
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
File: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json)
Hash identifier: VG8oDqmeESNpVgWt2qxL6UDKXgEihd9pzWaI7qiSt7I=
Subject key identifier: 57:F2:F0:0C:76:12:FE:D3:42:A9:2D:EF:B4:F6:61:CF:DF:17:94:A1
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial: 0767
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
Manifest number: 073E
Signing time: Sat 28 Mar 2026 21:39:57 +0000
Manifest this update: Sat 28 Mar 2026 21:39:56 +0000
Manifest next update: Sat 04 Apr 2026 21:39:56 +0000
Files and hashes: 1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: jFDX/9KpkHw+hHNVbIlysnnNPeGWJMkxUb+Vy8AOimk=)
2: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: 2y6pngdy3VaJox0s8pfK9rakpIMWuD3VB+a0Z5gajdg=)
3: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: ihifcD/OgCnAwEJmq3VgBulyBofXdrsgswWXwBfpEAs=)
4: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: VjbMobQvQG1H/kBq1Ab65vmDSUppWTgILjZtbnNdDsk=)
5: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: AF8Guce4RO4Svw7K45PwgWF9YPRlLDoCQm5gXdcSPh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 21:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Validity
Not Before: Mar 28 21:39:56 2026 GMT
Not After : Apr 4 21:39:56 2026 GMT
Subject: CN=69c84aac-6c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:60:d5:2b:39:67:5b:83:ff:37:a5:a4:54:74:
08:42:35:c8:76:14:85:a9:92:77:bd:d4:f6:3e:8d:
ac:d4:8f:25:6f:29:81:2c:95:9a:58:80:48:1f:ac:
c1:93:db:40:0e:74:b8:b6:1e:a6:7e:0a:f5:46:47:
07:0d:ab:33:55:5a:e9:8e:55:28:b4:06:83:c5:b0:
1a:de:a7:57:be:a6:05:88:ee:29:1f:cd:d1:7f:a3:
73:be:db:ed:ef:cc:77:22:b6:31:9d:c4:c4:1b:7e:
cd:2c:e9:09:9b:8c:6f:fb:67:79:12:7f:38:2c:ad:
e6:67:96:9f:74:8b:32:b1:f1:b5:a3:9f:5b:79:24:
c3:76:49:7d:74:db:ba:af:75:aa:70:8e:7a:86:9c:
e5:2e:2f:e8:73:6b:41:37:ee:f4:23:85:11:3e:fa:
9f:fc:73:4c:26:ab:8b:d4:bf:1e:2a:03:2d:4c:98:
83:bb:3e:8a:50:39:f3:e4:50:17:6d:13:e6:a5:3c:
f5:a5:90:39:a2:1a:fd:69:04:17:a8:ae:b0:1d:c8:
c0:a4:07:b6:93:2a:96:eb:bc:b0:95:ab:65:95:5a:
42:f4:f8:2c:66:e2:ae:3e:d2:fa:57:02:24:5a:d3:
39:ad:41:ea:40:9d:f5:b7:54:c9:24:05:cd:7d:1a:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F2:F0:0C:76:12:FE:D3:42:A9:2D:EF:B4:F6:61:CF:DF:17:94:A1
X509v3 Authority Key Identifier:
keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:30:87:59:9a:c8:da:f3:13:a4:45:7a:5d:b0:d1:90:af:8e:
31:ba:b0:22:8c:aa:72:d0:c3:16:f4:57:43:ae:ae:0b:57:6c:
8d:06:0f:77:85:54:f6:c5:16:ca:02:11:6a:a7:d6:8e:55:5f:
db:87:6e:6c:3f:d5:85:8d:f1:03:1e:68:cf:c7:70:cb:06:c4:
4d:d2:73:cc:29:ea:19:71:fd:97:f6:d8:d7:61:b3:66:7a:9e:
d3:01:06:fa:f6:6c:a8:bd:f7:3d:ee:d4:4d:17:62:e7:76:fa:
7b:a8:ee:52:15:83:80:dd:26:d2:63:95:6a:d7:7c:4e:76:f1:
e6:c4:7c:61:62:1a:d0:c7:ba:48:23:c1:f4:7e:e1:b1:ff:31:
82:2c:a2:fa:2a:d9:65:12:e7:2c:2e:81:9e:a8:d0:81:f7:90:
80:85:1d:0f:d6:55:a1:96:e0:1d:c6:87:89:37:31:48:77:83:
63:ae:fc:ff:56:70:d7:5e:d4:2f:ec:7f:bc:98:c4:73:e1:51:
53:5c:24:73:7c:5e:9c:45:e9:3f:b9:fd:f5:ef:47:45:e7:b9:
b6:14:b5:86:e9:19:8c:a0:73:0a:d1:59:ab:95:07:2d:82:8b:
af:6c:f5:d9:41:e7:c4:33:2f:56:1f:85:50:0c:09:ed:cd:53:
fd:a5:50:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 17:27:32 2026 by rpki-client