
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json)
Hash identifier: 9rR3Rsc3u+x8+0RtEYRdzsv8ROtacTEva690woe4FtI=
Subject key identifier: 23:2D:0F:DD:05:4B:FC:60:38:9C:B5:04:0C:92:A7:1A:DF:82:24:E5
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
Manifest number: 0278
Signing time: Wed 25 Mar 2026 01:21:08 +0000
Manifest this update: Wed 25 Mar 2026 01:21:07 +0000
Manifest next update: Wed 01 Apr 2026 01:21:07 +0000
Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: fagt7aIUYil8ipo26fk7M9KZiOLDa/hBMDwSz19Ddx0=)
2: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: kCW/zIL2wkLpmG5huYuN17ehvqsC22ne+nIXeNNOpgI=)
3: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: FxqrozQ9bkCu/MslnOTZBZb3Iaskzn1o9qCly1GjApI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Validity
Not Before: Mar 25 01:21:07 2026 GMT
Not After : Apr 1 01:21:07 2026 GMT
Subject: CN=69c33884-9c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:d1:91:cc:51:7d:d2:12:5f:36:a4:94:86:
d5:44:8f:7e:f3:c6:87:00:e1:02:a9:c8:27:43:7e:
14:9b:b4:47:11:31:b9:a8:42:ed:3a:65:1e:14:ef:
79:91:85:41:fb:02:c6:30:dc:da:02:65:62:10:b3:
ef:8b:d6:8c:e1:41:46:af:2d:03:a4:cd:4f:7f:d5:
16:de:1f:2d:1e:40:f3:45:d4:2d:c5:0c:28:20:7f:
4e:e8:0c:10:d4:1f:b2:fb:98:50:4b:19:66:5e:33:
ac:ea:55:b6:e8:3e:ef:4e:dd:87:33:b9:d1:01:f2:
c1:9f:65:90:1b:a7:1e:fa:14:bd:d5:4b:e9:01:e6:
54:b2:2b:8a:be:92:9b:8e:0a:42:52:b0:59:e2:fa:
12:e3:ec:a9:10:7b:45:23:db:2a:c5:52:8f:3a:64:
dc:cf:35:8a:a9:88:90:3a:58:e7:03:fc:ba:cd:5f:
4a:5e:76:61:d9:4e:c1:51:bf:ad:d7:56:92:81:b7:
44:87:26:61:e4:b0:54:35:71:4d:c5:e5:6b:12:fd:
77:36:78:d1:1e:df:85:aa:94:1b:72:db:f7:7a:a7:
e6:87:f8:ea:6c:af:a1:d4:d1:72:8f:cd:20:80:5f:
2d:51:d4:2a:46:8d:09:e8:f7:2b:d4:b0:2c:e4:15:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2D:0F:DD:05:4B:FC:60:38:9C:B5:04:0C:92:A7:1A:DF:82:24:E5
X509v3 Authority Key Identifier:
keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dd:a2:28:26:b1:97:1f:c6:85:4e:d0:01:6f:8d:fd:48:bd:
7b:89:64:5b:fa:b9:55:0e:30:51:b2:01:7c:00:0a:14:48:97:
10:d1:89:2a:59:c1:c2:02:e7:10:ed:04:10:c1:71:eb:2c:b6:
27:80:97:0f:80:97:1d:1c:79:3b:f7:b3:be:f5:40:ec:36:ab:
19:7e:83:69:64:87:3d:b2:63:3d:4e:35:1c:67:e5:ac:a5:54:
64:37:1f:43:3c:d4:ae:7a:99:bf:67:52:61:83:ce:fc:e6:c3:
e1:f2:fe:d2:b9:91:e6:54:e6:26:36:58:61:81:fb:01:89:a4:
0c:55:f2:4b:da:4b:81:46:36:80:ef:7f:ed:de:e8:1a:24:f8:
e4:48:73:30:19:1d:a1:43:ad:2b:57:ec:74:08:94:6a:06:88:
15:31:b1:22:5c:f6:8f:63:30:ea:28:53:e9:dc:1b:2e:02:ff:
cd:00:e9:79:d3:1e:60:11:d5:e4:ff:5d:4a:5c:fc:71:29:2c:
ff:8e:2e:1f:a9:f7:86:f7:57:89:30:de:6f:83:0c:16:d8:41:
bd:6b:36:4c:52:cb:36:6b:19:db:02:71:f0:c2:04:71:3f:dc:
ee:ee:24:09:a5:d7:86:50:c8:01:59:2b:0f:13:f3:3f:a3:f3:
e2:73:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:29 2026 by rpki-client