
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json)
Hash identifier: If5LTNs7UT9CORcIQDyjeCs0HZvPicKbGFb8l2bILUg=
Subject key identifier: 7F:3C:F8:FB:48:18:4A:B2:32:A1:2C:FA:5D:CB:E6:2C:BB:4B:C4:25
Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
Manifest number: 74
Signing time: Tue 03 Mar 2026 07:28:45 +0000
Manifest this update: Tue 03 Mar 2026 07:28:44 +0000
Manifest next update: Tue 10 Mar 2026 07:28:44 +0000
Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: 3NM7Eu9+HeZ+rKyrMRBKv55NSE+WbQI7jERkcw/JApI=)
2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: aq1rkL3lbBFNGSwriSfEgnoepxf49LO+cuY4rWY4wMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Validity
Not Before: Mar 3 07:28:44 2026 GMT
Not After : Mar 10 07:28:44 2026 GMT
Subject: CN=69a68dad-3c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:42:86:cd:28:23:a0:54:0f:1d:aa:db:2b:
e0:ed:91:ad:d8:f8:b5:4d:38:dd:be:af:84:7e:ff:
3a:09:27:09:39:6d:75:a6:d9:a7:9a:37:df:44:10:
bf:5e:98:8b:ac:76:61:03:b7:1c:dc:12:6f:66:b0:
89:5f:02:89:fa:28:0d:16:b9:06:19:a4:19:c3:c4:
c8:f9:a7:9e:3b:8d:c4:dc:f4:1b:bf:e7:9a:7b:74:
55:66:22:ea:e0:6c:84:e3:ab:1e:91:15:99:f0:0d:
cb:c8:97:73:b3:ab:71:6c:77:b9:c4:5e:06:ff:0f:
7b:1a:2a:30:67:2e:91:b7:45:d8:57:d2:07:a0:06:
dd:79:4f:02:a5:0a:cb:01:4c:4a:de:90:11:49:4b:
79:97:c2:5d:0a:33:f4:96:84:b6:ea:a7:2a:b4:d5:
0d:bb:a8:e2:d0:35:18:fb:e9:91:5c:19:d9:e3:06:
b2:34:82:9b:f9:2e:e0:9c:d6:e2:84:6a:29:0c:3d:
46:ba:f3:d2:df:79:06:fb:b2:5f:68:ec:ae:77:de:
53:2f:2b:96:a4:d1:c3:8c:da:7a:50:28:c8:87:08:
52:ad:00:42:04:a5:6d:9d:cd:50:48:41:78:66:ca:
b0:49:e1:9c:89:7b:89:98:8f:aa:e2:3d:d7:ca:aa:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3C:F8:FB:48:18:4A:B2:32:A1:2C:FA:5D:CB:E6:2C:BB:4B:C4:25
X509v3 Authority Key Identifier:
keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:81:f2:56:b1:55:9f:ec:ff:33:2b:b8:56:9e:00:2a:31:d6:
c0:44:7d:64:35:dc:2b:55:f9:b8:4a:cb:4c:e0:c0:ac:df:d6:
af:13:42:73:75:1d:25:24:d7:44:17:51:df:a1:8d:a7:0d:34:
2d:a6:24:d8:c7:74:83:72:a7:89:e5:13:4b:cc:6e:51:33:c6:
34:55:8b:38:75:4b:cb:8c:55:e1:52:3f:b9:0d:70:70:e9:5b:
1c:40:b1:e6:42:20:ac:e7:0f:0f:60:f5:90:8c:11:27:f3:48:
ed:33:6f:c9:bd:20:08:13:e8:40:51:ee:8b:54:76:a0:c3:fc:
5e:07:7b:5f:ed:b8:c1:d5:08:d6:2e:88:43:d0:0d:fd:52:bb:
6c:18:cf:42:3b:e7:f1:92:41:1a:f3:32:bf:42:6b:fe:92:43:
73:c1:fe:2a:cc:b8:63:4b:69:c5:bf:79:42:9c:55:08:a9:a5:
75:eb:bb:20:ae:cd:2c:7e:c6:1d:a2:e5:46:d5:e7:4e:6e:03:
7a:3d:3d:7e:e5:89:54:69:e3:06:50:02:c1:32:f2:0c:39:c4:
f7:f7:ae:f1:07:f7:93:ff:5f:99:6d:e0:03:b9:ee:9a:99:8b:
66:30:35:28:0c:4e:ac:bb:f2:c5:ff:0a:ec:d5:4a:47:d1:04:
0f:e5:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:30 2026 by rpki-client