
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
File: maB2Nu64AHCDMDGWpYxBvsxoj4A.mft (raw, json)
Hash identifier: AjiPA/A0RwI+wkoHYHp6BZLAuV5qa856/AtcSaSP0t4=
Subject key identifier: 03:39:B9:C2:A9:87:BB:F5:19:04:47:3A:22:45:E5:3F:E4:D7:0E:52
Authority key identifier: 99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80
Certificate issuer: /CN=A91EEC3B/serialNumber=99A07636EEB8007083303196A58C41BECC688F80
Certificate serial: 0C75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
Manifest number: 2E1E
Signing time: Thu 26 Mar 2026 16:22:21 +0000
Manifest this update: Thu 26 Mar 2026 16:22:20 +0000
Manifest next update: Thu 02 Apr 2026 16:22:20 +0000
Files and hashes: 1: maB2Nu64AHCDMDGWpYxBvsxoj4A.crl (hash: 81XGz3ROsSZ/yPLLZDFHESBmP7vDBmZtAFkG4GWGHKw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl
rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3189 (0xc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEC3B, serialNumber=99A07636EEB8007083303196A58C41BECC688F80
Validity
Not Before: Mar 26 16:22:20 2026 GMT
Not After : Apr 2 16:22:20 2026 GMT
Subject: CN=69c55d3c-ccd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:be:f4:16:65:34:04:64:35:1d:e7:19:9a:
60:91:b8:45:20:e3:00:41:42:ad:ce:ea:dd:c4:39:
ba:6b:1c:78:06:98:d4:a6:cf:22:9e:75:27:24:09:
12:0b:69:3a:2a:c3:af:eb:0b:44:a4:00:2b:a3:19:
a1:05:ec:98:34:c5:dd:4e:d1:86:3d:63:30:5a:73:
20:37:dd:00:6b:dc:3b:00:6c:0d:18:38:58:74:9a:
ed:47:fe:89:a9:43:6d:ab:d9:e2:bb:d1:82:40:ab:
b4:55:a9:81:f3:de:2f:90:e9:04:1e:3a:9c:dd:82:
7c:d1:66:0d:27:6e:a1:a0:cf:51:ea:c3:96:ed:6a:
1e:bc:d7:b3:4a:e1:9e:74:ce:4c:75:a5:eb:51:b2:
2e:f6:a1:e9:6b:e9:64:fc:09:14:e5:a1:f1:8f:07:
65:e3:1a:4c:24:36:0b:23:dd:4a:d3:9c:af:a8:b2:
76:64:79:04:ca:2f:d2:c0:a2:a7:8c:08:99:ce:1c:
d9:8f:3e:0d:ea:29:86:0d:31:59:11:e7:d5:9d:36:
73:5f:cf:5e:a4:ea:13:3b:49:90:52:4f:61:4a:e6:
07:24:f0:d8:18:c6:40:09:f5:68:0e:52:8f:5f:85:
6c:66:e8:f2:6d:18:b8:e7:fb:0e:02:58:e0:96:85:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:39:B9:C2:A9:87:BB:F5:19:04:47:3A:22:45:E5:3F:E4:D7:0E:52
X509v3 Authority Key Identifier:
keyid:99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:8c:90:d7:fe:2b:c3:28:a6:35:97:83:e3:38:19:c3:fa:e4:
a7:e3:57:85:dc:c4:af:fe:58:ce:d8:48:28:97:a8:bc:71:9b:
d1:b8:9a:49:46:90:a9:0d:46:b8:9a:44:01:1b:95:54:60:ef:
61:94:36:84:6c:bd:28:58:c5:b6:a1:b8:b4:f1:b2:d8:3e:01:
0c:87:83:95:5e:67:c0:d0:d8:00:7a:47:b6:42:64:20:ae:bb:
5d:c3:36:0b:44:a3:fd:64:15:60:8a:93:93:4f:ea:6e:c9:9a:
68:9c:39:6d:13:78:a3:5a:92:6f:ab:2a:aa:85:55:c5:d3:0e:
88:9d:ed:4b:ab:b5:49:d2:d5:ea:30:ea:30:d7:c6:03:c8:c2:
95:6f:38:99:09:c7:1f:4a:87:2c:31:2e:60:aa:72:52:46:18:
19:ab:6f:d5:ce:5c:72:00:bb:ac:fe:fe:72:6f:66:b6:f0:3d:
b8:36:e5:44:58:96:8c:a7:f2:b7:ee:88:7d:23:f8:f1:5e:de:
38:0e:43:b6:08:83:46:35:8a:14:5e:87:87:d2:c8:00:7a:50:
97:85:2f:13:af:4a:72:6d:c8:20:d8:d1:f3:de:86:c9:ae:83:
d0:c8:4e:21:22:f9:d4:9e:e0:39:82:c3:40:cb:4a:4a:c7:86:
52:5e:bb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:24 2026 by rpki-client