
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
File: odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json)
Hash identifier: UJPUT1Q2aHGGh/csUckq0inTwfj7ZkqmK3epl0YuILQ=
Subject key identifier: E8:53:7F:7C:7E:20:2B:20:DE:A3:84:B9:A7:C8:42:DE:51:37:46:7F
Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8
Certificate issuer: /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
Manifest number: 012A
Signing time: Sun 05 Apr 2026 05:01:02 +0000
Manifest this update: Sun 05 Apr 2026 05:01:01 +0000
Manifest next update: Sun 12 Apr 2026 05:01:01 +0000
Files and hashes: 1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: TS1I89J/L48IwHdXmwk/Ka5AybAweu6wqt2SUpE4IvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl
rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
Validity
Not Before: Apr 5 05:01:01 2026 GMT
Not After : Apr 12 05:01:01 2026 GMT
Subject: CN=69d1ec8d-19d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:68:bd:ba:c2:c2:7d:9c:ab:c1:56:e9:39:
f6:54:87:30:44:97:0a:60:95:b8:7a:5e:7e:ea:40:
17:a6:52:5f:ac:63:c4:1e:9c:0b:21:0b:77:8e:78:
38:cc:b1:89:f8:73:74:a0:bf:f5:e4:d6:54:ea:d6:
0b:4d:f9:cf:89:30:46:49:e4:04:75:7c:d4:92:cd:
1b:85:61:b7:7d:9d:c9:32:1a:f1:99:2d:40:c5:83:
b1:5b:31:cd:1b:af:2c:e7:e2:50:ae:1f:45:bb:6a:
c7:31:82:49:84:12:be:68:c3:fa:2d:65:8f:05:f2:
29:57:e4:60:27:a7:53:40:87:7a:b1:6e:3d:60:e5:
94:65:6d:f7:f9:90:2d:7b:d9:07:12:a7:10:bc:b5:
b8:a2:24:0d:44:61:1d:5b:91:e3:df:b1:aa:cc:0a:
e2:71:69:1a:cd:17:be:af:d8:fe:b6:9a:83:87:5e:
0b:3a:d5:0e:f5:96:4d:1e:66:1c:da:41:d7:1b:e3:
6b:dd:1b:a5:ca:0b:4d:da:ca:75:dd:e1:9c:2e:17:
80:2e:f5:37:b5:80:9d:fd:04:a1:8c:4e:a6:99:64:
28:75:af:58:7d:3a:24:f3:a6:3b:3f:d0:31:a1:3a:
4b:5e:fa:b2:70:87:ad:45:39:9c:70:35:3b:e3:aa:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:7F:7C:7E:20:2B:20:DE:A3:84:B9:A7:C8:42:DE:51:37:46:7F
X509v3 Authority Key Identifier:
keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:3a:b6:44:c9:72:e8:b7:09:61:84:4d:65:aa:a9:d0:d9:21:
ed:48:53:51:de:6a:34:3a:ec:c5:2c:c8:c9:95:69:6d:e8:56:
4e:76:a6:97:f9:fd:fd:17:7a:d4:a4:19:51:a8:28:e4:c8:0c:
a8:c5:d5:e5:4b:aa:5b:55:2e:d0:0d:6e:45:b6:8b:9b:21:59:
1f:ee:c4:15:b0:7b:3f:5d:1b:f2:27:5d:3f:4d:2a:01:2f:05:
e0:d4:08:1f:b1:e1:0d:cd:10:a1:4d:66:69:de:5a:49:18:ad:
52:a7:57:bd:5e:a8:e8:3d:0b:4d:89:cc:81:43:52:5e:53:9d:
38:98:9f:38:a1:04:50:d2:08:62:7c:d1:a8:3b:05:9b:73:03:
9a:e1:30:d6:de:81:38:11:4e:17:5f:cc:9c:60:9c:da:59:b5:
5c:d4:0e:2e:ef:98:81:07:4b:6b:e2:5f:ea:9b:1a:05:73:80:
87:20:e5:8c:38:80:92:03:04:df:fb:af:38:22:e2:c4:85:f3:
46:16:ba:c8:95:f3:ab:2b:d2:fb:72:20:6a:2b:3b:18:b7:5c:
9a:d9:08:86:e2:74:1d:15:0b:36:8c:fb:ce:39:69:76:74:71:
64:37:9e:dd:f4:79:f1:a5:25:44:ac:6d:2a:3c:81:6c:35:a0:
28:a9:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:00 2026 by rpki-client