
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json)
Hash identifier: 4rTMQ7T2iM/HzFnjBZZBx2iahNeOdcJeMin7ysa4MSE=
Subject key identifier: BB:5F:D7:9A:B5:2A:2B:23:7D:A2:3A:4C:4F:E1:27:D9:78:CE:43:0A
Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Certificate serial: 0CF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
Manifest number: 0CE6
Signing time: Sat 04 Apr 2026 18:08:21 +0000
Manifest this update: Sat 04 Apr 2026 18:08:21 +0000
Manifest next update: Sat 11 Apr 2026 18:08:21 +0000
Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: O92JETIpDNPqg0ix+pE8HNAE4oqSnaCTTXidbXg2lR4=)
2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 0Bzx3cTQetOlK87DOybR5kJ5yU0elH44slx+HVrYHM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl
rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3314 (0xcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Validity
Not Before: Apr 4 18:08:21 2026 GMT
Not After : Apr 11 18:08:21 2026 GMT
Subject: CN=69d15395-21d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:f9:45:5b:b1:43:c8:4d:17:d7:bb:1c:59:
4e:6a:03:c4:57:6a:f4:ec:5e:89:d1:76:e3:9c:cf:
28:af:9a:b4:54:9f:c6:30:1e:35:91:39:a6:de:54:
5b:bb:a0:8e:fb:ac:c4:48:3a:23:78:1c:13:92:30:
54:9e:a8:2a:b9:54:38:75:45:c8:c5:47:1c:e5:20:
5a:56:f8:16:8a:65:1e:ec:49:cd:85:b3:b5:1b:65:
d6:27:d3:7f:5f:19:eb:a3:b6:92:b9:8b:72:5b:f4:
99:89:3e:06:32:1c:1e:7b:4d:d7:03:8c:a7:58:00:
45:29:35:cf:74:f1:e0:fd:da:5d:27:a5:92:04:38:
54:06:54:c9:28:25:42:7b:80:c3:15:57:f7:41:ea:
25:c2:1e:b4:f3:16:81:a7:7d:eb:9a:9e:7e:8b:23:
a3:70:13:62:4c:92:14:a5:46:9b:76:b9:ec:70:a6:
68:63:7b:0a:61:f0:7d:91:50:c9:8a:ae:e4:b3:61:
e0:de:9c:6d:f1:20:0b:07:98:3d:51:e8:d3:fb:4f:
bb:9c:13:95:15:71:93:29:f4:4e:b4:55:86:cc:22:
d4:05:21:e1:82:9d:90:63:17:b3:7d:f4:4d:f0:a0:
81:6a:f8:8f:47:bc:99:ca:be:2f:8e:41:dc:fe:01:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5F:D7:9A:B5:2A:2B:23:7D:A2:3A:4C:4F:E1:27:D9:78:CE:43:0A
X509v3 Authority Key Identifier:
keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fb:c2:80:4f:9c:a0:00:7c:ae:8d:8f:cf:c6:2c:25:09:35:
5d:59:e8:bb:ff:a7:e9:77:ed:60:22:81:9c:fa:f7:0f:18:f2:
61:a1:f2:0e:e9:48:fe:a1:36:6e:d0:6b:66:cc:8f:08:81:cb:
b0:bf:93:19:b8:c5:6b:69:3a:d3:ab:aa:d5:b6:1f:eb:74:3a:
a0:86:90:81:00:29:ea:96:e9:07:b1:9a:20:9d:5b:ed:d4:6f:
25:57:bf:01:8a:9f:ff:25:0f:1d:65:f4:e1:b0:11:5b:50:4c:
97:1c:4c:09:a2:e6:8d:47:2d:3c:14:40:7a:d7:61:b8:f0:8d:
9c:b3:70:9d:0d:4f:9d:16:e4:f8:b9:d5:56:6f:56:ca:27:a2:
74:91:08:df:b5:30:26:12:42:ad:92:76:4f:c5:4b:e2:6c:6b:
94:aa:fa:f7:93:30:34:c7:b2:7d:d4:f6:91:2a:3e:62:86:a9:
5b:38:18:e2:56:cd:eb:3f:2b:0a:e4:91:85:91:d5:e7:bd:83:
80:44:4b:f9:98:ec:c9:a0:c9:53:75:5a:38:8c:ac:d4:b9:a1:
61:e7:60:1b:3b:de:4b:1c:35:49:26:cd:14:39:3c:4f:5b:05:
5f:6a:ea:eb:f0:74:cb:15:0b:e6:f9:99:97:a4:1d:c0:39:4a:
fa:b5:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:04 2026 by rpki-client