
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
File: 788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json)
Hash identifier: EsSokGHcwBzVEsWFiptRfgVCkCzwETj42foen8he4xU=
Subject key identifier: 6F:62:76:A8:A7:4A:C9:47:47:EA:41:D5:64:21:81:D6:49:6B:06:D1
Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04
Certificate issuer: /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804
Certificate serial: 0DEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
Manifest number: 0DE6
Signing time: Tue 24 Mar 2026 17:43:21 +0000
Manifest this update: Tue 24 Mar 2026 17:43:21 +0000
Manifest next update: Tue 31 Mar 2026 17:43:21 +0000
Files and hashes: 1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: Vv0sVewkBb5LEXo5OO6uk9xfBshaT9k4CINCoAW5+VA=)
2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: eVq60p4Ks0G6yiB97mD631D9+9qg1L6YfgKt4510Uec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl
rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3567 (0xdef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB9C0, serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804
Validity
Not Before: Mar 24 17:43:21 2026 GMT
Not After : Mar 31 17:43:21 2026 GMT
Subject: CN=69c2cd39-7a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:13:64:b9:67:50:5a:b2:6e:be:26:9e:e2:
29:3d:d0:46:f6:28:d0:c6:25:5b:e2:49:e1:78:8d:
b6:92:dc:a2:11:9e:35:0c:a1:9a:a8:dc:d1:2b:82:
87:67:7b:ca:e4:f1:8b:4a:c5:84:4f:2b:33:e5:08:
3d:4e:5c:19:da:73:69:d7:cc:82:1a:a6:ec:9d:b6:
5d:8f:4a:b0:86:48:8f:cb:f8:41:2a:c7:ac:3f:36:
96:2c:1b:e7:95:dd:b4:fe:0d:7d:ff:28:3c:1a:f3:
78:3e:ae:b6:07:5f:28:69:33:a6:a8:7d:1b:84:03:
b3:94:4b:75:54:2c:db:e8:11:7a:15:74:87:f5:b1:
d6:67:96:21:e1:fc:dd:3e:1f:d8:5e:5e:ad:f3:8a:
20:db:d4:73:77:56:9d:57:d0:a5:8c:04:e1:23:40:
cb:10:ce:36:f4:89:52:ec:34:86:c9:12:8e:5b:37:
ea:73:dd:d8:f0:9c:7c:9b:34:4f:76:11:21:26:a4:
48:b5:6f:04:ab:2c:83:22:26:b8:2f:be:96:ea:db:
3d:1a:0a:db:e5:18:00:85:51:d5:8f:39:a7:7e:40:
1f:ab:2d:ca:bc:61:07:b7:50:39:a5:b3:28:b9:39:
f6:1a:0f:1f:20:c0:e7:6c:a2:bb:2b:ca:9d:b1:64:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:62:76:A8:A7:4A:C9:47:47:EA:41:D5:64:21:81:D6:49:6B:06:D1
X509v3 Authority Key Identifier:
keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3c:d3:a0:89:e0:58:8e:56:1c:4f:9e:82:06:09:a8:17:bf:
f8:30:30:8d:28:2a:56:f9:32:c8:a0:75:0a:8e:da:b0:75:62:
c9:a7:93:bc:e6:4d:a2:93:ef:6f:9e:c9:67:f8:b4:79:9a:66:
af:b4:27:90:29:b3:e6:59:48:45:af:b3:6a:5f:8e:3c:a4:ca:
f6:53:99:e5:45:f9:ca:33:4c:3c:1c:ad:93:bc:37:06:f3:ee:
28:b3:f8:41:05:b9:c6:88:e3:4f:b9:02:13:a5:34:5e:3e:e6:
85:3f:be:1f:06:82:82:ea:d7:c4:3f:51:b3:4f:e7:0d:c5:df:
b1:ce:a0:10:04:da:0c:26:2e:1c:17:5b:a5:8f:e2:16:eb:0c:
16:66:24:12:6d:6b:f8:e8:40:3e:0b:7d:34:74:0d:11:aa:dd:
18:3d:26:0e:34:83:7e:2d:91:06:26:4d:a0:75:e4:e2:bf:74:
4e:55:9b:57:cb:d7:6b:f1:77:59:d5:df:58:03:49:8e:38:6c:
8d:ba:1d:37:a1:dd:63:75:24:d8:a6:2c:43:7c:f5:7a:4e:07:
87:cf:1d:5b:a1:74:4e:5e:0c:a4:c2:fa:2c:88:87:13:5f:c8:
20:58:53:2e:aa:20:d8:34:ba:8a:75:52:b6:3f:7b:7a:2c:7c:
b3:0f:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:13 2026 by rpki-client