7:2a:46:9a:c3:5f:37:b8:df:f3:cc:e0:e7:
6b:4a:e3:7a:0b:cf:7d:7a:fe:92:43:36:d0:08:76:
40:f1:e3:49:82:a3:37:54:e8:6d:f7:37:6e:02:41:
d3:e2:f3:99:b3:f8:ed:3f:9a:1a:3b:cb:8e:50:1e:
8b:9f:41:4d:7a:83:18:2d:6d:2a:73:1f:b6:60:57:
fb:a7:0c:83:44:5d:14:f1:fa:12:4c:25:0b:95:5d:
85:df:77:93:4a:62:09:9b:cd:17:f3:b8:d3:4b:f3:
da:fe:9f:0e:12:a4:8a:b2:5f:d5:8e:7d:0e:7b:c6:
9f:32:16:22:41:08:df:da:8e:df:8d:6f:b5:8b:81:
3c:fc:fc:1f:03:71:0c:54:34:f3:35:bc:8d:91:4e:
2a:22:15:a4:73:11:d9:b7:9b:ce:57:21:be:4d:df:
fc:02:0f:00:ac:2a:8d:6b:67:93:5f:aa:b9:61:7b:
93:44:f1:5e:62:c1:bd:e0:e0:1b:ac:a1:f0:cb:41:
bc:93:00:c3:08:87:97:02:42:9b:51:b6:35:fc:e4:
68:e2:5e:c2:05:d0:99:d4:68:c6:64:fb:22:21:a8:
09:84:9c:f3:9a:77:5b:75:13:dd:5c:fe:84:a2:c2:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:44:87:BA:7B:32:9A:83:FB:9E:D7:D2:60:8B:77:E1:6A:95:11
X509v3 Authority Key Identifier:
keyid:D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4b:6c:10:81:17:ba:e8:bd:fc:e4:b4:40:83:5b:c6:f5:cb:
8d:e7:2f:dd:1d:92:8d:8c:ab:01:98:4a:bb:23:aa:f0:8a:06:
45:a8:82:2b:fd:9b:fd:3e:31:9c:38:52:62:b4:82:c1:7a:26:
6e:9d:53:ef:59:a1:6f:26:cd:54:21:e3:11:93:36:2a:8e:5a:
b0:f4:e4:4f:ee:ed:5f:b9:f7:b6:a3:91:9e:53:4b:73:94:d1:
43:d6:0a:fa:d0:78:ad:b0:6c:1b:09:76:4a:4b:84:22:d3:71:
f6:53:b6:6a:47:f7:e2:f0:f5:e2:db:7b:be:93:2a:9d:61:c8:
a9:eb:2b:c6:c3:7e:1e:3d:44:38:4b:a1:09:b5:98:37:4f:92:
e6:f0:be:98:13:8b:48:d3:82:cc:d3:8b:4a:4b:f3:c0:9e:39:
09:4c:01:b6:d1:fd:da:c1:23:ea:45:99:f2:a3:ad:37:3a:65:
05:8e:cf:30:39:1c:64:e3:21:02:e1:f6:13:11:f3:2b:14:ec:
cd:a2:2b:ce:bf:9c:b2:d9:4d:77:2c:f0:be:99:60:d4:0c:84:
06:13:34:7f:56:04:c6:7a:50:7b:1a:65:73:09:54:4b:cd:be:
cf:86:7a:fa:82:be:1b:af:66:be:b7:da:c1:bd:b3:7f:6f:c5:
94:2e:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:08 2026 by rpki-client