
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
File: crVJ4D_3UKU5edANyx2mRLtSrKw.mft (raw, json)
Hash identifier: +dP4840w3dA/eH4Hwd320zsbCYuI86d7ZOnVWmFKigg=
Subject key identifier: BF:5A:AF:C9:88:C9:67:1C:66:D4:C2:9B:E6:13:2F:45:E9:20:60:C3
Authority key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
Certificate issuer: /CN=A91BFDE1/serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
Manifest number: 06
Signing time: Sat 07 Mar 2026 08:26:51 +0000
Manifest this update: Sat 07 Mar 2026 08:26:50 +0000
Manifest next update: Sat 14 Mar 2026 08:26:50 +0000
Files and hashes: 1: crVJ4D_3UKU5edANyx2mRLtSrKw.crl (hash: n+sXK+vZuqydzWYSz+JKYgPrDGcgfcpcvdB4njnhHxc=)
2: 00B077D6187D11F19A5CAFE7383D8C67.roa (hash: mW9wCzHROG2faL3zV7IIUqQz5qp+XENd/4NuYNOgCwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Validity
Not Before: Mar 7 08:26:50 2026 GMT
Not After : Mar 14 08:26:50 2026 GMT
Subject: CN=69abe14b-2f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:e9:5e:82:b2:93:33:68:40:d8:b7:db:47:
bc:d0:e1:8e:42:7b:0e:33:d8:37:ec:bd:18:ca:62:
2b:84:06:e9:50:c9:fb:a1:53:d6:f6:7d:81:2b:ba:
e7:fc:90:21:06:f0:a8:a0:79:13:2b:ae:16:d8:10:
8e:19:ab:e8:81:e3:c5:ab:d8:9f:c7:a4:b3:1a:3f:
8b:75:93:64:36:9a:02:3b:67:8d:e4:86:29:65:a8:
4f:c8:8e:cb:29:91:9d:90:e0:15:9b:c3:cf:c8:b3:
0c:93:88:6d:d9:4a:0f:e7:fe:20:90:32:ab:ac:d9:
e7:76:bc:96:80:c6:a5:27:fc:3c:4c:3e:12:3c:e6:
f5:7c:a3:d6:89:24:9c:e7:db:eb:89:9c:6b:35:29:
db:bb:6c:06:20:36:a3:37:a9:d4:fb:47:1e:a9:cb:
ee:5d:53:e5:ab:ef:a2:82:89:c7:ea:e5:fc:01:8f:
57:d3:d6:2f:bf:2a:85:61:91:fb:22:03:8e:af:ee:
48:c8:e4:e2:3c:01:74:81:41:5d:c1:dc:16:be:71:
f1:e3:25:86:f9:3b:a7:97:12:fa:d7:54:75:b5:ad:
11:89:9f:a3:65:15:b0:af:1e:29:60:9a:a3:96:34:
8a:01:75:3f:c9:2e:6a:22:70:04:52:ca:12:69:6f:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:AF:C9:88:C9:67:1C:66:D4:C2:9B:E6:13:2F:45:E9:20:60:C3
X509v3 Authority Key Identifier:
keyid:72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5b:33:26:ff:99:d4:bb:85:c6:91:1d:12:ee:5b:d4:36:9b:
bb:dc:f3:82:8b:ca:5a:7b:d5:6d:d4:56:78:5b:ce:b1:34:69:
1f:c7:50:f7:57:65:20:55:5d:9f:3e:da:8e:61:9b:e4:b5:b7:
d2:74:fb:de:4c:1f:e9:d2:fd:66:20:f9:ed:0d:78:4d:11:05:
5c:47:6f:15:22:6d:d0:0e:75:36:2d:47:db:71:b6:36:ec:03:
f7:e7:c3:83:70:c6:0f:15:f6:2f:cd:06:41:20:52:bd:85:70:
de:e6:26:b9:ec:bf:b4:43:2b:e3:d9:11:87:51:f6:70:f8:d3:
97:f1:66:7e:62:2f:17:3e:ca:16:08:f8:4d:cd:18:be:d6:51:
1e:3d:cc:36:2d:27:9d:33:8d:fb:b6:77:b2:b9:fc:52:c3:98:
db:ee:17:d1:a3:f2:df:a3:45:8f:b5:5d:0f:86:b5:c8:57:31:
84:b6:5b:dc:27:7c:3a:95:65:24:0c:84:00:27:74:20:b7:5b:
2a:f4:dc:55:fa:be:8d:53:21:86:36:79:8d:4e:31:55:f5:20:
90:8d:9e:cb:6b:f9:c6:9e:f2:45:76:e6:d1:69:76:8d:46:6d:
75:f3:0a:c9:ab:fe:02:71:a5:da:9c:67:7d:a4:a8:0c:dc:62:
cd:da:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:31:55 2026 by rpki-client