
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
File: bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json)
Hash identifier: /TOpXw+Zl0N90Bt+CR2FfDfX99QpPRF/E4H4lBwubCs=
Subject key identifier: 5E:70:90:6E:88:16:10:61:E4:80:30:67:D4:9A:D5:59:69:3B:A7:B8
Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
Certificate issuer: /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
Manifest number: 38
Signing time: Sun 29 Mar 2026 08:12:51 +0000
Manifest this update: Sun 29 Mar 2026 08:12:51 +0000
Manifest next update: Sun 05 Apr 2026 08:12:51 +0000
Files and hashes: 1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: lE613eavB8gL2eV5qmSummbODfnJVS3kEPEg6+tQDWY=)
2: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=)
3: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 08:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Validity
Not Before: Mar 29 08:12:51 2026 GMT
Not After : Apr 5 08:12:51 2026 GMT
Subject: CN=69c8df03-0d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:9e:aa:b7:88:f9:a8:24:70:8f:10:19:ea:
0d:b1:ed:6e:07:1b:86:2d:00:bf:8e:aa:7a:07:f9:
1f:33:bd:ea:62:2d:42:00:ad:b9:20:64:0f:47:04:
35:db:48:68:23:88:0a:27:c2:a0:18:f6:01:7a:b4:
1f:39:c7:17:0b:f3:80:6f:e0:24:c9:3d:d9:44:44:
a8:7a:0c:88:09:40:44:46:43:24:64:18:85:81:08:
39:0c:27:ee:68:2a:7c:a5:80:05:ad:a2:ce:b2:06:
5f:fc:38:be:49:eb:f4:0a:55:9e:02:09:2c:f2:77:
32:9f:03:f8:64:cc:13:d6:26:a4:cd:7b:54:b8:40:
8b:4f:b4:f3:13:3f:ce:7b:bc:e1:f0:00:f1:7e:51:
04:38:e7:f4:ac:65:b1:2e:d3:70:4f:97:2c:db:c6:
94:03:36:69:46:c4:d8:b2:c6:e5:5e:69:3b:6e:5f:
47:3d:a1:f7:49:23:7f:5b:b3:42:cc:e0:10:fd:af:
b6:ff:90:cd:17:5d:51:90:82:96:69:a5:20:c8:ab:
92:5e:cc:2d:a0:e8:8a:a5:8e:e2:07:12:e9:d2:fb:
76:94:84:e9:64:c9:ed:09:7f:08:10:39:21:88:c5:
2c:a1:00:65:a9:a6:ed:a4:60:78:73:a7:7e:62:ae:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:90:6E:88:16:10:61:E4:80:30:67:D4:9A:D5:59:69:3B:A7:B8
X509v3 Authority Key Identifier:
keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:0c:c8:d3:8a:a9:b7:b2:0a:8f:ee:29:0a:99:85:40:27:1f:
ab:f4:f7:b9:74:b7:53:ac:3a:f2:3d:89:d4:5d:8f:c0:45:18:
8b:9a:91:13:d4:a1:d8:c3:4b:89:a5:6f:e3:cd:97:28:bc:67:
66:b1:81:55:f6:54:62:d4:5d:ba:3e:40:a5:db:0c:a4:da:d4:
3a:e8:4e:71:33:ce:31:11:30:e4:39:36:c6:23:6d:39:67:3d:
bb:33:93:19:23:ff:89:9c:19:b5:9c:2d:38:25:23:d9:d6:e4:
25:c5:33:17:da:e5:92:58:fa:24:88:bd:de:74:21:4c:70:0c:
c9:51:fd:a3:d7:b7:d2:9c:39:37:c2:68:9d:0e:59:1e:46:93:
35:84:21:12:f5:54:72:3b:90:21:77:03:69:9a:30:b1:db:8f:
41:b3:ff:5b:06:92:fd:33:59:d8:e8:ed:a3:a8:c5:4f:8a:17:
75:00:89:0c:2c:42:3a:3c:ce:58:f7:50:89:ac:d1:c8:0d:bf:
0f:0f:04:6e:2f:bd:6c:42:41:17:d0:12:29:21:cb:46:38:c1:
db:48:a6:4f:ad:c5:f4:2c:e3:5c:09:82:41:6b:48:19:d2:7a:
84:55:80:7b:54:59:73:b0:94:de:93:d4:5e:f3:18:6b:80:99:
8f:ef:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 15:45:40 2026 by rpki-client