
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
File: 0TPfZxvFk0ayGhHuzAit0MCiCQo.mft (raw, json)
Hash identifier: oZ6/3xHHXRHpQuZN+3rhoLsOW7m5SWOWHrU912fvzEw=
Subject key identifier: 40:A0:77:DC:53:68:FC:C9:C1:F7:F1:1E:F0:1B:61:14:EA:A1:09:62
Authority key identifier: D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
Certificate issuer: /CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Certificate serial: 084D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
Manifest number: 084D
Signing time: Sat 04 Apr 2026 20:34:40 +0000
Manifest this update: Sat 04 Apr 2026 20:34:40 +0000
Manifest next update: Sat 11 Apr 2026 20:34:40 +0000
Files and hashes: 1: 0TPfZxvFk0ayGhHuzAit0MCiCQo.crl (hash: YN1FNrOdvIclEkjotC1hNv65h2gkvV57BIL61hQxon8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl
rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8276, serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Validity
Not Before: Apr 4 20:34:40 2026 GMT
Not After : Apr 11 20:34:40 2026 GMT
Subject: CN=69d175e0-865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:e0:7e:e1:ee:eb:e8:10:41:6d:5f:7b:85:
41:28:83:a7:bd:ac:c2:bc:e2:65:b2:72:96:a9:58:
84:9f:d3:91:37:41:ad:72:93:65:13:26:b2:ae:e2:
cf:19:87:d1:ae:94:fb:07:43:92:83:fc:34:40:59:
b2:00:ea:23:ef:ee:d1:74:a1:08:28:48:23:fe:74:
18:a9:3c:a8:9f:79:c9:8e:66:cd:55:bc:31:62:38:
03:33:be:3c:0c:ef:e7:6f:1c:65:a3:ee:98:ae:f3:
0b:38:62:c5:51:fc:fb:5a:ad:fc:d0:cd:b1:2d:b8:
a3:a4:32:dc:08:56:d7:a6:b5:e6:bf:d9:f6:a0:50:
a1:97:26:19:0a:dd:8e:34:fd:59:56:47:11:23:e0:
8f:2f:c8:c1:e4:49:da:f3:52:50:04:c2:0f:25:30:
c0:aa:12:46:a4:cf:26:cc:9c:8b:0a:e0:a8:a6:c5:
f2:23:07:6c:0e:be:3e:93:3e:05:b9:80:a3:30:cc:
79:c8:52:3c:06:56:12:04:6f:f8:8d:da:d1:57:80:
b8:8e:15:d0:36:05:d0:a2:65:82:7d:26:bb:da:50:
17:c9:1a:f8:84:da:89:8c:ee:b1:86:62:63:88:68:
1d:21:bb:fd:75:d3:bd:15:f4:ed:5d:1e:5f:10:3d:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A0:77:DC:53:68:FC:C9:C1:F7:F1:1E:F0:1B:61:14:EA:A1:09:62
X509v3 Authority Key Identifier:
keyid:D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:a0:a0:8b:27:da:71:39:cf:0d:0b:7d:4d:ea:5a:38:2c:
88:28:1e:05:9d:54:ad:5d:03:c2:5d:a4:7f:0c:12:97:bd:2d:
9c:e2:67:c5:ba:e4:a1:65:97:cf:41:0a:6e:f7:a4:2e:ba:10:
6a:7a:ec:8a:e1:f1:6c:ff:b6:89:ae:a9:c0:56:5d:7e:b3:5c:
c3:93:99:0d:a7:1c:c2:6f:9c:28:f9:2c:55:41:26:48:20:fd:
15:ce:ea:52:c0:a1:ab:42:0a:46:3e:3b:2b:c5:c6:f5:d0:95:
7f:d1:11:f6:31:ff:51:df:af:c2:99:fb:9b:ad:1c:33:24:b0:
c0:a7:5a:15:8e:49:a0:56:66:2d:6e:cd:b7:6f:f5:af:64:dc:
9b:6e:b2:a5:6b:d1:2c:8a:74:6f:39:03:77:c5:f4:dc:ee:08:
10:5c:ff:bf:37:19:c0:82:f3:da:ef:e1:d3:ae:53:b8:09:60:
fc:94:ac:5d:f6:29:d2:e1:dc:d1:f8:14:5a:c1:6e:d3:97:ea:
92:ff:68:8e:97:61:5e:f4:e7:04:2d:ae:5f:12:f1:e5:03:75:
e2:5d:1a:3d:e0:68:18:2d:fa:23:18:2c:3e:af:95:87:10:af:
b0:99:c3:61:51:b2:f4:1b:70:9e:58:c1:fb:13:3b:98:ae:9c:
77:7f:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:01 2026 by rpki-client