
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft
File: 1929C75jT2f_WMtqZhL6rTP4cEc.mft (raw, json)
Hash identifier: K47D0T2I3HQYLBQIPH10TBZ14ENSQHBMy1aEALi7ib0=
Subject key identifier: 37:56:7D:45:D3:84:2D:CA:59:4F:CB:B4:EB:91:7A:D4:9E:D4:74:86
Authority key identifier: D7:DD:BD:0B:BE:63:4F:67:FF:58:CB:6A:66:12:FA:AD:33:F8:70:47
Certificate issuer: /CN=A91DA5F7/serialNumber=D7DDBD0BBE634F67FF58CB6A6612FAAD33F87047
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft
Manifest number: 1E
Signing time: Sat 07 Mar 2026 08:07:09 +0000
Manifest this update: Sat 07 Mar 2026 08:07:08 +0000
Manifest next update: Sat 14 Mar 2026 08:07:08 +0000
Files and hashes: 1: 1929C75jT2f_WMtqZhL6rTP4cEc.crl (hash: MAWHEE/DxXs+2P8jvZapBZSv1vHfSBM7UrIxCS3nkZo=)
2: 3061C022F1F211F0B442E9B1456F56BC.roa (hash: yVZM9wIf/Y6hAa7HZ+B2izj2yBzbhyTFipocbEptqMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.crl
rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 08:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA5F7, serialNumber=D7DDBD0BBE634F67FF58CB6A6612FAAD33F87047
Validity
Not Before: Mar 7 08:07:08 2026 GMT
Not After : Mar 14 08:07:08 2026 GMT
Subject: CN=69abdcad-c954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ea:69:a2:98:62:17:8f:b7:42:34:16:77:5d:
6c:32:ca:45:34:3a:42:17:0b:f8:ba:c9:89:d0:26:
06:36:e7:ca:23:46:b4:07:ac:cb:20:80:61:ca:6c:
98:cc:a6:7b:14:8e:51:8e:ff:61:a6:87:9a:55:d4:
99:b9:bd:fd:82:4e:e5:17:59:b5:89:18:0d:78:79:
b3:9e:06:7a:93:c2:76:2b:73:01:b4:8e:7e:e7:b7:
ea:7c:4a:83:18:3e:89:2a:7c:60:33:36:1b:51:f3:
aa:3c:33:a3:ce:7e:8f:cc:17:33:a4:dc:e3:b4:79:
52:30:ae:aa:ec:16:68:35:2c:9c:50:6d:22:61:23:
78:60:f1:f7:9f:f9:4f:56:aa:b4:6f:d1:5f:44:12:
02:89:2f:89:53:1f:55:de:e2:9d:48:6e:32:d8:23:
d2:77:19:b5:94:a6:07:78:f4:30:ac:09:ec:8d:3d:
e8:3a:c5:3f:f9:8a:60:74:76:21:7e:43:c4:80:cf:
06:a0:96:e9:6c:73:89:b9:a2:26:da:f4:83:78:b1:
e8:79:63:7c:80:ad:bd:4e:ab:cf:d6:42:39:20:07:
98:64:5d:d3:56:6c:74:c1:6f:52:f4:91:0c:6b:c3:
b9:38:ce:b8:27:40:97:e5:a3:40:5f:e3:08:6f:23:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:56:7D:45:D3:84:2D:CA:59:4F:CB:B4:EB:91:7A:D4:9E:D4:74:86
X509v3 Authority Key Identifier:
keyid:D7:DD:BD:0B:BE:63:4F:67:FF:58:CB:6A:66:12:FA:AD:33:F8:70:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:d5:1b:e1:fb:0d:64:40:03:55:df:8f:4b:eb:20:3f:c9:8c:
ae:7b:c2:1c:f8:34:a6:d6:02:d9:12:e5:d0:16:fb:cf:15:49:
df:5b:ce:41:b9:c4:21:1c:52:2e:9f:b7:ec:a6:b7:bd:dd:85:
6f:c7:9a:6e:2b:ae:45:23:1c:39:b6:2e:44:59:7e:f5:d8:ba:
e4:d6:aa:11:e2:a2:ec:6b:bc:a0:09:c9:1d:fd:a1:64:ca:2a:
16:0b:cf:12:49:fd:9b:cc:85:49:dc:99:45:78:c0:e6:8a:9e:
f6:ec:e0:c3:02:0c:a1:fe:01:9e:37:5a:bd:0c:de:33:cc:25:
dc:15:a8:4e:b9:63:e4:f8:77:75:1d:94:5e:83:e8:16:0d:79:
ac:ce:df:cb:55:17:e9:93:6d:7d:71:0b:7a:fc:85:d5:19:ad:
be:ab:9d:97:f5:95:f8:17:bd:44:23:db:c9:ae:3d:3e:0e:78:
be:05:57:90:ac:04:5d:48:ff:14:55:34:7a:43:1e:17:8f:ac:
a8:84:cc:e4:8b:ed:6c:80:0f:07:5a:dd:bc:37:87:c2:a4:df:
7a:34:60:06:78:1f:64:97:78:dd:9c:41:6a:fc:84:6f:2b:cb:
b9:ef:21:2b:a2:a2:a3:9a:ff:ea:5e:7f:17:28:22:f8:24:76:
cf:75:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:28:20 2026 by rpki-client