
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
File: 44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json)
Hash identifier: 12Xzo/5d3Aj6P8VMBg3KaITZTHJj+TOZm5AbK1gJ9rc=
Subject key identifier: 72:C5:CF:B9:5D:35:6D:C8:C5:F2:4C:BE:0D:11:B8:4B:6C:A3:A1:08
Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
Certificate issuer: /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
Manifest number: DB
Signing time: Tue 03 Mar 2026 06:11:26 +0000
Manifest this update: Tue 03 Mar 2026 06:11:26 +0000
Manifest next update: Tue 10 Mar 2026 06:11:26 +0000
Files and hashes: 1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: 1FrhX1lDU15ShYVjFn8Z7YBu6X22nKVg6AzamuPBNzA=)
2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: 7luqkxdAYhFDQ1cLdVYDxi4/1gyDCpg9yV33Rku64hI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl
rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
Validity
Not Before: Mar 3 06:11:26 2026 GMT
Not After : Mar 10 06:11:26 2026 GMT
Subject: CN=69a67b8e-10b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:28:16:95:4a:2c:52:c1:96:ae:cc:26:30:
80:29:4b:2f:04:6b:fe:40:42:67:44:a3:f2:27:14:
d0:ea:19:2f:43:49:c5:98:73:64:93:8f:e4:12:54:
bd:6c:d2:2d:f2:8f:5c:64:54:14:1e:e9:85:12:fa:
1f:f9:ba:81:56:d0:b2:95:35:67:2d:a2:cd:34:98:
df:35:8b:29:ab:19:88:0c:b8:95:08:9f:4a:88:34:
aa:f7:4d:f7:e2:aa:2d:43:25:c1:e5:e6:cb:0d:ca:
75:cf:88:e8:ab:e0:03:7b:32:98:38:8d:36:78:a7:
42:3b:18:e4:e8:5b:3f:cf:fd:cf:66:95:63:e9:f7:
67:ac:c8:0c:77:0b:be:fb:10:c3:14:30:ed:18:e7:
b2:75:50:e3:e0:01:f2:c9:b3:73:d7:69:61:52:fa:
a3:a9:22:b0:d7:8b:b4:49:0f:66:b2:2e:03:34:61:
93:df:1c:4a:ec:80:66:77:24:72:0d:64:b1:63:04:
8f:12:cd:dd:79:a1:2b:d6:90:85:61:a2:94:18:fd:
09:43:5d:b7:25:43:4b:31:15:13:5e:d0:66:d5:f9:
c6:95:83:4a:9b:ea:fc:d9:74:4a:55:fd:76:db:6b:
12:63:e3:3b:8b:f9:86:e4:d0:44:0d:1b:c3:d2:47:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C5:CF:B9:5D:35:6D:C8:C5:F2:4C:BE:0D:11:B8:4B:6C:A3:A1:08
X509v3 Authority Key Identifier:
keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:a0:87:f2:c0:32:89:5d:cd:56:83:76:76:bd:bd:4c:4d:8b:
3d:90:fe:97:4a:d7:7a:e1:ab:ce:92:ab:0f:e4:7b:bf:20:b0:
4b:8e:d3:15:a1:93:92:77:2f:68:d8:e4:95:63:0c:b4:98:9f:
e6:bb:a6:d6:79:3e:12:0b:f8:e7:d0:e0:0f:70:fe:02:9a:5a:
49:f4:8d:4f:ab:a5:7b:7a:98:4b:c1:32:da:a7:15:80:26:e6:
95:12:a4:c9:7c:0f:2c:43:b2:8c:cd:64:18:f4:77:23:14:fc:
ef:14:fc:b3:c4:ea:3c:13:90:a3:a9:28:60:a4:f3:66:6d:d5:
ec:ea:52:66:aa:06:0d:da:a0:2b:0a:7f:0b:3c:65:42:86:84:
c9:99:ec:fe:64:d3:5c:c6:a2:42:b6:64:dc:e4:73:16:d6:87:
d0:77:da:b9:26:92:bc:0a:34:52:b5:6b:d0:32:3d:2f:a0:28:
04:60:16:2e:c9:03:6a:71:dc:b4:ea:d1:c0:ec:b7:2b:27:87:
29:6d:fc:00:b7:58:c4:e3:b1:2e:84:29:7d:bf:b6:a3:19:8e:
ca:40:7b:b1:59:6f:fb:25:ea:68:3d:00:b0:c3:6c:43:af:82:
00:27:9a:5b:6f:ab:b1:82:17:9a:17:49:c2:57:f7:26:b6:7a:
e6:e8:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:36:17 2026 by rpki-client