
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
File: MhTiYKePfRZ36DATfBBlcwAxz2Y.mft (raw, json)
Hash identifier: uJHUEebdZko6GQ7e5+XkyO7229Sdv0ULEQRY4HJS3TI=
Subject key identifier: AF:64:FB:49:87:1D:21:77:8B:85:99:A7:38:AA:E5:40:35:0C:C5:6A
Authority key identifier: 32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
Certificate issuer: /CN=A91F8981/serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
Manifest number: 0122
Signing time: Wed 25 Mar 2026 04:54:59 +0000
Manifest this update: Wed 25 Mar 2026 04:54:59 +0000
Manifest next update: Wed 01 Apr 2026 04:54:59 +0000
Files and hashes: 1: MhTiYKePfRZ36DATfBBlcwAxz2Y.crl (hash: pGFuZLnH/9wBl2Ala5Ur08ENytsnBGYIxFrxYnjITWk=)
2: D80D96066C7F11EF92105459C4F9AE02.roa (hash: jZ7jlvG+kbpMf5yr4kDr9NTPJvX7t9Ub5k4dGFxMqwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8981, serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Validity
Not Before: Mar 25 04:54:59 2026 GMT
Not After : Apr 1 04:54:59 2026 GMT
Subject: CN=69c36aa3-ca3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:d5:c4:2d:00:f3:49:b7:d3:e6:a6:e3:a4:
c0:4a:d6:66:73:1b:93:71:ae:3a:ca:39:e7:2e:dc:
9c:67:b9:b0:a9:68:29:0f:6d:32:4a:4a:01:c5:95:
0f:d0:e2:86:eb:ab:19:12:ad:d9:f6:00:34:8b:ad:
e2:49:88:29:c1:6d:e7:df:8b:45:d3:dd:78:f5:de:
4e:85:36:fe:26:c2:e2:48:bd:7c:fa:11:26:6b:82:
3d:8e:95:a9:50:7d:ee:82:bd:5c:6c:7a:02:08:59:
48:03:e9:a7:0a:6c:63:11:03:fc:50:dc:95:18:6d:
d5:78:e6:58:96:88:0f:46:01:cf:f8:7e:e6:86:fd:
cc:15:2e:9b:3b:2a:70:fd:b4:0c:3c:cb:f8:5b:73:
db:24:0c:cc:f1:71:72:d4:7e:07:59:e0:7e:91:e4:
bb:a0:17:2c:4c:d5:61:62:36:c9:d1:3c:48:91:46:
c5:7b:00:4f:64:a7:22:f3:eb:3c:01:18:93:57:fe:
44:4d:00:e2:50:9b:bb:46:c5:30:07:bc:3d:62:87:
57:94:d5:61:02:3d:09:00:3c:0f:4a:cc:2f:c1:f1:
32:56:99:a7:ed:44:9a:a5:a2:49:34:73:27:72:fc:
86:63:f0:da:86:d6:68:c1:0f:d5:23:7c:92:9a:d2:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:64:FB:49:87:1D:21:77:8B:85:99:A7:38:AA:E5:40:35:0C:C5:6A
X509v3 Authority Key Identifier:
keyid:32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:ab:a0:bd:87:33:69:be:6a:e4:e1:2b:4f:db:78:d4:2f:a6:
51:f5:e8:02:87:ce:f3:84:80:b8:fc:27:e8:b5:4b:97:f1:e7:
e1:e9:72:1b:46:59:ce:91:81:46:03:49:74:3f:d4:4a:d4:92:
b3:88:98:88:81:11:15:6e:c6:e9:95:cb:61:3f:7e:dd:26:91:
8f:d9:3c:d8:94:d8:ab:af:34:b0:67:49:37:65:36:b5:b7:d9:
72:da:2b:88:e2:ee:60:47:83:6a:b6:5b:34:e6:e0:ab:ed:f8:
a7:e7:72:72:cc:f9:e0:ce:99:4f:22:22:63:f5:df:eb:c0:0f:
17:b2:6b:89:a5:c1:b5:d9:da:4b:90:f9:ba:12:ef:0f:46:89:
fd:bb:36:ee:f2:33:99:b8:54:e6:8c:97:6d:dc:a8:a5:0e:d1:
ab:fe:cd:3b:30:89:f4:07:b8:3b:87:5f:3a:a1:34:32:ab:f0:
46:ec:f1:70:27:f0:05:e4:f6:7d:a4:e2:0f:11:ce:99:69:9e:
61:a2:eb:56:ce:6a:2c:6e:6e:5a:73:07:89:54:20:ff:6d:7d:
75:3d:d1:f8:92:c4:d5:00:1e:d3:8c:55:ec:00:b6:4e:f4:ca:
8f:e9:5b:73:5a:cd:31:24:ea:a3:30:65:bd:74:5d:be:6c:a2:
f6:74:88:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:17 2026 by rpki-client