
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
File: T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json)
Hash identifier: Yq6sHCrDG7ozZSFFEfUVfQCnV0ZEThouOFw2G+eyDXA=
Subject key identifier: FC:8A:BD:7C:F8:A8:79:58:F5:DB:2D:04:74:73:45:A2:65:C8:35:9A
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial: 03F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
Manifest number: 03CD
Signing time: Wed 25 Mar 2026 00:23:11 +0000
Manifest this update: Wed 25 Mar 2026 00:23:11 +0000
Manifest next update: Wed 01 Apr 2026 00:23:11 +0000
Files and hashes: 1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: gC35pDl8Q3oQXE2djxsDxwqqjsm8OTc+IHmcPKGiW2A=)
2: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: RE9x/m6mlo2vJzH32XxtuTi0P6Gpv9n9izH4NHfwP6Q=)
3: D9750E78F01111EFB1720645C4F9AE02.roa (hash: +LCGNb0OB4VM+Whp1njiiWEGwYQwA6NaUQIys14iy+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1015 (0x3f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Validity
Not Before: Mar 25 00:23:11 2026 GMT
Not After : Apr 1 00:23:11 2026 GMT
Subject: CN=69c32aef-6b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:a1:7a:3d:fc:6c:9d:98:19:07:f8:b6:e3:
d8:40:b6:ad:a5:4a:f0:52:c1:7b:3c:c3:67:0a:21:
40:85:2f:d4:aa:d6:94:19:bd:e2:0e:71:af:6d:5c:
4b:36:20:42:ac:28:1e:15:a4:74:3b:ce:b9:fd:87:
79:87:aa:11:68:5b:26:66:65:68:b5:cd:aa:99:dd:
b9:ef:bc:09:d0:bc:b6:e4:04:19:14:f1:09:ca:dd:
7b:74:a5:56:a3:bf:7f:b8:d8:be:03:06:df:34:8d:
b2:72:f1:13:ab:45:53:3f:7c:3f:f6:69:b4:88:76:
be:b9:22:82:22:4d:5e:64:91:81:95:26:5e:95:77:
46:35:a3:c2:ef:6e:2f:e2:a8:ae:ed:1d:61:4e:28:
1d:c3:c4:79:51:5c:a4:dd:27:0d:61:95:39:84:18:
bb:6c:95:e4:e7:0d:29:a1:0e:13:af:26:93:95:2e:
2f:67:fe:df:21:84:aa:cb:a3:58:0f:49:6b:56:65:
7e:48:9f:cc:6f:1e:8c:d3:2e:b5:cf:42:57:9c:19:
96:a5:da:59:ed:a4:8c:5f:e6:8d:92:34:bb:a9:39:
9d:74:53:aa:f3:68:63:1a:d5:3f:6e:2d:4c:56:f3:
0a:14:90:9d:e7:85:c9:6f:93:13:31:62:3f:f1:36:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8A:BD:7C:F8:A8:79:58:F5:DB:2D:04:74:73:45:A2:65:C8:35:9A
X509v3 Authority Key Identifier:
keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:11:8a:ce:1f:32:1e:b7:b5:da:fa:d1:da:f6:3f:16:0d:86:
b2:4c:26:d9:9d:bb:f5:3e:38:64:a6:14:c1:56:fd:20:0d:a8:
97:13:1c:d2:29:63:c5:0a:0a:b0:f1:b3:39:bf:b5:16:38:87:
05:27:54:59:9c:24:c4:b5:e2:02:90:6f:cd:82:54:ea:64:a5:
48:6b:45:ac:82:f8:6c:27:ec:e3:8b:5d:ac:e9:dc:ca:69:21:
b8:5b:78:2e:c6:b4:31:8e:5e:a8:5f:c6:14:c6:87:56:2d:e3:
d8:4c:20:24:ee:98:34:3e:80:6c:81:ac:6c:0f:0a:90:10:59:
03:24:05:24:94:51:29:ab:73:4b:b1:84:ec:ad:11:fa:b7:c9:
ab:f4:20:f8:ac:09:9e:c0:84:56:d6:dc:38:1a:25:34:ba:eb:
0c:97:22:90:72:34:a2:45:df:bd:7e:1e:d9:21:bc:c2:59:63:
c4:01:4f:cf:db:fa:8e:04:a1:8f:bd:42:4e:c5:5f:29:79:e9:
ec:b0:2b:d6:38:50:54:fb:c5:61:55:91:b8:96:99:83:65:03:
e5:ad:9a:7b:e6:e1:37:22:65:0e:74:ee:b0:aa:48:8a:49:be:
a8:83:db:46:21:42:de:18:ca:b2:8b:b8:7b:c5:66:a3:ee:1b:
1c:52:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:15 2026 by rpki-client