
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
File: M_vQn8uwMstkN8-6pg9cH6xVob8.mft (raw, json)
Hash identifier: M8U3r9RoNzSQCannv3Yri75N8Y5Out7Mlc/0jScVpUg=
Subject key identifier: 7F:1A:03:6B:9F:14:E3:AE:85:AC:1D:60:F8:C8:5A:58:29:52:A4:E5
Authority key identifier: 33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
Certificate issuer: /CN=A91201EE/serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
Manifest number: 30
Signing time: Sun 01 Mar 2026 10:10:43 +0000
Manifest this update: Sun 01 Mar 2026 10:10:42 +0000
Manifest next update: Sun 08 Mar 2026 10:10:42 +0000
Files and hashes: 1: M_vQn8uwMstkN8-6pg9cH6xVob8.crl (hash: Xz41nZIUPumgdoANLbgfEPF907dYXAKpF8bgJ76AuRk=)
2: 5922C8E2DA7011F095E8A22F9BD3641D.roa (hash: XJ8M9A8mI6SrwXUmjGLeL6tg84g5T3IN8OttgBdZuFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201EE, serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Validity
Not Before: Mar 1 10:10:42 2026 GMT
Not After : Mar 8 10:10:42 2026 GMT
Subject: CN=69a410a3-6342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:6e:e5:b1:aa:2e:86:1a:67:0d:3f:db:0f:
9f:46:ee:ce:0f:ce:30:bc:ba:8d:d8:57:b5:ce:6f:
ef:f5:f1:d1:eb:7b:f8:54:ab:90:d8:9e:77:4f:ff:
0f:74:28:6c:1b:79:c3:19:23:c3:9a:a6:14:3e:6a:
1e:ca:7d:0f:f3:2f:4c:2b:b2:61:20:f2:74:95:87:
18:45:04:cc:f6:d1:fe:06:72:53:43:7b:35:df:cc:
19:1a:8a:49:3f:da:80:18:17:7e:b3:83:1b:f3:80:
ea:e0:51:3b:75:27:f4:2d:d1:24:7e:73:f1:25:ab:
d2:d5:61:26:95:06:f5:23:c8:a9:66:d9:1a:34:ad:
7a:13:e3:35:e4:cc:70:3a:27:2e:4e:14:39:9b:cd:
0c:76:58:ac:1e:6b:71:55:cd:1c:4e:a4:61:20:e0:
c1:4d:e3:23:f0:60:50:80:99:ab:31:65:62:0d:aa:
d0:72:f8:61:e0:27:55:52:34:5a:40:3d:15:4b:38:
2d:94:c2:1d:f6:27:29:7b:19:69:f2:c7:04:d6:33:
67:46:60:97:b8:e9:76:aa:6f:27:9c:05:52:e2:b3:
57:fe:c6:ca:e1:0d:9b:a7:c8:62:c3:3f:e3:a5:c4:
da:cb:cf:e7:d3:e4:23:e4:dd:1d:75:e6:40:4c:e7:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1A:03:6B:9F:14:E3:AE:85:AC:1D:60:F8:C8:5A:58:29:52:A4:E5
X509v3 Authority Key Identifier:
keyid:33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:c6:5b:5e:4d:25:eb:ce:a3:31:12:73:6b:44:fc:e4:ac:8d:
3d:6c:ca:22:d8:6a:57:40:8a:ef:a3:2a:07:1e:e7:d3:3a:94:
c4:34:a0:25:8c:50:11:30:58:49:45:ad:4e:28:a9:43:f4:4b:
49:4b:a2:66:a1:6b:c6:c8:35:60:53:38:fc:15:7c:a5:ec:ed:
f6:52:ce:6c:0a:76:f1:db:cb:47:28:09:68:67:1b:74:92:8f:
38:7c:a1:fb:bb:2d:4e:eb:6f:49:54:cf:19:5e:02:9f:8b:14:
d1:bd:da:e9:65:16:9d:4c:fb:b7:1e:70:5b:fb:da:42:72:70:
43:be:95:1b:5d:d7:f9:7a:e1:f2:79:ac:a2:7d:7a:ae:ca:d6:
07:e5:b7:d6:53:03:17:37:35:e5:12:e4:65:67:de:8a:6f:4e:
0b:76:9d:23:cb:4f:71:6c:c2:08:c4:c3:07:e7:73:54:f7:8b:
40:15:8e:e2:82:96:6e:ff:0d:09:7a:03:5c:49:7f:a2:ac:93:
b4:4d:6e:25:9f:a5:06:ca:49:7c:69:c8:7e:75:45:f4:a8:dc:
16:5f:b9:8c:b2:57:32:e2:71:3e:6c:3f:88:47:0b:be:24:a3:
ac:de:07:dc:b1:84:24:18:25:4b:cb:ad:a1:5d:3e:37:70:3a:
ac:dd:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:03 2026 by rpki-client