
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
File: exUBXdufhEEqZ9s-Jv7LTdy72YA.mft (raw, json)
Hash identifier: u07gRl280Lepp6IGzuxab3tEM9yLI0PIOZwIb7wKhbo=
Subject key identifier: 71:E0:4E:65:B0:41:C5:3C:D5:F2:92:58:6E:36:A7:7E:FB:B2:68:BA
Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
Certificate issuer: /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Certificate serial: 078C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
Manifest number: 076D
Signing time: Sat 28 Mar 2026 21:31:22 +0000
Manifest this update: Sat 28 Mar 2026 21:31:21 +0000
Manifest next update: Sat 04 Apr 2026 21:31:21 +0000
Files and hashes: 1: exUBXdufhEEqZ9s-Jv7LTdy72YA.crl (hash: ukKJ5Zf5WyyeGln7r36+puhrtli8qA+75ausBUZobSU=)
2: 4FB0329A827311EBAB565A86C4F9AE02.roa (hash: tQ+0QPRWhuVmQFBAmyQbfomAoZ845RNX8u98yKRH9zI=)
3: 0F83E674B45611EC8D43DA35C4F9AE02.roa (hash: AZFFvvpWxnilxy4IK+Rl3jT7ZxfVA62vfLkMMczuUH0=)
4: 76F636C6C13111EC8B2DD839C4F9AE02.roa (hash: 0wR/rhOxWSgg23pdfwy7r6LKP60Cetj8iF61Y/rz+os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 21:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Validity
Not Before: Mar 28 21:31:21 2026 GMT
Not After : Apr 4 21:31:21 2026 GMT
Subject: CN=69c848aa-cb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:17:cb:ba:dd:6d:7b:ca:f9:5c:cb:2f:9c:
46:ca:ef:42:32:14:05:24:1c:80:eb:63:57:35:4e:
ba:f2:ad:b5:81:f2:b9:2a:38:8b:92:ad:60:98:d9:
f4:7f:20:fb:9d:c6:03:2d:24:d8:a6:e5:de:55:bb:
3f:72:a0:f0:b1:31:12:9d:51:00:5f:2f:fd:04:4f:
cb:d7:41:57:6a:3c:03:05:7e:7c:aa:2a:9b:18:79:
01:5f:77:c1:20:24:c3:49:ba:de:bd:3d:66:f3:40:
b7:05:bb:ac:25:f0:d8:47:19:cf:04:65:de:83:9b:
28:87:33:1d:05:36:ce:df:ff:82:32:fc:1f:ee:78:
eb:b3:34:41:45:48:fd:ff:aa:bb:17:94:3e:8d:77:
1e:7b:e4:19:5a:35:60:b2:bc:26:ed:bd:85:ac:4a:
84:56:a9:11:0d:22:94:c4:4b:61:b0:e5:c0:40:78:
0e:a7:97:0a:2c:ca:c4:94:b5:30:e4:63:7d:fe:62:
f7:88:cf:c0:15:b3:7a:16:b7:fb:0e:77:5b:79:42:
5b:0d:63:fd:bf:33:92:61:a3:5b:6f:6f:f6:cb:68:
f8:f0:be:02:e1:56:65:49:12:6b:51:2a:87:da:21:
c0:1e:1d:c8:1f:04:79:6b:bc:61:35:39:b5:f1:15:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:4E:65:B0:41:C5:3C:D5:F2:92:58:6E:36:A7:7E:FB:B2:68:BA
X509v3 Authority Key Identifier:
keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b3:15:a3:47:11:1e:ae:ff:16:52:a1:28:e3:bc:f1:06:d2:
4f:47:aa:b8:f6:03:12:1d:20:b8:15:ce:dc:b9:f1:b3:9d:e8:
07:8e:2f:03:49:ea:07:1e:9d:a1:16:9f:52:70:dc:37:24:21:
e4:45:af:bb:d3:61:dd:27:ea:0f:4c:b1:e3:8c:ee:3e:21:76:
fc:30:46:f6:6a:ed:11:a3:e5:d6:c4:93:80:04:0f:b7:12:64:
c4:84:af:3f:04:55:90:b2:46:e0:cb:86:fc:db:38:83:a4:d6:
f0:02:2c:82:57:74:ba:e5:3e:58:74:7b:00:cc:49:58:8e:a0:
b9:a1:9c:0b:3b:09:af:9c:db:a7:4e:55:17:49:39:3f:32:28:
f8:47:c0:99:3f:24:f4:36:fa:3a:a0:cc:3c:9e:9d:34:d7:f2:
71:5a:e1:1f:c0:b2:8e:17:a4:e9:6c:d0:74:68:3b:dd:40:45:
68:ad:7f:25:d9:10:43:89:01:c2:f2:bc:af:82:3f:af:5c:eb:
af:6c:05:08:af:54:f8:5d:1d:0f:bd:99:cf:dc:be:01:6b:bd:
8b:b7:8f:da:38:00:a6:99:51:56:d3:fb:ba:9f:f4:cc:e5:75:
5b:8a:bc:04:5f:a8:dc:00:43:e5:28:ae:de:c9:e0:a5:a8:14:
8c:39:89:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 17:44:26 2026 by rpki-client