
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json)
Hash identifier: C7JbQ2P3IDeh46qivuKJ8/OfYyJnsweRmjWR8PuRzIc=
Subject key identifier: 3E:BF:88:96:56:54:39:5E:A1:29:2F:21:72:20:06:BC:40:1A:64:C2
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial: 0559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
Manifest number: 0551
Signing time: Thu 12 Mar 2026 22:59:20 +0000
Manifest this update: Thu 12 Mar 2026 22:59:20 +0000
Manifest next update: Thu 19 Mar 2026 22:59:20 +0000
Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: 0jPdxYpQCL7Kwkkb7kEqRMsQ6tPxYb+gFM3kwm9gE24=)
2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: W1EP3IxXiJCk2UOf11rTChQuuxRnXDrkYltbGuUo73Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Validity
Not Before: Mar 12 22:59:20 2026 GMT
Not After : Mar 19 22:59:20 2026 GMT
Subject: CN=69b34548-e65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:0c:80:7a:ff:cf:e7:8b:c0:3b:43:e4:ed:
c3:3f:94:b0:98:68:9b:86:7c:d3:b1:f5:40:eb:ce:
6a:1f:48:da:34:0e:49:16:02:ce:1f:97:2c:31:72:
6e:f8:26:38:18:64:45:b6:68:1e:5e:12:bc:b3:76:
b4:d0:56:10:67:35:26:d6:70:3a:08:5b:ca:7f:6d:
d1:d0:4f:07:38:cb:18:50:e9:3c:b3:32:90:e6:38:
69:8c:5d:fd:2f:c4:bd:50:e5:ff:18:3c:0e:3b:2c:
02:d5:30:50:db:ab:99:95:7b:85:94:f1:ed:29:6f:
52:d6:18:2c:51:96:58:28:6f:00:a4:6b:4a:21:ef:
f9:66:26:0f:26:9f:04:f0:e4:01:5d:79:7b:04:4e:
1d:03:bf:ee:9d:bd:61:ca:a6:51:11:72:09:a6:97:
0b:fd:88:e5:d5:ff:b6:e4:bc:b6:b5:98:18:80:b5:
69:be:26:a8:e0:07:d4:28:79:54:1f:d6:fb:90:77:
1a:0f:49:ad:9e:e6:fc:94:ce:4a:34:44:b7:38:82:
3b:1f:fc:93:45:dd:f5:e8:cc:44:eb:df:d7:8e:b7:
48:da:24:71:3c:22:91:f1:24:15:d6:94:aa:4d:35:
ba:4e:57:a5:0c:61:e7:78:46:f2:84:d8:ec:52:0e:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:88:96:56:54:39:5E:A1:29:2F:21:72:20:06:BC:40:1A:64:C2
X509v3 Authority Key Identifier:
keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:f4:97:5b:3d:21:ac:af:50:38:79:cb:a3:14:51:4c:ff:33:
7c:6e:11:bf:03:aa:85:be:40:f6:3d:6b:c1:d7:37:be:81:75:
fc:b4:30:80:26:73:44:93:a2:69:fc:c7:88:82:ab:cc:bd:5e:
2f:ef:9f:ed:11:1d:60:88:6d:7b:7d:fc:bb:23:a9:f0:51:ee:
9a:cf:ee:4e:35:b3:74:cf:d8:e3:f2:43:f5:dc:68:d6:0d:aa:
c2:80:e4:f0:a9:4b:0c:76:a1:1f:8d:e5:90:b9:76:98:aa:84:
d8:32:e6:6a:a2:36:58:3c:28:eb:31:f0:8b:63:ee:aa:53:f0:
95:bb:bf:11:e4:ff:fb:c8:cd:7f:16:d9:47:d6:a0:bf:ee:b9:
fe:5c:c8:a4:d6:2c:16:23:6d:32:73:29:b3:5b:c3:43:f9:cc:
ee:5a:1f:57:9a:a6:62:29:cb:fe:9c:13:d0:e9:b1:79:20:77:
23:41:dd:b9:0d:d2:20:80:31:a2:ab:8f:b1:dd:25:73:c5:3d:
9b:f5:d3:0f:ce:1c:f7:02:a4:0b:e1:e9:c7:76:81:83:b4:12:
68:55:ff:86:04:73:1c:52:d0:0b:7d:8a:fd:da:00:1e:c4:4a:
42:6c:43:f6:7c:9f:33:8b:d4:33:e2:02:f5:23:20:09:2a:c0:
f3:ee:8c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:32:50 2026 by rpki-client