
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
File: d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json)
Hash identifier: Mg9S8JCsWYgji84N9wZo3TA2xSmNoZraHxWnuPXs57s=
Subject key identifier: CA:B8:73:B7:09:52:AC:E2:0D:3E:6F:D4:1C:70:3D:BE:B6:E4:97:EE
Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
Certificate issuer: /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
Manifest number: F0
Signing time: Sun 05 Apr 2026 05:43:35 +0000
Manifest this update: Sun 05 Apr 2026 05:43:34 +0000
Manifest next update: Sun 12 Apr 2026 05:43:34 +0000
Files and hashes: 1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: F8coVw1HZbDArlYi9Mr+7HzK/ltkUO6HMHK9MgESL9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Validity
Not Before: Apr 5 05:43:34 2026 GMT
Not After : Apr 12 05:43:34 2026 GMT
Subject: CN=69d1f687-0038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:c0:c9:76:96:03:ea:c3:91:f9:92:9e:8f:
e6:dd:ea:fe:d6:b2:cc:8e:77:37:72:61:52:95:93:
ee:1c:dc:dc:16:0f:d2:03:aa:96:05:26:5a:58:ad:
8e:8a:e3:29:af:21:56:00:56:80:51:e2:b5:c7:75:
55:ea:6d:92:42:dc:6b:49:40:3d:d5:58:1a:63:fe:
66:a1:f3:44:d7:c3:bb:86:7c:d8:e4:a1:d8:a6:f3:
99:0d:03:b2:b0:84:fc:05:a3:14:a5:27:08:d7:b4:
94:58:5a:5d:c2:60:be:e6:eb:89:7f:1d:64:0f:32:
f4:b6:a2:4e:d3:d2:4b:6f:1b:8d:e3:4a:3d:3e:be:
af:3b:25:f7:eb:bd:7a:68:3a:74:5e:99:0d:cd:b3:
29:e9:31:74:3f:06:65:d3:1b:5e:f1:41:d8:71:47:
90:17:4c:29:f2:81:84:21:5c:30:76:54:9c:d9:dc:
9c:23:52:80:23:78:15:e4:d7:bc:81:6a:f4:93:25:
9d:0b:0d:4f:88:8f:dd:7f:5f:69:2d:ce:43:57:ea:
3c:16:88:e2:3f:ac:cb:f2:5d:95:4d:7a:34:c5:4d:
be:a7:1e:e5:eb:63:64:2d:34:c3:c8:19:d3:3d:41:
eb:e5:98:dd:65:b8:e1:84:6d:9c:d3:8e:93:32:fc:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B8:73:B7:09:52:AC:E2:0D:3E:6F:D4:1C:70:3D:BE:B6:E4:97:EE
X509v3 Authority Key Identifier:
keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:86:17:08:a1:d8:9d:95:84:bd:65:01:b6:f9:83:9a:cb:5d:
f2:e7:5a:0f:0c:57:f1:1a:bf:1d:d4:01:7c:8d:ec:2b:ba:09:
85:24:c1:bb:82:15:73:dc:82:2d:ef:84:1a:17:c8:31:10:47:
55:2d:e2:75:2a:0e:91:87:a6:14:b2:f6:60:12:06:61:e0:92:
fa:c1:e7:20:b1:09:e9:ba:f3:e8:04:81:26:d0:fa:df:69:0f:
a5:d3:74:f0:03:b0:81:a7:dc:5f:66:2b:36:3c:86:49:c8:a1:
30:9f:d2:54:2d:6f:86:c0:dc:e0:6f:b7:eb:79:5c:2c:3c:68:
35:3d:93:9a:e9:22:d7:a3:3a:2f:7f:5f:f8:06:b1:0c:fb:51:
8f:60:14:94:84:52:38:fb:ad:a2:7a:35:8b:37:d7:df:88:25:
36:ef:c0:70:d9:6d:04:4d:0a:9c:2d:e1:9c:65:77:e2:86:85:
77:d1:bd:ee:46:f7:b1:fd:a3:7b:9d:21:0f:ec:78:53:c1:42:
de:71:be:e5:07:5c:54:35:75:2b:db:a4:96:8e:da:c7:a8:73:
b2:22:de:99:e2:df:48:5b:34:87:b1:1b:fe:6b:47:e2:bf:14:
eb:3e:93:60:94:29:5b:04:27:73:b8:b5:2e:c7:8a:e2:52:e6:
fe:7b:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:36 2026 by rpki-client