
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json)
Hash identifier: 4viprvA/YyNBX3dGN5Q18bKVGRs3qJ4xpAJsoXchUqs=
Subject key identifier: A1:EC:6B:CA:4F:3A:98:94:9D:FF:22:5A:41:43:5C:B1:92:F4:68:FB
Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
Manifest number: 01B2
Signing time: Sun 05 Apr 2026 03:35:50 +0000
Manifest this update: Sun 05 Apr 2026 03:35:49 +0000
Manifest next update: Sun 12 Apr 2026 03:35:49 +0000
Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: X2fsmMLyJsI9ZW7Z2UuODcx1bLOJUeRjinbpakz0a0Y=)
2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: 6JRD7f3UzQjHPzduH9cDuitGdysFDUsQwpVXNBqTlJs=)
3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: OQdS0MqbomscJ7LmPYlCtNKMF+iUt0AL2oWOEgu1PX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Validity
Not Before: Apr 5 03:35:49 2026 GMT
Not After : Apr 12 03:35:49 2026 GMT
Subject: CN=69d1d896-e895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:91:01:46:26:50:87:8f:a4:84:1d:ae:03:
17:e4:03:31:a7:43:1e:f4:3a:c3:16:f9:ec:31:30:
d6:80:b3:28:b9:62:b1:4d:d5:b5:dd:8e:4e:5b:cb:
44:c2:44:ed:a3:0f:b9:ae:25:99:25:12:6b:13:8c:
e8:1e:fc:8a:80:b8:6a:53:fb:37:dc:58:d4:8a:34:
24:34:ce:be:c8:b3:49:1a:ff:1f:b2:aa:a3:4c:2d:
c5:dd:b8:e3:0f:75:ff:0a:3c:2b:1b:f3:f8:d5:44:
d4:33:06:a6:4d:d8:4f:e1:87:13:5b:3b:57:fe:a8:
ff:92:ed:22:e0:ed:e9:79:10:0f:44:bf:cb:6c:7f:
f3:ed:7c:29:c2:f9:90:ce:5e:be:d6:11:3b:07:9c:
16:01:39:91:c3:dd:00:b1:ce:2a:61:9f:c2:de:d4:
13:cf:61:86:bb:b4:7d:00:2a:c2:2b:6d:f5:2e:a5:
75:02:43:e1:36:d5:b3:f0:4b:fe:21:7a:db:29:50:
a4:4e:87:d2:e2:7f:06:bd:47:4e:90:b9:d2:14:db:
6a:f3:6c:5f:41:4b:5c:d6:7b:92:0d:90:60:d9:bd:
51:31:e8:bb:83:17:e1:9e:9f:60:f4:3f:a0:2d:84:
7a:dc:2b:4c:39:fa:26:9a:8f:c2:03:64:ec:4a:b9:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:6B:CA:4F:3A:98:94:9D:FF:22:5A:41:43:5C:B1:92:F4:68:FB
X509v3 Authority Key Identifier:
keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d6:28:84:30:24:c6:47:2d:61:d7:38:66:f3:fc:a3:b5:25:
4a:47:c9:6c:84:0b:59:ca:19:87:29:86:9e:de:8b:90:df:13:
aa:7a:6c:98:bd:ed:4b:72:96:cd:51:2c:3a:38:da:91:04:2e:
3d:f3:92:66:b3:32:f4:e8:07:e6:7d:2a:43:e8:9d:33:9a:84:
ef:1d:28:12:63:b4:d2:05:33:cd:55:22:45:52:d4:da:5e:07:
87:b9:54:74:15:cd:e0:14:f1:c5:0e:5e:cd:9e:94:98:58:7b:
12:9d:c2:d9:83:5c:9e:46:1d:47:43:06:d6:ba:ee:8c:a5:a0:
94:d8:18:cd:19:46:5f:5d:f5:c4:7e:ea:0f:82:eb:60:15:a5:
f5:53:ce:69:9d:bd:14:ac:1a:97:6c:12:f9:d0:35:d2:96:94:
9b:4b:4b:0f:36:8b:b9:6e:b8:4c:5b:5b:14:3f:8c:d4:b2:9c:
8b:75:2e:72:33:35:c5:41:59:93:d8:5d:b6:ff:8e:ce:99:2c:
be:71:94:db:41:51:37:4a:6d:f8:9a:24:c8:89:f4:79:fb:45:
cd:51:ba:a9:35:d8:60:be:46:a2:d8:65:40:1a:2d:bc:62:4b:
0f:73:b6:f6:ea:ab:00:5d:ac:80:2b:22:8b:57:3a:2e:a3:a7:
27:11:f6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:59 2026 by rpki-client