
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json)
Hash identifier: YrG1hx3i1wTKebY7RgWF7a3UQXul6qnWcLosDeQIgTI=
Subject key identifier: 39:11:BE:E2:D3:EA:8A:28:31:C9:84:FC:40:5B:67:A7:5A:A6:4E:56
Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03
Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
Manifest number: 0174
Signing time: Wed 25 Mar 2026 03:57:42 +0000
Manifest this update: Wed 25 Mar 2026 03:57:41 +0000
Manifest next update: Wed 01 Apr 2026 03:57:41 +0000
Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: RqUrxMAmTOCzhc7bJH3niuAL2NY3qfE4fNaYCEZiK5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl
rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989, serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203
Validity
Not Before: Mar 25 03:57:41 2026 GMT
Not After : Apr 1 03:57:41 2026 GMT
Subject: CN=69c35d35-40ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:e8:d0:b0:41:a7:10:19:7b:4e:a9:06:d9:
3d:a4:de:d1:f3:c2:c5:90:6a:a7:88:1a:7f:1e:ba:
11:7f:39:a0:1d:48:ce:27:53:31:de:92:80:d1:0e:
4e:a1:d0:02:ce:74:5e:f9:0b:a6:cb:dc:d9:ba:85:
90:89:00:52:48:e1:82:b0:b1:7e:0e:3a:3e:5c:1d:
6d:33:ba:4f:20:c8:24:30:14:e1:c1:86:83:93:cf:
c1:6f:8b:53:92:11:a1:a7:39:e3:9a:b6:7d:f8:ae:
ff:8e:14:30:4e:da:c2:89:fc:b8:7e:e4:65:59:84:
bf:3e:7c:3b:1d:50:58:38:57:a8:b3:f1:a1:a5:0d:
b9:3d:7c:46:c8:08:1b:4c:21:fd:9e:aa:d6:99:35:
38:27:f3:bb:da:ac:f8:50:68:26:38:60:7b:ec:71:
d5:18:df:ad:7e:59:a4:e2:b2:2d:fc:0d:cf:06:2e:
36:6f:f2:24:21:2b:48:9d:2e:03:47:23:76:bc:2d:
03:17:98:0b:4f:e5:0f:4f:77:b7:3b:f1:d7:b7:a1:
91:77:93:03:6d:d1:64:c8:dc:f6:8b:06:d5:21:12:
a6:3b:21:eb:ec:eb:66:37:03:f4:73:97:e0:9b:0c:
91:72:4d:fa:c8:f7:28:72:64:a4:09:a8:e3:54:e2:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:11:BE:E2:D3:EA:8A:28:31:C9:84:FC:40:5B:67:A7:5A:A6:4E:56
X509v3 Authority Key Identifier:
keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:7f:6f:d4:7a:85:4a:92:68:ba:e8:da:aa:48:ed:eb:b6:db:
15:9e:7b:fe:bb:01:8c:5b:50:01:70:04:2b:8e:2f:b9:44:75:
c5:71:30:a6:fe:d6:eb:aa:4c:7c:86:52:e2:48:04:fd:67:39:
1c:ce:43:7d:ed:5f:b8:6a:64:61:57:90:ab:64:72:e5:d3:a7:
e0:f1:f2:3e:d6:b0:3e:0b:99:38:e8:2b:a1:b6:f1:a3:5d:23:
4f:90:c8:a8:25:a2:dc:b1:90:8d:69:d0:e8:e4:c1:ab:9f:a0:
25:72:99:bb:0f:92:02:6d:78:90:93:6e:2d:84:36:4d:7b:00:
0f:a5:e5:77:fa:3c:de:5b:de:71:78:a5:99:13:e7:78:91:41:
45:62:0b:54:96:75:a1:d9:5c:19:fe:01:b3:80:1a:fb:b4:50:
9e:30:7c:b3:c8:9f:88:05:73:7b:55:12:ce:1c:b8:85:a4:e8:
ae:b0:e3:4a:e4:2f:de:93:e6:5f:5a:d5:5e:8e:5b:14:5e:da:
28:88:a1:99:cb:0c:98:8e:f8:a9:11:09:56:5f:20:98:4d:d9:
74:82:b9:e9:ce:60:da:3d:5e:fc:82:b0:7c:86:a1:5b:d4:9b:
df:cb:b3:ef:0a:96:d8:74:e6:05:80:38:01:3a:18:48:bd:5c:
27:7a:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:58 2026 by rpki-client