
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json)
Hash identifier: BRAdIUOmK/k/EfXTogVFYlfBoQXdrxHF49/zNYs3/1c=
Subject key identifier: 8F:38:95:42:F4:08:12:BD:D5:09:1B:F0:ED:F4:47:9E:58:B6:66:88
Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Certificate serial: 3541
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
Manifest number: 3534
Signing time: Sat 04 Apr 2026 14:57:39 +0000
Manifest this update: Sat 04 Apr 2026 14:57:39 +0000
Manifest next update: Sat 11 Apr 2026 14:57:39 +0000
Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: tpO5DbAcMP0m6xIARQf3LWOFxtNhYbUrdpwvRJ9xgZo=)
2: 991B38BC44E811F0968D8B30C4F9AE02.roa (hash: Ey46KUiipWBFHMSvJf1iTaWHEkjjgiOERViTlngdL/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13633 (0x3541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Validity
Not Before: Apr 4 14:57:39 2026 GMT
Not After : Apr 11 14:57:39 2026 GMT
Subject: CN=69d126e3-66a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:ba:07:c7:41:39:8c:96:f9:c0:3a:c2:5c:
22:b9:7d:de:72:1c:c2:05:b1:2d:e1:0b:d1:b7:d5:
ab:78:6f:0f:5b:02:30:4e:54:08:5d:05:59:e0:92:
93:f4:81:a6:e3:a3:27:f0:8d:42:d6:4b:d1:3a:ec:
ab:cd:42:4f:c4:02:92:c4:62:68:e1:0b:9d:7f:f3:
4f:60:32:bd:a4:82:1a:ec:b7:72:2d:e1:88:6f:96:
43:7b:72:0c:12:ce:75:a0:c4:77:00:7b:e6:a0:27:
9a:be:ee:a7:cd:78:67:0e:cf:b2:21:93:17:26:38:
f3:36:ed:61:ff:86:b8:d7:ac:86:00:c3:c6:7e:12:
e2:b9:50:73:a3:da:7c:8e:2a:0d:a4:bb:2b:ba:33:
e0:0b:ea:14:ee:55:fb:1d:74:71:98:b8:bd:a7:3c:
06:b9:6b:88:c9:60:4e:7f:25:c9:5a:0d:6d:16:55:
91:58:1d:c5:a8:8a:da:47:f8:59:fd:4d:f9:aa:40:
86:cc:92:c6:81:6b:0d:2a:12:3b:74:14:90:d3:99:
1f:76:c2:ef:bd:24:b3:00:ff:d1:be:eb:66:d2:af:
67:e7:c3:44:ac:21:db:3c:b8:da:23:c6:fa:45:5a:
74:98:77:16:e1:6b:52:c6:e0:d5:3c:ac:61:b8:70:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:95:42:F4:08:12:BD:D5:09:1B:F0:ED:F4:47:9E:58:B6:66:88
X509v3 Authority Key Identifier:
keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:9b:d4:70:dc:29:62:a4:b4:48:0f:85:ee:93:4e:78:2d:8b:
8b:0b:6a:c6:fc:1e:b5:dd:62:c6:7e:55:b5:c6:51:5d:e0:a6:
9c:d7:0a:fe:5a:cb:3d:ba:7b:32:87:07:eb:d5:07:fa:48:76:
fc:50:47:d0:7f:39:1d:59:9f:61:bd:c0:8d:84:fd:e2:d7:d2:
de:29:76:38:5e:a2:12:6f:ee:dd:27:48:d1:85:d9:17:8b:36:
d1:88:d6:d2:8d:11:a3:cf:4a:39:f4:68:b7:ec:89:94:22:a4:
b7:45:f9:c4:c9:5d:83:97:4e:a3:e7:7d:01:b5:cf:26:8f:fa:
bf:fc:bb:8f:d8:58:fc:f6:4c:8d:1b:a1:e5:b3:db:57:77:fe:
5f:d1:e6:e2:c4:05:88:31:15:8b:1e:ff:73:91:46:f7:ce:47:
43:c6:38:78:c6:39:2f:c1:ca:7b:dc:42:8d:67:25:4b:eb:dc:
3e:56:41:6e:59:6e:94:2d:c2:62:55:61:51:d2:5a:c1:30:63:
67:56:45:cd:61:87:33:55:95:c4:34:ce:41:c0:7e:36:64:30:
a6:39:bd:04:71:95:be:76:88:af:aa:30:38:4c:23:27:f2:2b:
54:6f:ba:0f:50:59:4c:15:d1:1c:3b:95:02:92:07:28:4a:22:
8f:cf:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:21 2026 by rpki-client