
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json)
Hash identifier: Rb+kQDZ3aEQaQD5XmgUsyZs3BU4ztA4Ff+9D2Oqg5oQ=
Subject key identifier: 89:49:40:69:70:B5:BF:66:37:B9:57:0C:33:15:EA:0D:66:F6:E6:B7
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
Manifest number: E4
Signing time: Wed 25 Mar 2026 05:45:49 +0000
Manifest this update: Wed 25 Mar 2026 05:45:48 +0000
Manifest next update: Wed 01 Apr 2026 05:45:48 +0000
Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: SVUoO+qex+mDmd5BaB6R/Yt076M/KWBlDXTN5jwlBPI=)
2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: h/SmLSS017YgGA7zYy4/07yQ0L9fFewbCCdQwU4sBFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Validity
Not Before: Mar 25 05:45:48 2026 GMT
Not After : Apr 1 05:45:48 2026 GMT
Subject: CN=69c3768d-fb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:72:7e:70:3a:47:b8:98:14:96:f6:16:04:
dd:d4:9f:33:dc:e4:17:82:54:29:ba:8f:21:58:6e:
83:36:a3:ec:a0:2f:11:b3:22:f7:5c:b6:4b:1a:06:
35:b5:7b:aa:4e:25:e2:e0:32:70:a6:82:d8:90:9b:
f7:5f:27:ba:e5:28:d2:1a:17:eb:01:aa:f2:d8:f2:
27:45:0a:96:bc:bc:19:bf:c0:ec:64:6b:5b:67:cc:
4e:c3:45:c2:63:a1:71:d9:ce:80:cb:8c:59:58:95:
fa:27:a2:69:f9:73:2b:c4:d7:b6:15:82:4a:b1:ff:
e0:b8:3a:f0:fb:d7:af:cf:87:b9:87:00:df:db:41:
ea:7d:df:4d:17:aa:58:3e:31:1d:ab:4c:98:49:eb:
6c:73:1d:db:05:8d:de:b9:80:04:bc:9b:81:d2:25:
ad:82:4d:10:ff:95:1e:78:76:c6:0d:49:76:ab:89:
cd:29:1d:b5:96:19:b2:3a:ea:f5:67:00:53:c9:36:
c2:93:26:a3:78:4c:5d:be:f1:68:b9:70:11:98:f9:
fc:e9:07:2a:f4:a9:60:c2:c8:ae:61:76:85:7a:e3:
b7:79:87:34:92:9b:9d:7a:88:4d:cd:a1:08:1b:6b:
cc:ec:b4:aa:1a:7a:ca:bc:ef:29:84:05:39:0a:06:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:40:69:70:B5:BF:66:37:B9:57:0C:33:15:EA:0D:66:F6:E6:B7
X509v3 Authority Key Identifier:
keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d6:f2:79:6a:a4:f3:9c:3e:9e:99:11:3f:9a:cf:8c:d1:b9:
fd:2c:67:43:3f:08:b4:a7:c6:ce:e5:91:5e:89:8f:16:e0:20:
f7:67:be:46:54:b5:19:81:74:7c:a3:db:aa:08:be:8e:2a:e3:
e6:11:8d:05:27:9e:ba:aa:d7:d1:83:80:be:e4:46:a6:f1:de:
95:43:0c:20:67:6e:ad:38:5a:f3:c9:56:eb:68:1d:d3:a7:ab:
68:54:02:19:81:16:68:86:f2:9b:0f:a0:87:14:40:56:7f:8f:
fd:9d:48:de:de:72:05:bd:cf:0c:10:0c:8e:3d:e8:10:3a:a3:
7c:5f:29:fb:21:b4:af:70:0c:a5:a8:c3:a2:bc:59:5e:62:a0:
9b:14:5a:53:e4:e2:31:2c:51:91:ac:8c:54:f1:b5:59:b2:e9:
b6:c8:aa:9e:e6:a4:b1:0a:99:ba:19:a4:4c:fe:74:64:13:51:
83:d8:28:e4:a1:6f:c2:16:3e:42:eb:0a:9e:fa:b8:29:a3:88:
8d:9f:a6:39:62:d0:8c:61:de:e4:82:cd:01:5f:d7:2b:18:fa:
3c:e5:ed:e9:85:47:ed:b3:56:64:b0:0b:33:9f:a9:13:97:cd:
fe:cd:b1:43:b0:76:25:c8:36:60:f7:2e:bf:c9:d3:10:5f:75:
11:ba:d5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:29 2026 by rpki-client