
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
File: Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json)
Hash identifier: uO5+EN8lLfG4W8VMGtBokm9uf2Cu5QnpI5VxxU8FG9I=
Subject key identifier: CF:11:40:19:BA:4F:23:52:8F:2D:7B:55:B4:A5:F0:EA:6E:18:78:92
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial: 0C2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
Manifest number: 0BD1
Signing time: Fri 06 Mar 2026 18:45:42 +0000
Manifest this update: Fri 06 Mar 2026 18:45:41 +0000
Manifest next update: Fri 13 Mar 2026 18:45:41 +0000
Files and hashes: 1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: qgqJkh9brHnIeu0skdEtu9LeDvxaN+8L1FJ9pT8ipT0=)
2: F5E1478E822411F088762570C4F9AE02.roa (hash: XOOFVhR+X9ay6WkgnJIVnO7Un1zvha+xlStC4yqXXU4=)
3: BB46A670849811F08EA6E444C4F9AE02.roa (hash: gZhASpUdS2kKZkIDGyUcYVa0JbfP6X8oZEBvcGxjMeM=)
4: 7147D9D69D9811F09B4CDC3EC4F9AE02.roa (hash: xUDY8fa7BGcrzHTy/hrdZE1BbzUbC3rseR2XxjoP1gs=)
5: 09534036847011F0A17FCE63C4F9AE02.roa (hash: +SKfbNfmSVnwo+JjcAhmtvWvJTXw2W/IvgQmMr371Zc=)
6: 0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa (hash: Ny314IGo19wl8MjOcZI74Zy4zGs2+uD6dX7RODZKGgw=)
7: F6722FA6822411F088762570C4F9AE02.roa (hash: FYa4vN/cUGv4uAuMbz/mOKfD6eVvy62iEPGrtmeoWO0=)
8: E551CBD2BDCF11F0B085BE82C4F9AE02.roa (hash: IIBSEhSGWvOtD18zZJ+qeiGEnoieLx/pQzi9soqlUGk=)
9: 3A883F284B3E11F0817E3C31C4F9AE02.roa (hash: iHncQlzb704Umur42ElwW4bGPSOVnnYc0muryAxJjrc=)
10: A5FE56B2596B11F0AF4BB31EC4F9AE02.roa (hash: Kg3LZLrrYMd/Twi8PrMuJPdsiV2ZsSVK7GaFeSrc+z0=)
11: 541716E2B95411F0B8E2D868C4F9AE02.roa (hash: 1nUtY951jqRrI+dTCVWXi0cSf76Zz6olI1+fh+4G7wY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 18:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3115 (0xc2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Validity
Not Before: Mar 6 18:45:41 2026 GMT
Not After : Mar 13 18:45:41 2026 GMT
Subject: CN=69ab20d6-2cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:ff:44:46:35:6b:fa:97:8a:63:90:02:d2:
dd:4e:cd:e0:d2:a4:41:b9:dc:7b:6f:63:a1:98:11:
60:05:d9:cc:48:c7:d7:ed:34:0a:dc:19:56:62:02:
d9:89:60:1b:61:54:66:a8:9d:20:0c:57:fb:73:bc:
13:14:3b:8e:74:fa:5d:9f:62:00:de:cc:de:32:23:
f6:c5:96:bf:b4:86:79:a3:8c:3e:4e:56:bf:17:a2:
9c:97:2a:c1:d7:ab:d1:2a:f7:42:72:e6:f3:b6:6c:
f6:97:8e:fe:92:5f:c6:94:59:a4:1e:d9:6d:d9:1a:
58:43:32:c8:db:93:71:3e:8b:21:ce:8f:e1:fe:f8:
0f:e7:15:c1:79:db:5d:54:ee:77:fa:72:59:04:03:
cd:da:8b:d5:6d:31:e7:47:15:78:5f:04:3d:0a:2f:
06:af:2d:0d:42:4d:cb:c4:e0:48:ef:3c:ca:81:e4:
fc:0d:9a:90:b5:1c:4e:78:15:b7:69:d4:e1:3f:8d:
37:b5:4d:32:84:35:6e:88:d9:94:3d:ea:25:d1:1b:
c4:e4:40:57:95:76:83:04:d7:27:0d:9a:e9:6f:71:
19:0f:73:a8:d0:1a:85:7a:0b:99:33:e7:77:fc:e4:
33:20:72:ec:b2:3e:ec:c3:e9:49:5a:85:5f:3e:8e:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:40:19:BA:4F:23:52:8F:2D:7B:55:B4:A5:F0:EA:6E:18:78:92
X509v3 Authority Key Identifier:
keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d3:e5:55:b4:85:e8:31:e1:22:ba:31:9b:19:bf:4d:88:fa:
91:6c:2f:eb:4a:e7:c3:76:7c:d8:89:de:3e:26:f7:f6:1b:e5:
7a:f4:d8:29:a8:99:9d:f7:82:3a:d3:8a:b5:af:b0:e4:6e:c3:
c4:02:bb:1a:0e:1d:b5:3e:44:22:20:b3:d3:e4:38:60:41:2b:
94:37:8d:fd:ca:a8:0d:72:13:3f:64:fc:12:36:bc:f0:69:23:
0d:f1:97:c8:40:a6:3d:b8:fb:62:c2:fd:dd:d3:6c:18:3e:f2:
d9:8c:04:8f:75:8b:9e:1f:e2:bf:5f:4f:c1:16:35:2b:2b:44:
8f:bb:b0:b5:7b:6b:a5:8c:dd:86:7e:10:3a:98:fd:b9:73:c4:
16:ae:87:e9:0d:c1:b9:3f:51:e5:d3:ab:c2:c6:b7:d9:52:5a:
1f:b7:4b:2b:bf:58:62:0b:ec:f4:4e:5f:9c:d9:fc:bf:c3:65:
cc:88:96:72:06:9b:16:42:68:43:36:b4:09:a6:15:19:f0:39:
b3:7f:72:8e:03:27:be:13:5b:50:ac:b9:c4:88:b7:ba:52:e5:
1b:a6:34:d3:35:28:c9:fd:b4:d7:34:77:32:5f:e9:8d:8b:52:
5b:7d:75:77:5f:11:ca:52:66:02:21:24:63:b4:a5:39:21:af:
e3:78:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:51:07 2026 by rpki-client