
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier: 4nIErY4CsMtJLSkLcrBpa/cFVo3sV1SNvViF3bKPWkE=
Subject key identifier: 96:B7:FA:44:0D:95:D3:F8:2C:35:56:7E:E2:3F:E5:A8:2F:0C:33:1A
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial: 11CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number: 11B3
Signing time: Tue 24 Mar 2026 17:05:32 +0000
Manifest this update: Tue 24 Mar 2026 17:05:31 +0000
Manifest next update: Tue 31 Mar 2026 17:05:31 +0000
Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: N0co4x8GxRyR9Mwjyz0wrBA2I0lH78Xvu/pSy02DgfM=)
2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: dJ40ZvkvEtXP02NZp3lyJfj9qvrbjW3gvJFMNBqnO1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4557 (0x11cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Validity
Not Before: Mar 24 17:05:31 2026 GMT
Not After : Mar 31 17:05:31 2026 GMT
Subject: CN=69c2c45c-9524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:81:3a:00:91:0b:dd:16:d3:5c:90:4f:55:
16:6c:77:2b:2f:fb:49:64:62:61:90:fe:02:23:0f:
7e:75:ae:db:96:75:d3:14:59:18:c1:f4:90:bb:99:
1d:87:4d:52:d8:43:35:48:59:99:1c:b4:f2:31:b6:
22:40:df:2b:15:5e:3d:41:3d:76:5c:a8:f4:89:ac:
b6:ef:94:34:00:a7:63:d5:75:22:44:cb:db:9c:5e:
57:ee:ee:a3:32:e7:c7:74:72:ac:09:ed:09:3e:a4:
f5:2e:c9:0b:b0:e2:e1:c7:d9:5b:71:a0:98:6d:da:
a5:3e:61:22:fc:e8:53:4c:1c:f2:3d:8f:96:ae:e1:
23:58:79:a2:36:09:88:3b:d7:28:70:6c:d8:f3:fe:
ff:75:ea:6f:7f:56:8f:aa:4c:c4:94:bb:48:7e:1e:
60:9d:a3:47:6a:c8:82:a9:05:b6:27:33:e2:7b:0f:
b2:92:6f:69:aa:06:f0:26:29:41:c2:82:fb:48:78:
a4:55:e3:e3:87:e1:05:ae:cd:38:75:e6:4b:7c:ac:
fb:50:ff:15:be:4e:51:d3:a6:33:e0:3c:fe:86:62:
1a:ed:4b:84:57:3d:8c:96:e4:68:89:7e:86:65:2b:
63:c4:28:3e:c0:9f:27:b4:7c:68:73:10:bf:d3:ef:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B7:FA:44:0D:95:D3:F8:2C:35:56:7E:E2:3F:E5:A8:2F:0C:33:1A
X509v3 Authority Key Identifier:
keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8b:ff:39:4f:b9:cc:23:32:19:12:f8:f6:11:68:cb:10:59:
ca:06:bc:4a:f7:91:4f:7d:c5:3b:f7:c0:3e:a1:85:a6:ad:82:
74:e0:03:1d:ce:38:57:cf:8e:2a:a6:b0:c7:02:31:e3:42:8c:
27:22:15:d2:53:96:17:5f:d5:8f:3f:bc:8a:4e:9c:83:08:fb:
6e:18:6b:18:f1:a2:d5:86:8c:09:18:9d:fe:35:a2:6c:a7:f0:
6e:95:9a:ce:a0:ca:0e:f5:b0:4c:60:9e:6e:f8:fe:1d:c5:5c:
91:ab:0c:88:19:b3:0f:9f:10:d8:c9:16:54:cf:37:35:33:5e:
82:fc:13:c9:9b:c5:f2:fe:42:8d:a3:82:d5:7b:50:23:5e:39:
d4:d7:a0:22:2d:7c:85:51:4f:32:65:27:99:da:aa:17:b9:38:
f9:49:a2:0a:c9:bf:14:e5:0e:50:9e:2b:bd:47:20:a3:94:8f:
41:85:77:66:bb:f6:1e:10:a0:2e:1c:c4:a9:02:cc:ef:77:bd:
f1:e1:0e:5f:de:9b:26:4e:d0:76:bd:5e:fd:de:cb:c2:a1:70:
76:54:8b:fe:1b:83:07:7c:14:d8:fb:e4:23:d0:c5:02:59:3a:
5c:69:b5:5e:39:ed:9f:c0:aa:75:d0:d3:1e:ac:40:23:8a:e6:
6e:58:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:40 2026 by rpki-client