
$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier: 9JgV6QTxwwOq0blaFDMfV51hoKb2dh2Ax9EQu1EMbL8=
Subject key identifier: 13:59:23:0C:51:3B:88:18:43:B9:7D:60:1C:CC:B7:84:19:3E:2C:13
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial: 0D4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number: 0D33
Signing time: Mon 02 Mar 2026 00:25:23 +0000
Manifest this update: Mon 02 Mar 2026 00:25:23 +0000
Manifest next update: Mon 09 Mar 2026 00:25:23 +0000
Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: qBekjzfIGxR1yZKhHiVUQvQCU8A2dCRj78MqyHTS6/Q=)
2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: ZrjcR9T+8HqKoXscHlTL4X0njAxpjmVzzUteKMnha0o=)
3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: qcCtaMG3+No90shDmbUp/tU8ruNeRWwZsRG7YBEd9j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3402 (0xd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Validity
Not Before: Mar 2 00:25:23 2026 GMT
Not After : Mar 9 00:25:23 2026 GMT
Subject: CN=69a4d8f3-bb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:62:62:19:1d:bf:7c:32:de:92:44:f0:ac:
4f:5b:c5:85:8f:9e:5f:a9:5a:6c:fc:cf:4a:4f:05:
13:91:8d:39:5f:d4:6c:a3:e6:02:d5:8b:b4:e2:d7:
78:b8:e8:d2:fe:c9:9f:ca:f0:18:2d:40:08:c4:59:
4f:bc:75:5c:0c:4e:09:b5:f1:da:e7:6a:16:6b:78:
94:e0:7c:fb:c2:dc:63:7e:34:46:5c:dc:b1:5d:c3:
1e:3e:50:45:72:39:af:b3:5c:ba:5b:fe:77:ab:bb:
c0:e7:11:b8:f4:c2:7a:83:24:fc:6b:fb:85:b4:a1:
da:5b:76:f7:a2:1a:1a:75:74:ae:e7:95:05:03:49:
96:e5:8b:2e:07:a0:3e:86:e6:46:0e:61:f6:20:fb:
81:7d:8e:31:a5:e3:b2:d7:69:7e:b9:f9:29:14:00:
b8:a5:26:c3:0f:ff:89:99:cd:ee:d0:b5:46:a3:c4:
ff:67:cb:fb:c7:50:55:bc:e4:4a:67:ee:fe:db:8f:
7e:5b:c8:fa:f8:32:cd:55:eb:a9:fb:25:6f:4c:68:
e3:c1:9a:d8:db:67:05:5e:78:fd:0c:bb:7c:ba:b9:
ef:05:03:63:28:76:4d:73:2a:84:17:e4:40:9a:3f:
30:87:f5:9d:b2:5c:11:65:a1:46:21:4f:43:65:28:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:23:0C:51:3B:88:18:43:B9:7D:60:1C:CC:B7:84:19:3E:2C:13
X509v3 Authority Key Identifier:
keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:9d:da:26:84:ff:d7:b0:c7:b1:4b:25:9b:37:ee:0a:38:
6d:91:be:03:1b:82:1d:64:b2:5e:12:d2:72:6f:43:d4:d2:51:
ef:9a:81:6f:74:29:33:9a:62:f6:25:71:e5:70:35:43:b5:32:
9c:0c:7d:d0:56:c7:fb:ba:86:34:c1:9f:45:98:37:8b:55:c1:
c0:51:51:3f:4b:95:aa:17:8e:aa:5d:d4:a5:79:e3:23:1c:b4:
89:7e:be:af:9f:6e:bd:b3:8e:60:f2:b2:87:cc:25:96:c9:5d:
14:1a:33:1e:1f:b6:16:38:70:14:d9:e2:2a:d1:96:1d:a9:c0:
4b:f6:4b:1b:6b:fd:2e:b6:fd:0b:05:4f:2e:5a:cf:db:ee:7f:
d0:bc:f2:5b:a6:a6:8b:4a:40:83:98:ac:d5:b4:f0:10:44:9d:
5c:fe:ec:65:c8:4f:e6:0f:7d:72:6b:ba:0e:35:9a:3d:07:6e:
fd:63:05:32:97:1e:52:52:43:0d:91:1c:0b:30:94:48:bf:b2:
c4:8e:74:44:24:ec:66:00:f6:e8:f5:52:0a:b4:a7:b8:1a:d5:
d9:6c:be:00:bd:10:c6:b4:6f:66:0f:9e:e4:53:c7:34:0d:01:
11:71:f4:ef:ab:8d:22:04:c8:2e:d3:fd:ef:69:15:bc:5c:c3:
05:6a:17:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:57 2026 by rpki-client