
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
File: T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json)
Hash identifier: Mnr10BZ/Hr/i6FNbBO6EpffWdIOsj6jnFVFuLJ3QftE=
Subject key identifier: 37:A2:8E:35:EB:8E:BB:3B:78:8D:F9:E1:80:3C:50:A9:61:AE:0E:C3
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial: 03FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
Manifest number: 03D3
Signing time: Sun 05 Apr 2026 00:28:56 +0000
Manifest this update: Sun 05 Apr 2026 00:28:55 +0000
Manifest next update: Sun 12 Apr 2026 00:28:55 +0000
Files and hashes: 1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: Wov9OdfvvkF6ZYQDkPPYXs/MTVfZcIttL3c+EIGGOCE=)
2: D9750E78F01111EFB1720645C4F9AE02.roa (hash: +LCGNb0OB4VM+Whp1njiiWEGwYQwA6NaUQIys14iy+4=)
3: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: RE9x/m6mlo2vJzH32XxtuTi0P6Gpv9n9izH4NHfwP6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1021 (0x3fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Validity
Not Before: Apr 5 00:28:55 2026 GMT
Not After : Apr 12 00:28:55 2026 GMT
Subject: CN=69d1acc8-cf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:71:41:40:23:88:16:d1:d2:32:1b:6d:81:
7f:0d:db:30:2f:87:43:ef:2c:98:2b:9e:11:ed:8f:
ea:64:7f:d1:24:e4:e6:a2:99:32:d6:bc:81:42:5f:
ad:b5:a1:aa:ed:59:b8:c5:ac:57:53:2f:3d:5f:4a:
6c:78:d8:23:0d:bc:1b:ae:05:25:93:5b:50:7d:6e:
63:82:0b:85:e6:b1:16:aa:95:cf:fa:ba:60:da:03:
bf:4e:33:7b:0b:b4:31:5a:bb:be:43:49:ea:61:27:
89:4f:ad:f9:0d:73:df:db:99:b7:24:58:1e:90:61:
bf:f9:7b:cb:fa:44:7e:0a:35:3a:ff:50:eb:a6:a4:
58:8f:df:bb:c3:48:65:7f:25:eb:95:39:c3:56:a5:
e3:d3:4e:4b:ff:da:30:f9:4a:0d:22:79:0b:c6:74:
af:26:b4:4d:c3:ed:64:b7:14:27:cd:2c:82:c1:1e:
f8:7a:58:64:33:11:c8:62:25:5c:8e:bc:3a:55:b9:
9d:cd:a4:2e:69:70:ac:64:26:4e:95:44:9a:13:8c:
1e:a8:8a:62:e1:07:af:2d:03:7c:d7:85:d7:07:02:
05:47:b9:07:ab:f1:a4:f2:ef:53:98:0a:a1:94:71:
8c:dc:4f:ad:ea:7a:73:a7:9c:11:53:45:08:3c:f5:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:8E:35:EB:8E:BB:3B:78:8D:F9:E1:80:3C:50:A9:61:AE:0E:C3
X509v3 Authority Key Identifier:
keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:49:f9:80:ad:9c:09:00:c7:cb:a9:d6:b3:19:06:4a:76:63:
f6:37:f2:66:dc:62:e2:14:c0:46:9f:08:99:32:ae:59:26:f4:
c8:e3:e8:53:ef:78:aa:ff:02:34:43:5c:e8:87:5c:32:c3:0a:
bd:42:e2:05:63:e9:91:5e:48:99:f6:ca:de:4e:f3:52:37:f4:
e6:cd:8e:84:0a:3a:46:89:49:f8:6e:3c:5a:39:85:3c:5d:5b:
d7:13:09:e6:74:cf:cf:c3:0c:0f:f6:2e:e1:4e:01:89:0c:c6:
1c:85:7b:d4:cd:e2:b8:c9:36:2f:7e:7d:9e:ca:43:95:af:d4:
dd:d5:b0:6d:f2:aa:44:22:eb:5a:6f:cf:79:d3:51:18:47:8c:
62:ac:8d:a8:b0:87:32:9c:a9:e1:57:6f:b5:6e:4a:55:38:6b:
01:31:9f:35:37:c0:f0:0a:00:26:6a:2a:66:89:f8:24:da:d6:
af:bc:45:be:2c:84:1d:4e:25:24:d6:72:1d:7b:85:42:dd:f4:
0d:b5:74:54:c5:65:06:fa:ff:90:9d:a4:f2:c5:d5:a1:16:cb:
11:70:40:a6:58:0c:23:3a:dd:c5:ab:d6:9b:b3:71:f5:c9:3e:
94:28:04:89:1d:70:30:04:57:fe:89:66:a5:e9:82:1d:0d:88:
6c:cb:38:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 03:38:37 2026 by rpki-client