
$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File: o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier: Li7pUq9DdPHwbByE/Y8dwiSoRiXdoEYuRRugUHHBzdI=
Subject key identifier: E8:A2:60:8B:84:4A:57:AE:FF:A5:4F:71:AB:A9:19:7E:AA:45:E0:80
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer: /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number: 32
Signing time: Tue 03 Mar 2026 08:17:52 +0000
Manifest this update: Tue 03 Mar 2026 08:17:52 +0000
Manifest next update: Tue 10 Mar 2026 08:17:52 +0000
Files and hashes: 1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: tgDZFKgJoIlnQ2NQHwfXVzQcYRWsyHle/QYNTb+imQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Validity
Not Before: Mar 3 08:17:52 2026 GMT
Not After : Mar 10 08:17:52 2026 GMT
Subject: CN=69a69930-8bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:a0:76:a4:fe:86:60:5a:5c:52:ad:f1:03:
78:45:e2:9c:e9:6e:07:ac:84:6d:19:8d:fc:f1:13:
ea:bd:73:4a:bb:31:cc:50:4c:5b:1f:16:34:e5:b6:
9f:1a:e0:b9:33:29:c3:f3:a9:19:e1:54:61:d4:49:
18:86:37:b9:63:2b:e5:e2:e3:af:c4:26:1a:bf:ed:
c9:1b:a4:54:53:28:c4:eb:e1:3b:c7:d4:b5:44:4f:
41:3d:39:96:0b:83:ba:41:a8:da:60:7b:44:6b:35:
54:4e:d5:ee:14:ed:38:17:2c:4f:f0:06:e2:a7:0d:
ed:0a:63:6c:93:a3:fc:62:99:1a:8b:21:a4:13:e6:
ca:63:92:38:69:b9:dc:e7:cd:46:5b:ab:1e:9d:c8:
d5:b7:a6:8f:a5:a2:45:51:e1:f1:b2:93:0c:69:22:
4a:e3:53:51:d6:c8:85:14:c6:51:53:ba:a2:60:e8:
b2:54:2a:ee:d5:98:27:31:29:d7:b4:86:64:70:93:
ee:80:62:c3:64:c2:69:f6:d5:98:ac:66:38:f9:fb:
6f:96:27:1d:85:bf:47:12:cb:3a:2e:d0:42:fa:d7:
ac:16:0b:d7:a2:db:6e:f3:08:45:ec:c4:c1:9d:0e:
db:6c:f4:7e:a5:b9:ed:98:fc:8c:cb:93:78:08:57:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A2:60:8B:84:4A:57:AE:FF:A5:4F:71:AB:A9:19:7E:AA:45:E0:80
X509v3 Authority Key Identifier:
keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:ae:73:0e:cf:57:73:88:74:9d:66:37:3c:fa:cb:c8:66:bb:
be:61:ca:e1:9f:a9:7a:ba:fc:ff:84:bc:99:c6:d3:5b:ef:68:
b3:b9:dd:90:68:be:3f:80:25:88:e1:21:b1:09:1d:e5:55:d6:
d2:39:28:f8:0b:72:3e:59:e2:14:ea:88:d3:74:0a:61:c9:92:
b7:9b:68:a4:20:46:b2:be:4f:a5:39:4a:08:92:94:c6:80:b2:
c4:20:e9:e5:1c:97:21:d1:51:10:ae:39:46:1c:dc:7d:86:fc:
2c:39:eb:9b:05:5a:73:16:03:be:3a:5c:90:1e:64:2b:2c:05:
bc:bd:76:d7:1b:86:59:eb:1b:e4:a5:60:d8:10:c7:e7:af:fd:
37:dc:34:f3:67:93:f4:aa:2e:92:cf:17:62:91:df:62:6c:ce:
fa:e7:9c:d8:29:77:17:b0:b5:66:e4:d5:c8:c6:7d:6f:c6:bd:
40:b2:c1:c3:84:3a:12:dd:60:5a:9b:6d:9d:ee:c2:88:5f:14:
60:5a:be:3f:49:2a:31:cd:ba:64:fb:b9:c5:4a:5d:33:ab:7f:
34:38:2b:b5:1d:87:63:17:f7:28:7d:ed:19:84:63:63:17:50:
c0:07:14:60:d6:5c:54:a1:ab:eb:65:a8:30:3e:c1:90:e2:52:
ec:0f:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:24 2026 by rpki-client