
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
File: _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json)
Hash identifier: stLzmbK73/D+55XPg4AfiuGA9yhINxbgNR7uuHL2BkU=
Subject key identifier: 1C:FA:15:6A:A5:C0:67:78:83:E7:10:48:90:CD:CB:51:86:2E:28:96
Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A
Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A
Certificate serial: 0334
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
Manifest number: 032C
Signing time: Wed 25 Mar 2026 00:43:26 +0000
Manifest this update: Wed 25 Mar 2026 00:43:25 +0000
Manifest next update: Wed 01 Apr 2026 00:43:25 +0000
Files and hashes: 1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: vTI3l8SJ+KYZ8JEjhaUCTQqP55Otfil5v69SsMqZ3W4=)
2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: R9jdVpy+qpEyzogbluazuQ5kKtc3aY56mxNQcSBuCZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl
rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A
Validity
Not Before: Mar 25 00:43:25 2026 GMT
Not After : Apr 1 00:43:25 2026 GMT
Subject: CN=69c32fae-ae82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:21:80:e5:07:88:66:ee:a1:dd:86:c3:33:
22:7b:0b:bb:27:84:bc:87:ed:bc:ac:bd:48:e8:3e:
1f:1d:20:ce:76:de:10:1d:b7:cd:0c:47:31:5d:61:
a4:d0:b6:a9:6e:80:0b:62:cf:9c:60:cb:bd:2b:47:
25:b2:de:d4:87:85:80:fb:2c:0c:27:ce:c7:2c:28:
eb:dd:ac:2a:9a:3d:f6:06:d2:ae:88:64:ba:46:5a:
45:3f:32:e2:63:17:8a:ed:d1:f1:ae:75:8e:73:96:
27:bf:c4:c4:03:83:9e:40:55:7d:14:51:d7:2c:56:
bd:3d:d2:20:27:b3:1d:93:21:f3:ad:d8:58:19:be:
35:22:4b:7c:a9:28:75:b3:49:f7:41:ab:59:7b:0e:
bd:65:30:16:60:c3:df:80:ee:08:b9:c1:be:35:f8:
b3:41:4f:a4:5e:5a:bc:1e:88:0f:14:5a:4e:97:a2:
92:51:d1:6c:21:4c:59:ec:cf:59:e6:0f:3d:98:8e:
bc:37:04:be:50:91:47:07:00:62:0b:e3:9d:9e:f1:
9e:78:38:ae:63:52:d3:18:12:2a:72:eb:54:6e:e7:
22:df:a6:42:8b:35:5e:f8:55:97:80:de:06:49:c9:
ce:b1:ec:ec:b5:ff:63:f6:c1:b9:26:fa:d8:6d:b8:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:15:6A:A5:C0:67:78:83:E7:10:48:90:CD:CB:51:86:2E:28:96
X509v3 Authority Key Identifier:
keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:97:5b:a0:c3:67:ba:fc:72:4b:36:f4:f5:81:49:18:46:01:
bd:50:ab:df:57:24:8f:3f:09:d1:f3:9a:82:6f:b1:ca:dc:4d:
90:aa:7a:44:3d:cc:ce:49:5c:6c:fe:7c:23:7e:e3:ba:e1:9b:
c4:c1:2a:85:8f:b9:e4:85:da:6a:53:ca:77:05:f9:32:3f:18:
ef:1f:37:c6:d2:a7:40:fd:c8:2b:36:f5:c9:17:fe:ea:15:9c:
4b:27:a8:2f:78:18:49:d2:59:c0:52:cd:8f:ba:c8:24:04:59:
6e:10:89:95:76:18:85:b5:11:af:f8:1e:fc:8a:6c:d1:32:3b:
8d:bb:46:00:f0:55:4d:b2:f8:16:c1:20:6f:61:7d:e5:5d:9f:
a5:97:f4:49:b4:23:0b:87:cb:f1:bf:3c:41:52:35:b8:2c:8f:
5c:f8:e7:0e:60:0a:b6:22:48:aa:c4:79:d6:2a:b9:18:c3:9c:
02:a0:3c:e9:91:10:1f:95:15:19:af:16:b2:e9:79:a6:c2:97:
37:52:05:9c:9f:73:c5:d4:64:1e:21:a9:dc:b5:17:26:d1:07:
26:4e:d2:f1:25:b8:56:fd:cc:ec:b0:a9:55:b0:05:c6:bc:8b:
a4:ee:4c:4a:40:73:65:f1:51:a4:67:76:e3:89:39:78:90:8e:
51:36:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:30 2026 by rpki-client