
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
File: caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json)
Hash identifier: m2j/qoLRGTunRJGcS1oZdKa0KCYLpqIAtd4MXz6padQ=
Subject key identifier: 33:5D:22:A4:7A:00:1D:40:89:1A:7A:07:A2:C0:04:45:2F:05:0D:E3
Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
Manifest number: 44
Signing time: Wed 25 Mar 2026 07:33:12 +0000
Manifest this update: Wed 25 Mar 2026 07:33:11 +0000
Manifest next update: Wed 01 Apr 2026 07:33:11 +0000
Files and hashes: 1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: Nbkx8GOK5udn6JCStw6+846FvEHsNVnYHmqy2/mdKDI=)
2: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: 77Ti4coJG6upOfWGSXiHZBgxkM1mBFKcvk6A/BW0GOQ=)
3: 0853E998C45711F080167D38C4F9AE02.roa (hash: q06BkXWxrAKL8dfnFJAQ0hKBleWRtfFz0FU/k9ATOTo=)
4: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: MKqJq2FumoKTrTwmyrH8ChMilgYTt/EL/h7r2rH2ApY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Validity
Not Before: Mar 25 07:33:11 2026 GMT
Not After : Apr 1 07:33:11 2026 GMT
Subject: CN=69c38fb8-26f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:3d:6b:16:de:30:1e:52:70:05:be:49:b9:
33:f1:93:e1:3f:f9:39:1d:cc:56:5c:5a:ba:7b:74:
02:44:4a:f0:ee:dd:c6:1a:f6:4a:e5:af:1f:7f:1d:
41:03:e4:11:f4:67:c9:29:e1:e0:25:f8:dd:eb:c5:
c3:96:b7:f5:ab:0d:59:1c:48:a5:cb:55:47:7f:6d:
11:3d:f3:a2:1d:23:cc:71:b5:ad:46:b0:4c:65:92:
92:d7:de:a2:56:df:ab:ba:e6:28:23:92:fd:15:ce:
58:cf:dd:d9:92:ec:0f:10:1f:eb:23:d1:a2:0e:db:
90:32:76:84:20:b6:de:17:05:fa:18:56:52:0a:93:
d0:8e:22:2e:68:22:d9:21:6b:64:2b:9c:63:9b:61:
6a:52:8a:b1:d9:98:19:f3:2c:95:39:0f:a6:1a:4b:
7a:d8:41:ec:db:7d:29:38:20:e8:8d:db:3b:12:75:
89:4e:8a:b8:15:4e:01:42:6a:b2:89:31:90:40:3e:
07:c9:6f:db:87:67:0c:4c:d4:fc:8e:93:63:ce:a5:
f2:69:0a:b4:14:5c:6a:18:10:bf:e4:70:22:a7:97:
d9:5f:3c:6e:cb:c5:f8:55:3b:f3:ca:e2:a9:a7:2b:
dd:31:06:0d:2c:7c:15:f0:f1:48:84:12:91:02:19:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:22:A4:7A:00:1D:40:89:1A:7A:07:A2:C0:04:45:2F:05:0D:E3
X509v3 Authority Key Identifier:
keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:1f:66:6c:8c:ea:4e:6d:f6:bd:82:5f:0c:74:a9:25:b4:fd:
9a:2f:19:93:6c:9b:cb:69:99:4a:2a:32:1f:00:42:30:c3:a4:
5e:ca:fb:9d:4c:7c:af:b9:7e:3f:84:e1:fb:2c:24:b6:12:e9:
71:ab:fb:51:0f:2e:d3:b4:77:23:09:bd:e8:70:a5:0f:46:b7:
38:b4:2c:5d:2c:98:b7:19:ea:09:b9:97:9b:d6:15:90:72:11:
71:3f:ce:32:58:be:ac:69:ed:f8:bc:56:c8:8f:b9:c5:d3:16:
14:36:64:53:1f:a7:fa:1c:aa:c0:d6:77:ec:cf:ae:8f:ec:8d:
18:7c:ea:21:3f:e0:15:e5:6a:2f:20:ad:a4:7f:e1:1e:ff:3a:
c9:be:9d:02:18:68:93:11:80:c9:76:26:be:89:28:89:df:31:
ab:36:79:76:9e:6f:27:7b:b7:58:75:c6:b8:4d:d8:bf:c1:5e:
b5:4f:99:c9:4d:0d:fb:b1:c0:56:4d:a3:69:26:c0:28:08:53:
f4:fc:39:95:5d:f6:1e:f8:8b:48:5b:d6:c3:17:65:38:a3:23:
77:b6:40:06:6c:33:fc:68:8f:2e:79:83:24:4a:dd:5a:8f:38:
16:ed:68:de:38:10:af:d1:64:15:d7:ac:32:a3:31:33:7c:b7:
22:5f:34:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:41 2026 by rpki-client