
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json)
Hash identifier: z5HJZW2cnuoLzlJh1s8DhwH8b2S1D3XmrWSA7zEy2d8=
Subject key identifier: 49:7A:66:7F:4E:DC:CE:99:E8:37:44:15:48:C0:D6:47:42:F1:3E:8A
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial: 1985
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
Manifest number: 194F
Signing time: Tue 10 Mar 2026 16:18:40 +0000
Manifest this update: Tue 10 Mar 2026 16:18:39 +0000
Manifest next update: Tue 17 Mar 2026 16:18:39 +0000
Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: oXfRqGWeYAmt4z2INfbzkyFx/zaECI68Dyn+/ZxYkWU=)
2: A6ACA298858911E88026B416C4F9AE02.roa (hash: xvpQufWbZtoOPenCGqByU4W+/Qf1CoRrTb220/EylgU=)
3: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: aHUYKJz3swuqsMEmIFAJ0GsRrZYFSKs8JsA+7j3SS9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 16:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6533 (0x1985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Validity
Not Before: Mar 10 16:18:39 2026 GMT
Not After : Mar 17 16:18:39 2026 GMT
Subject: CN=69b0445f-e951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:85:28:c4:08:d9:d8:4f:e8:9d:f6:45:eb:
26:a4:5e:39:1e:0c:ce:cc:8b:36:98:ec:79:10:d8:
86:b9:8f:ed:19:d1:c8:5e:cd:a4:66:74:ae:af:5f:
3b:1a:c5:3f:11:67:d7:e4:8f:e9:11:d9:81:9a:9d:
e8:25:e7:1e:eb:3f:fc:6a:d9:aa:82:74:64:e7:ac:
4e:19:89:f0:65:f0:81:3b:de:e4:8a:d4:47:3b:11:
16:7a:bd:75:33:93:5c:8f:cb:7f:4a:7e:aa:5e:11:
31:1b:40:e7:9e:f6:a2:b8:51:0a:eb:a6:61:b3:38:
78:09:34:80:e1:76:4c:74:7e:fe:13:0b:11:d3:4d:
00:52:ce:70:6a:71:87:bc:db:67:b5:c8:80:c3:bf:
d5:3d:58:41:f6:82:a2:19:cd:7b:bf:c2:40:27:05:
14:da:31:24:46:1f:ee:1d:b7:a1:de:63:cb:a6:6b:
bc:2e:5e:cb:b9:ba:58:7e:a4:e9:00:4c:16:64:66:
e9:91:96:3f:e5:de:39:d7:22:4a:ee:7d:76:74:6c:
92:fd:32:27:1e:02:47:d9:91:b2:65:55:22:78:c3:
31:98:b7:c1:79:c1:80:1d:65:6c:7d:5d:9f:97:47:
41:7b:07:e1:4f:25:97:f8:04:4b:04:c0:88:74:17:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7A:66:7F:4E:DC:CE:99:E8:37:44:15:48:C0:D6:47:42:F1:3E:8A
X509v3 Authority Key Identifier:
keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1f:7b:00:b5:75:07:54:96:62:1e:7f:3d:07:e2:cd:16:be:
56:de:6b:15:58:8b:cd:4e:b6:25:15:f3:3c:1b:e6:91:e1:87:
56:1a:a7:2f:80:57:7f:09:47:31:24:63:b8:c4:f5:2a:29:24:
ad:40:40:b2:a2:59:55:78:c9:d6:5b:73:13:1e:e7:7f:84:71:
73:78:41:c1:45:43:b6:8f:4e:20:b2:3a:8b:b7:69:46:14:40:
3c:54:c4:4c:c2:30:4b:0d:58:da:50:f5:b1:3c:93:27:8b:3c:
00:13:d7:de:fd:31:ea:79:95:29:2f:e4:18:3b:69:05:8f:01:
48:00:48:39:d1:1b:79:bc:1d:bf:37:d1:b9:af:2c:04:92:a0:
c0:d8:04:f8:f4:b1:49:fe:20:06:7e:ff:45:12:df:c6:a6:a2:
4d:98:05:d2:77:c6:77:7f:dd:dd:60:39:94:43:2f:6e:53:1b:
52:e3:43:8f:b5:df:e2:72:b4:c0:bd:d1:5a:e9:33:62:02:f5:
30:e4:5a:19:53:73:8a:05:9e:3b:90:ff:0d:9e:79:97:77:a9:
ef:db:33:96:a8:3c:9a:2d:d1:10:7a:62:f3:b6:a0:97:f5:82:
4a:67:0d:6f:43:49:c8:91:0b:7e:ec:d5:81:e0:68:04:72:60:
c9:ed:38:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:33:29 2026 by rpki-client