
$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
File: peado7v7jl3TlkjmpD4A-nI95lg.mft (raw, json)
Hash identifier: Do21z5KXSKzoYluK1GV3mM06xi09ykRQ1DMgLmagJ2s=
Subject key identifier: 56:FB:8E:AD:A6:18:D1:A9:4F:55:37:3B:31:83:81:8C:04:75:0E:62
Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58
Certificate issuer: /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658
Certificate serial: 0B3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
Manifest number: 0B32
Signing time: Mon 02 Mar 2026 01:16:05 +0000
Manifest this update: Mon 02 Mar 2026 01:16:04 +0000
Manifest next update: Mon 09 Mar 2026 01:16:04 +0000
Files and hashes: 1: peado7v7jl3TlkjmpD4A-nI95lg.crl (hash: sCsNc6X1eJ98IZJgib/VEYRr4nDRYAVph42lIEcbQ70=)
2: 55BC5674573F11EAA8901D3EC4F9AE02.roa (hash: cOhoUIQZix/btAsubA+Ysc2KixqhxVjFMWCCCLIARVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl
rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2875 (0xb3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658
Validity
Not Before: Mar 2 01:16:04 2026 GMT
Not After : Mar 9 01:16:04 2026 GMT
Subject: CN=69a4e4d5-56d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:af:13:25:38:6b:87:fe:30:17:9c:5c:04:29:
b1:82:2d:92:68:61:12:10:65:87:27:2c:db:ab:07:
22:9f:fe:73:22:d1:22:b9:79:89:a5:60:32:ce:11:
1b:02:98:d3:1d:36:c2:f7:c8:2c:32:ba:a1:99:59:
75:24:99:f7:55:37:e3:54:4f:ad:7d:ac:96:9b:14:
3c:5f:43:a7:55:25:9c:5e:b2:50:f5:50:e7:4d:84:
3b:a2:1a:05:f3:eb:3c:b6:be:4b:58:14:d7:fc:75:
a8:f5:5c:42:90:9d:04:c0:4e:b0:50:43:ed:51:d8:
c5:dd:5b:23:60:50:71:0c:be:79:26:9a:ab:85:62:
54:6c:d5:5c:08:5f:d9:a2:4a:89:be:7e:c5:64:6a:
40:d0:c8:04:67:b1:2b:62:66:53:31:58:af:09:9c:
cd:4c:54:e1:2d:8a:87:7f:eb:a9:6b:4d:b6:a9:37:
83:08:27:1e:5b:f2:2c:e2:f1:c1:61:3c:0b:d4:da:
fc:2b:88:d1:c1:6a:ba:7c:f2:a9:45:3b:d9:d2:62:
47:6f:2a:3b:08:47:ce:0b:6d:06:69:57:86:94:e7:
76:39:6c:c2:2b:88:3c:e2:39:63:f3:31:08:47:cd:
0d:84:d6:df:4a:01:d3:dd:97:aa:f4:9e:5b:03:73:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FB:8E:AD:A6:18:D1:A9:4F:55:37:3B:31:83:81:8C:04:75:0E:62
X509v3 Authority Key Identifier:
keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:78:b4:ad:86:5d:96:95:34:1a:bf:12:80:38:82:b0:1b:
3c:0c:dd:30:63:6f:08:ef:3e:44:35:e4:65:b4:e7:0b:28:bb:
7b:1e:14:7e:9c:23:42:c6:33:51:ae:d0:6d:51:bf:a8:71:77:
43:ed:1f:93:0b:61:6e:5b:3d:6d:40:2c:f9:65:a4:f2:77:0d:
c2:d0:47:a1:6a:15:7b:ba:ba:74:28:bd:3e:21:e8:21:53:64:
21:3c:2a:8a:83:64:c4:c6:8c:1b:7b:dc:e9:7e:89:6b:aa:64:
0a:ed:f3:a9:ea:50:99:ec:95:d1:95:ac:1c:bc:fd:6b:c1:3d:
51:0c:04:5b:c8:51:89:de:e2:45:96:d1:52:4e:0f:8d:66:c4:
d3:3d:2c:e2:d0:79:e6:68:ee:97:4b:2f:67:f3:38:b8:42:34:
70:b2:54:8e:c2:c5:f2:e5:a3:5c:7a:67:16:c0:a6:3f:2f:1e:
e6:b4:fd:7a:96:76:7a:c9:87:05:6c:03:a8:a5:30:04:8d:ee:
e4:36:17:ee:f1:60:5c:ba:ce:84:3a:98:4c:4b:74:71:1a:ac:
79:92:5f:35:1e:ba:5a:ce:8a:47:c4:fc:23:98:bb:c0:f1:71:
e7:84:0e:80:83:32:d2:24:41:61:3b:bb:cd:c2:29:4a:07:d3:
a5:a2:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:07 2026 by rpki-client