
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
File: 0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json)
Hash identifier: tvDp498QHpU/gZXlg5mVQ1BH3rF9RZaqt3TCrZ7Y+DU=
Subject key identifier: C8:21:49:04:80:46:7C:75:53:A1:01:1B:C7:CE:3F:25:A6:AB:CE:3D
Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7
Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
Certificate serial: 05BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
Manifest number: 05B8
Signing time: Sat 04 Apr 2026 22:54:14 +0000
Manifest this update: Sat 04 Apr 2026 22:54:13 +0000
Manifest next update: Sat 11 Apr 2026 22:54:13 +0000
Files and hashes: 1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: u/tJsVUJwR13C4rFyuiAnDh1fBi18zuRkd1AboaL0AA=)
2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: n3COBaPKKrvr/uYmveuWkBO4Ag5aH+qxiVkH2APkXhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl
rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1471 (0x5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
Validity
Not Before: Apr 4 22:54:13 2026 GMT
Not After : Apr 11 22:54:13 2026 GMT
Subject: CN=69d19696-86d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:8f:32:48:94:c8:87:9a:cd:c9:b6:af:da:
fc:7f:f5:22:46:d8:ec:1f:2b:f1:cc:ad:f4:e2:b0:
1a:7b:88:f3:25:da:c5:ce:4a:84:03:d0:9c:3f:0d:
13:bd:15:ba:5d:ab:2b:a1:87:2f:df:ae:bb:1c:e3:
0a:51:d3:d1:45:66:fa:c5:5e:a0:a8:5e:67:d5:e0:
1e:7b:3f:b3:1e:92:ca:92:f9:f4:05:35:c8:44:e7:
82:ea:ca:d5:92:75:97:74:34:ec:c0:97:f5:4a:b4:
59:d5:99:bc:e9:d8:56:ec:2f:e1:db:c4:34:02:fb:
6b:68:21:64:cc:71:0e:95:c0:49:78:ff:76:70:ff:
96:60:f3:ef:c2:7e:95:3d:6c:33:09:86:8f:f2:0e:
29:5e:32:c4:2d:70:87:a3:1f:f5:5b:be:64:f0:d0:
b5:86:dd:ed:f1:48:ac:25:c1:1e:6b:15:c9:80:2a:
ea:de:4e:a5:4c:37:97:64:f3:01:f1:95:70:d2:f3:
6c:55:6f:bd:4b:c6:f3:e8:be:26:19:13:0d:fe:db:
59:3b:0e:c6:89:f5:95:c0:aa:78:b3:80:88:11:26:
59:a2:18:19:89:79:20:f5:df:e6:e3:3a:41:4d:5f:
17:53:90:91:85:de:b6:2f:62:b8:36:18:f9:69:71:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:21:49:04:80:46:7C:75:53:A1:01:1B:C7:CE:3F:25:A6:AB:CE:3D
X509v3 Authority Key Identifier:
keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:95:b2:24:94:02:c3:1a:d3:8e:c2:83:09:45:a3:9a:a9:5b:
a3:9f:ed:5d:4c:02:13:92:1a:67:7e:a9:ae:11:09:22:16:51:
53:2a:36:ef:dc:3b:b7:b7:a4:e9:60:fb:6f:30:d0:ea:3b:24:
b5:73:d9:ae:08:58:50:8f:9d:08:e8:4c:f3:6f:92:4c:b8:2a:
3d:f3:af:5f:35:d0:cf:2c:4b:a1:4d:86:a3:7e:a1:34:5a:85:
45:e6:7c:87:79:45:41:d7:75:ae:d0:46:3a:0d:83:4a:28:5c:
9f:17:21:cb:78:5d:10:15:ea:b1:c1:eb:36:1f:46:ea:b8:ce:
8e:bc:21:c9:5a:75:7e:b7:e2:db:7c:db:9a:6b:d3:bc:a3:2e:
89:47:b7:81:9d:f4:1b:86:8d:a7:fd:40:3f:3b:92:73:45:d1:
b8:c7:60:77:19:14:dd:5b:65:7a:54:a2:78:56:61:5f:ab:4d:
57:5f:35:66:b2:91:a1:45:02:71:3b:b9:01:47:fd:2a:4d:bc:
f2:a6:c8:5d:a0:17:d1:10:40:73:06:64:06:a4:14:85:50:e3:
4d:3d:66:07:16:70:87:fa:02:cc:fd:b3:c5:1f:38:3f:1f:eb:
63:d8:00:f7:e4:85:99:36:8c:e4:d5:d6:33:8e:27:71:c6:7f:
32:d8:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:59 2026 by rpki-client