
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
File: p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json)
Hash identifier: VsdkAj7QPl8XuscHXiP6VufRNtnWdUVRFKthkU+X4gM=
Subject key identifier: FB:6F:4B:91:CB:A8:CD:5E:CD:16:FB:26:D7:DF:08:3D:C6:8E:F0:4E
Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
Certificate issuer: /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
Manifest number: 49
Signing time: Tue 03 Mar 2026 07:59:10 +0000
Manifest this update: Tue 03 Mar 2026 07:59:09 +0000
Manifest next update: Tue 10 Mar 2026 07:59:09 +0000
Files and hashes: 1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: /QDWmlNLwKfwvKnxS7RdB0C6eERzDVOJIn74PJFPcp8=)
2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: KbzUtTPtGCQ3I/N5KWpd9MwtuQNamm+9Vruv3vtMr6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Validity
Not Before: Mar 3 07:59:09 2026 GMT
Not After : Mar 10 07:59:09 2026 GMT
Subject: CN=69a694cd-8e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:72:c1:63:a2:95:c0:b6:97:72:1e:54:71:
2c:4f:23:14:2b:76:c4:12:4d:5c:81:fb:40:fc:d3:
69:35:19:ec:6b:83:72:1c:99:45:2a:98:76:ea:94:
4f:76:69:c7:3d:e1:41:54:cf:ff:55:59:ee:01:67:
11:ad:c4:70:f4:f7:0b:57:7d:1f:58:52:c5:db:bc:
92:dd:53:f4:0f:ca:e8:0b:f2:03:70:a1:12:6c:19:
f6:b7:8f:5e:2b:d2:bc:d9:0f:3d:13:0a:4a:8a:75:
4b:ca:13:f7:10:8a:a9:9e:9d:d4:ba:74:d1:9e:c9:
10:19:c7:81:8b:25:e2:cd:8d:20:81:1e:fd:ae:e0:
86:e2:6e:eb:ac:01:cc:c6:ab:73:af:9d:33:e4:7e:
d0:17:a4:c6:76:f3:3d:ce:6b:3e:27:7d:70:10:6c:
9c:72:7f:64:aa:28:7b:e2:85:03:cc:0d:7a:e4:26:
ff:73:3d:5b:72:e9:4f:a7:67:db:a3:af:9a:44:b9:
8a:96:2d:db:7f:cb:63:35:e7:84:8f:80:2c:4d:90:
62:99:9d:8a:bb:3b:c4:c9:b5:55:30:12:e2:be:2c:
80:ad:e2:00:e6:da:db:4b:54:d5:be:94:a6:4e:49:
04:ad:fa:62:bc:43:07:77:87:18:35:85:4d:17:3c:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6F:4B:91:CB:A8:CD:5E:CD:16:FB:26:D7:DF:08:3D:C6:8E:F0:4E
X509v3 Authority Key Identifier:
keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:09:b0:5f:e8:35:d6:d1:c4:7d:a6:f7:fc:3c:0c:0a:3e:26:
52:bc:ea:e9:4e:d8:d8:3b:e0:b4:13:08:3e:37:d8:34:9e:8a:
40:79:14:d6:e9:77:f4:c9:fd:6d:5d:aa:d5:78:d4:01:d2:53:
ac:52:ee:67:e7:96:58:f9:c3:95:5d:e7:b2:85:44:02:dc:75:
8b:c4:02:5d:0b:37:b3:e0:95:e8:59:73:82:cc:f2:36:a9:11:
43:cc:ea:16:76:f0:0a:44:19:ff:33:89:00:0e:3f:b3:b6:ae:
03:8d:9a:5a:b7:2a:e1:ed:43:a8:78:42:86:38:a2:a0:74:11:
af:9e:e3:d4:07:5a:24:7c:55:28:b1:d3:cf:0e:df:d0:e9:78:
6e:5f:65:ee:02:29:d0:08:01:49:16:cf:f0:23:a3:e8:89:00:
f0:e0:1e:54:57:08:fe:d5:65:da:2a:89:09:81:16:77:04:a8:
7a:a1:e7:f1:c8:83:0e:b0:32:4a:05:00:75:a2:a1:e2:74:f0:
c4:4f:a6:f0:fc:30:ed:08:5d:f6:3a:9e:ff:a9:48:a1:56:04:
2d:7b:58:70:3d:09:cf:be:5e:4b:31:06:61:9c:46:63:be:04:
89:6f:9e:d2:6a:9b:96:e0:56:90:75:bb:ed:cc:47:04:b1:b0:
4d:a2:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:20 2026 by rpki-client