
$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json)
Hash identifier: g/2CP8t/fUzgMqhbur66Rdn0sh4UJryhPHsk6j8kUO4=
Subject key identifier: 9D:EC:D8:41:F9:2E:53:08:5E:33:EE:55:04:2A:81:06:F3:0F:DD:1F
Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
Certificate serial: 2C36
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
Manifest number: 2C36
Signing time: Mon 02 Mar 2026 15:37:03 +0000
Manifest this update: Mon 02 Mar 2026 15:37:03 +0000
Manifest next update: Mon 09 Mar 2026 15:37:03 +0000
Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: sIdew6w2HAr1Xm8k8iESTO4AQn8fd/S4cghAVQb6SwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl
rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11318 (0x2c36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
Validity
Not Before: Mar 2 15:37:03 2026 GMT
Not After : Mar 9 15:37:03 2026 GMT
Subject: CN=69a5ae9f-ad23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:86:66:58:ba:48:ae:82:a7:4c:3e:16:cc:
35:ef:a2:21:66:98:4d:ef:f0:12:e5:62:69:8b:37:
61:e0:c2:ba:56:c0:da:f7:d0:f0:80:57:a0:f7:60:
98:12:4e:5b:b7:ef:35:f2:d0:bb:e5:0e:17:a0:3a:
2e:32:aa:c5:32:7a:17:55:2d:e7:07:78:97:a3:f0:
b4:94:e0:0d:3a:a1:92:35:0e:0b:fb:85:26:84:ef:
82:3d:a1:44:a2:d9:2a:f7:23:25:f6:78:a6:aa:53:
9e:16:d6:d9:58:89:1a:fc:ed:63:6b:b2:e9:6a:db:
2c:2b:ef:0a:68:0f:00:fa:1e:2c:45:9c:06:d2:0a:
62:64:29:6b:e5:46:eb:bb:7c:5f:4b:da:57:b1:2d:
21:32:76:ea:dd:9a:ca:5b:93:53:94:c9:0e:ed:63:
b9:9f:ba:24:25:fb:cd:1a:ef:2b:8f:2d:2f:85:4a:
32:86:8c:c5:4f:04:28:15:0a:c1:73:a4:83:58:e3:
b0:a3:fc:0c:cc:71:29:8a:d3:73:e5:95:40:df:94:
d9:c6:a5:9f:be:86:48:ed:dd:9a:a7:21:0f:93:40:
05:26:39:b4:30:7c:ea:00:e5:21:94:5c:00:8d:8e:
e4:86:1a:a6:f6:f1:7a:d7:83:9f:20:bd:c1:97:0d:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EC:D8:41:F9:2E:53:08:5E:33:EE:55:04:2A:81:06:F3:0F:DD:1F
X509v3 Authority Key Identifier:
keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:63:6d:58:2d:b4:ce:00:bd:a3:73:21:b2:53:4c:bf:1c:24:
30:1c:b3:15:cf:37:e4:55:a9:31:38:a9:35:b1:37:08:3e:c5:
b5:d6:d2:7b:31:d8:65:1d:d2:e3:27:d3:bd:53:a5:44:99:c3:
d4:03:40:89:18:3a:1d:d3:f7:10:63:5f:a1:cc:67:63:58:65:
a3:25:f9:df:bb:36:4d:21:56:9d:6e:26:2c:38:7b:cd:c1:81:
23:b6:91:f6:53:b0:23:10:52:62:7c:85:bf:74:ef:5c:7b:2b:
35:85:9f:12:b1:d4:ff:19:75:e2:d7:ae:81:de:9d:b4:7b:e2:
6a:9a:78:ee:6a:36:21:41:85:38:b9:9d:b2:9b:48:c8:aa:97:
9e:24:2e:8e:85:af:c8:cb:be:f2:31:55:d5:d3:7c:57:fb:5b:
ff:12:9b:03:05:c5:6a:42:98:10:dd:d6:b3:77:84:69:52:21:
8e:e3:ef:e6:9b:13:0b:fa:41:6f:42:1e:06:48:a6:61:d8:66:
b6:0e:fe:d9:31:01:08:1b:70:f2:b0:cd:86:ab:78:c2:75:cc:
0a:c5:a3:da:a7:b4:27:a3:cf:3b:cf:f3:98:9f:d7:78:0b:dc:
14:ee:7a:49:f9:34:bb:5f:3a:d6:a5:27:70:9e:a5:01:58:fd:
a7:a3:06:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:24 2026 by rpki-client