
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
File: rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft (raw, json)
Hash identifier: TI32woN+ruQ5FNaJKj667BYzP7tZMSQl6uduNmSbcv4=
Subject key identifier: 55:01:39:94:D6:BA:59:15:43:3B:01:19:03:E3:97:62:45:65:97:79
Authority key identifier: AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D
Certificate issuer: /CN=A91ED65C/serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
Manifest number: 0A
Signing time: Sun 29 Mar 2026 08:47:37 +0000
Manifest this update: Sun 29 Mar 2026 08:47:37 +0000
Manifest next update: Sun 05 Apr 2026 08:47:37 +0000
Files and hashes: 1: rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl (hash: qUviLOpr2ztcKq3hwSgkHB9QgcEb3TMUnuAj0fDYx4k=)
2: 39CF61B81E3F11F196621670303D8C67.roa (hash: zPRyj4utwiTX5jFvUWAD+F2yXKjyPz2qiUDVnqyk25k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl
rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 08:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED65C, serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D
Validity
Not Before: Mar 29 08:47:37 2026 GMT
Not After : Apr 5 08:47:37 2026 GMT
Subject: CN=69c8e729-9083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:43:20:49:f9:83:66:8f:bb:58:0b:6d:f3:
59:4d:cb:ff:41:0e:81:8b:a7:82:84:eb:ad:74:d4:
92:2a:98:84:fe:32:22:a3:0f:06:eb:83:1f:bf:e3:
39:94:eb:bc:cd:0e:72:b8:c1:f4:1f:44:11:84:e7:
1a:a0:27:ec:df:6e:a6:36:79:d3:e3:ef:a5:f3:16:
8e:de:c9:19:9c:b5:81:6b:6c:31:68:9b:91:a1:08:
b1:78:87:68:f9:b9:c5:0c:0f:b9:f2:1e:f7:1b:3c:
d4:94:5b:93:60:2b:bd:8a:8d:65:ce:6f:1a:7a:ad:
aa:04:ab:ff:0f:90:76:ba:09:3f:15:0e:e8:14:31:
00:0a:2f:ec:16:bf:0d:c9:d1:8f:b6:c9:8f:dc:2a:
5b:08:3b:df:7c:c5:4e:68:e6:1b:7b:98:24:15:bc:
29:d9:79:23:2d:e2:10:7f:2d:12:c9:9b:05:59:78:
38:25:8b:39:29:a7:4c:52:08:b8:5d:f4:4a:9d:80:
b7:ba:7e:68:cf:a6:88:a4:52:b3:ba:22:12:c7:1c:
ba:e0:62:5a:f9:68:40:eb:08:f1:5f:03:7b:8c:5c:
2e:7f:a3:45:50:6e:c6:be:7b:c4:b4:4b:cf:ce:2b:
79:41:0b:48:2c:9b:72:f8:5d:e2:d8:17:e4:2a:1b:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:39:94:D6:BA:59:15:43:3B:01:19:03:E3:97:62:45:65:97:79
X509v3 Authority Key Identifier:
keyid:AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:6b:a8:a7:54:8c:6e:cd:61:b3:8b:cc:02:53:de:3c:2e:c5:
6e:76:12:73:c3:4d:61:37:93:6f:10:47:24:1e:7f:21:b8:8f:
6d:ab:d2:ce:d6:bd:90:0d:0a:a3:8d:79:6d:3b:67:11:b9:aa:
2b:08:b8:87:75:1a:65:c8:83:04:68:1e:2a:b7:c7:4b:5c:cb:
10:07:16:ca:31:61:f8:3e:a0:f5:cf:36:32:15:00:33:87:bc:
1e:62:1d:33:a7:d5:16:0a:d3:32:1b:3c:2d:08:96:57:ec:f2:
47:47:a2:63:40:fc:68:fb:67:d3:5d:f3:32:6c:76:20:be:40:
93:9a:79:36:c9:c9:a2:47:d7:45:23:fe:17:81:4d:43:61:1c:
26:7f:0b:9b:d4:e4:32:b5:9b:38:2a:ea:f5:ed:3a:36:2e:3f:
2b:9b:2a:af:a5:43:e7:d6:15:37:52:46:7b:62:89:db:5c:e6:
62:11:8d:0f:0b:97:07:bf:53:ab:1d:85:fd:f2:48:8a:9d:a0:
31:de:9b:c3:d4:6b:a8:c1:30:c4:f7:13:0d:4b:be:8d:1b:02:
6a:2b:1a:78:bf:37:15:21:60:e3:da:e3:fa:42:50:a6:c3:e2:
7e:28:b7:e4:60:bb:4b:71:c1:a9:7c:56:0f:bf:68:99:f8:aa:
5c:08:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 00:41:54 2026 by rpki-client