
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json)
Hash identifier: 000HNoqJmg3GVHtfrD3emh9w3mvX894+dNbgE1ld6R0=
Subject key identifier: B5:07:5E:4F:EA:35:80:92:69:29:69:EF:5C:E9:BA:A8:C4:B0:38:ED
Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83
Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
Manifest number: F0
Signing time: Tue 03 Mar 2026 05:57:54 +0000
Manifest this update: Tue 03 Mar 2026 05:57:54 +0000
Manifest next update: Tue 10 Mar 2026 05:57:54 +0000
Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: 9z5+P/WJjeYUkb9pXebKnef5B/g1mH00lloD4lIhHYY=)
2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: BlH8Xk0kzBiozFJjPmw7XW6Pj9SWlczSEjr5/xVVi+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl
rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183
Validity
Not Before: Mar 3 05:57:54 2026 GMT
Not After : Mar 10 05:57:54 2026 GMT
Subject: CN=69a67862-05b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:f1:22:e7:17:74:3d:e0:ac:5b:2d:12:40:
b8:a6:ba:21:a7:3a:3f:ad:7a:b6:c8:86:5a:73:10:
ab:5f:99:bb:00:7f:ce:f3:93:58:18:53:bf:42:25:
80:3b:81:8c:6c:d1:53:5f:81:b1:6a:86:0d:0a:8b:
cd:d2:10:f5:f6:8e:bb:e8:41:ab:1f:a1:15:43:29:
ee:5e:67:b2:76:f9:9a:ad:45:6c:a8:80:3b:4a:c6:
ae:22:51:a6:23:42:60:3e:ad:54:02:8b:e5:67:8c:
df:50:8e:1c:54:38:8f:af:9b:27:3f:a5:59:2c:95:
fa:dc:de:e3:0b:83:37:9d:78:b6:bc:8b:2e:84:c8:
47:de:f8:9e:20:3e:aa:2e:4d:95:cd:0e:e8:51:0a:
1c:fa:ce:8d:7b:ed:75:cf:96:7f:6a:23:5a:e4:e6:
c3:de:d6:70:27:b8:0c:d6:48:b1:36:a0:76:f6:1b:
b4:51:60:be:86:f0:c4:28:f2:10:09:9d:5b:3b:07:
ec:f6:d2:b2:7e:51:e0:0a:a2:7e:74:9e:45:51:c5:
f1:75:f8:98:28:57:32:9b:fb:e7:5a:25:12:c7:9f:
8b:73:de:dc:a9:10:f4:31:a5:ae:1c:77:bd:4a:ea:
d0:b5:0c:e6:62:ff:ad:4b:a0:3e:77:12:48:49:f4:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:07:5E:4F:EA:35:80:92:69:29:69:EF:5C:E9:BA:A8:C4:B0:38:ED
X509v3 Authority Key Identifier:
keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:c2:b8:06:1a:2d:d5:51:46:6f:83:49:49:26:1b:4a:e2:9c:
cc:04:cc:a6:c6:8d:e6:5b:89:5b:00:98:8a:72:c2:14:f8:99:
4b:53:36:1e:43:31:e1:fe:75:80:40:ff:52:cf:b1:59:21:0f:
f1:78:8f:03:39:f0:03:da:4d:27:39:d6:ce:eb:d9:19:ed:33:
f9:c0:e1:e7:c2:9f:8c:bc:f0:10:71:27:12:f3:9d:4a:c6:ed:
2f:50:69:3f:a7:d4:d1:4d:27:5e:a7:c3:9a:00:51:3e:d8:0c:
b0:fb:33:2c:46:c0:ea:4e:35:99:40:3b:77:b1:04:9f:66:ff:
a7:3d:6e:f8:f8:8a:d7:25:f2:ba:67:49:f2:9e:0b:d5:fc:0f:
5f:c2:59:cf:f1:15:a4:df:5d:76:51:16:51:6f:3e:cb:74:15:
52:08:96:c8:80:d7:f6:25:65:fb:cd:70:6b:e0:35:f3:af:a0:
af:80:53:87:10:97:81:25:4d:60:2c:9e:dc:57:84:ac:be:04:
91:cb:6d:75:8d:2c:6b:15:07:ce:a5:88:3f:4a:86:ce:bf:a9:
b1:0f:a3:13:6f:72:36:f7:c9:c3:28:eb:57:1e:7c:ac:6f:83:
ef:d9:ad:25:a0:e7:00:bb:3c:7b:2d:73:b6:16:f0:03:fd:a3:
27:97:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:02 2026 by rpki-client