
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier: V0r0SxZ5JS2zR9P+0hg2fJBwS5QIFvKIf3ltCgQN5Cs=
Subject key identifier: F2:EA:DF:95:A9:AC:EA:E6:11:2B:44:7F:51:5B:86:7B:36:0E:C1:C8
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial: 07E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number: 07D1
Signing time: Tue 24 Mar 2026 21:05:32 +0000
Manifest this update: Tue 24 Mar 2026 21:05:32 +0000
Manifest next update: Tue 31 Mar 2026 21:05:32 +0000
Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: 90u4yqFZfQMfgYYt9h+m5XVU3tlpdAwvb0w+kw7ymzs=)
2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: CTWOd8KheR3keIlbrNxRArJRmdo8CaaRry2+oBpk3yU=)
3: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: f5hhJw4iBxxWOy12bw08irJ3HIRgdS2JYxiH6LKMToo=)
4: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: QBJiXn1vmmVOKa4Qn9zvdWt1huYz5jaSfTVbrGzUrJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022 (0x7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Validity
Not Before: Mar 24 21:05:32 2026 GMT
Not After : Mar 31 21:05:32 2026 GMT
Subject: CN=69c2fc9c-a4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:ae:3e:8c:50:c7:a0:ca:0f:9f:a7:2e:c1:
1f:3c:e0:b1:1c:04:ad:f5:e6:1c:64:1e:3c:df:5d:
b0:8b:a2:75:c6:66:f6:29:97:d9:ac:3b:63:e8:2a:
c6:92:7f:8f:c6:02:c4:f6:d5:2b:7f:54:d1:56:15:
be:c4:5c:e2:ff:0c:0c:41:8e:2c:d5:52:6d:03:72:
50:30:b0:63:01:82:a1:a5:e7:c5:24:1f:e3:07:a0:
fb:85:56:ec:7b:6e:e1:ad:b0:78:75:3e:a3:d8:3e:
ae:a6:16:10:e2:39:52:13:5f:a1:64:b4:72:f1:09:
fa:69:25:3a:45:a3:61:e0:33:9f:b6:cd:36:3a:22:
ed:00:74:c2:24:38:fe:dc:1b:ff:aa:00:7d:08:e2:
f9:a0:d3:7d:e9:f2:a3:df:e5:42:f6:68:2e:17:6c:
be:9d:38:ef:aa:74:5c:5f:d0:3d:d8:db:2f:24:54:
99:67:3f:4c:a0:5b:35:6c:53:02:aa:77:3f:f1:bd:
e9:6f:96:70:22:e9:6b:22:78:c8:c2:ee:b7:8b:a7:
c0:bf:df:f8:2f:b1:80:2f:73:4e:15:1c:a7:a4:88:
0b:5c:5a:80:ff:7c:8d:7e:e1:fd:d5:c9:d6:0d:b1:
eb:6c:e3:e6:1f:5f:de:fe:66:d4:ce:8f:1c:46:4d:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EA:DF:95:A9:AC:EA:E6:11:2B:44:7F:51:5B:86:7B:36:0E:C1:C8
X509v3 Authority Key Identifier:
keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:89:e8:31:7b:06:2e:61:9b:d1:84:07:2c:2b:ff:22:29:0d:
2a:e6:b3:41:f5:89:93:b8:14:94:75:6b:b0:65:f8:73:de:8e:
d1:4c:ad:af:fe:ed:4e:f8:c1:8d:b7:ae:51:6b:90:70:df:16:
4a:58:55:10:b1:69:83:d4:88:cc:24:ac:8b:bb:8c:3f:13:0f:
da:93:23:99:26:dd:e7:b7:d5:8c:84:5a:d7:73:e5:bf:81:bb:
5f:ec:e6:5d:06:6d:1a:9a:fb:c4:9e:48:c9:c4:e7:34:5c:aa:
07:45:cf:0b:5a:6e:34:24:f8:17:6a:7a:56:ae:d3:32:c9:41:
2c:c7:fe:ae:48:45:a2:42:31:61:26:59:d3:32:b0:d9:d0:c1:
08:02:73:15:73:99:0b:6e:85:5f:af:cc:a1:ee:27:4d:3f:fe:
7a:eb:ad:16:70:39:c1:2d:b2:7a:5a:b7:e4:ad:84:a9:7b:d7:
e2:0c:88:df:b6:c3:9f:c4:e9:6f:1b:44:37:eb:03:19:1b:fc:
77:f1:b5:f8:57:65:ee:68:60:a0:21:0c:8c:e7:e5:68:03:5f:
e7:de:03:33:22:ae:3b:2a:c1:25:b7:8b:9f:99:c2:31:51:a7:
f7:01:7f:b4:99:55:5f:90:53:e7:58:60:06:cc:48:07:06:ca:
de:31:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:52 2026 by rpki-client