
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier: w1Kny/dyrUx3wW/OxJAMMONJ+vkWSNyibdPYbOmKTRQ=
Subject key identifier: 77:FC:37:A4:15:B8:E9:7E:33:FF:47:BD:BD:EA:44:0F:44:0A:09:FA
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial: 355C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number: 3549
Signing time: Tue 24 Mar 2026 14:23:37 +0000
Manifest this update: Tue 24 Mar 2026 14:23:37 +0000
Manifest next update: Tue 31 Mar 2026 14:23:37 +0000
Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: Dxp4K4d6QVdcjy671QCc7MgKVxbjlT0mZYbCWyGckFg=)
2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: B+l8TJuzuBfxkWLiU727TKBvSyJyZhyj59n2Kpa5X6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13660 (0x355c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Validity
Not Before: Mar 24 14:23:37 2026 GMT
Not After : Mar 31 14:23:37 2026 GMT
Subject: CN=69c29e69-38fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:34:76:16:ee:c9:f1:c2:6b:6b:40:9d:b9:
db:77:65:1a:bd:c1:f0:30:33:5a:0b:89:45:25:cd:
33:e2:6a:65:13:7d:38:1a:e2:1a:4c:31:8a:5d:2e:
1b:c0:7d:fe:5e:ed:cf:7b:44:a5:8b:ce:8d:0e:66:
21:ad:63:06:4f:34:07:9e:72:f5:46:dc:cf:95:70:
f1:5b:0f:b0:01:c2:85:da:dc:d9:84:3b:f6:ab:1c:
c3:e8:f1:bc:0f:30:ff:4f:70:4c:68:a2:72:26:70:
6e:62:b2:17:99:9d:03:24:5e:32:91:c2:2e:29:33:
26:b0:51:3e:07:df:e0:bb:20:bb:66:47:e7:52:7f:
7e:ba:7d:14:73:83:de:62:42:4f:b2:e9:0c:9b:5a:
fc:35:48:0c:3c:12:ab:23:76:87:0b:c3:6a:8f:7c:
4d:e6:3c:b7:e7:6c:9b:54:1b:07:77:02:1a:b4:6d:
e4:cc:59:97:b6:ff:55:0f:9e:a8:a5:71:f0:ed:e6:
df:81:e6:89:cf:2a:09:34:25:54:9a:db:7a:70:5e:
50:d0:d1:a0:09:9c:11:c9:af:f2:01:04:d3:f9:57:
8a:7f:16:47:af:41:3d:55:b7:ed:b7:ae:91:1b:0d:
1e:65:14:9b:b6:90:7f:bc:0d:4e:12:8d:61:f8:b3:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FC:37:A4:15:B8:E9:7E:33:FF:47:BD:BD:EA:44:0F:44:0A:09:FA
X509v3 Authority Key Identifier:
keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:57:a7:54:9a:b4:e4:bc:05:ef:0b:22:c0:11:08:9b:a9:7f:
69:50:e3:39:ad:d2:eb:d1:3c:72:ce:42:9c:ea:7f:fc:2f:3c:
11:bc:42:85:11:3f:2b:dc:05:69:90:4b:47:46:ee:91:5c:3c:
2a:a3:2b:19:8d:4c:d9:6d:2a:39:fa:b5:7a:ed:8d:12:72:d5:
41:18:fa:ce:fe:e8:8e:a1:d9:da:ce:20:6f:83:2b:8c:89:52:
8a:b1:8a:66:8a:ca:e0:56:e1:2b:16:5b:34:d8:67:13:4d:3e:
c6:cc:fa:5d:f9:52:ea:32:cc:6a:36:dc:77:e2:cf:03:d2:34:
87:36:03:ca:87:28:85:96:e9:1e:4d:6d:d6:95:da:01:b4:e7:
4c:72:4d:cc:09:e6:31:7b:28:99:a3:eb:05:50:f2:92:27:14:
b7:ce:ee:83:42:7e:78:31:61:4c:6a:31:a8:13:d3:5b:d2:da:
fe:9d:03:58:54:2b:8e:b1:af:30:47:8b:10:85:d0:ff:0f:6d:
b4:b4:83:b5:a1:ac:5e:ca:d7:64:64:8e:8f:09:a7:6e:8d:a5:
3c:2f:7d:b0:77:e2:67:06:5c:72:55:44:79:c9:fc:29:0a:85:
b9:2f:04:21:1e:26:08:47:da:1a:91:54:dd:7e:51:48:a1:11:
b2:4c:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:42 2026 by rpki-client