
$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
File: inTvQOZaEnwOZmsUpsZXSlNvNnM.mft (raw, json)
Hash identifier: BE8gQy+DVhqCYkjAfl5j7jsKWanAxDyIkal8VCkfytY=
Subject key identifier: DA:D4:72:56:2D:B6:B4:B8:11:4B:A9:0D:71:B0:BB:12:1A:77:1A:66
Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73
Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
Manifest number: 0247
Signing time: Sun 01 Mar 2026 03:23:02 +0000
Manifest this update: Sun 01 Mar 2026 03:23:02 +0000
Manifest next update: Sun 08 Mar 2026 03:23:02 +0000
Files and hashes: 1: inTvQOZaEnwOZmsUpsZXSlNvNnM.crl (hash: 3iFsLybkTdFXbbn3X14mfG5kbu7t5087h4duOejt8uY=)
2: 94817492A7AF11EE9ABC7953C4F9AE02.roa (hash: a+JITrVbN+Ag/tdfheF9+vrR3S73tXIGzQcoQl71IdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl
rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91583E4, serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
Validity
Not Before: Mar 1 03:23:02 2026 GMT
Not After : Mar 8 03:23:02 2026 GMT
Subject: CN=69a3b116-ed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:47:06:f4:da:8c:19:c0:68:ad:72:6e:2f:
78:4e:1f:c2:e4:54:d7:0d:c4:72:4c:5e:34:4a:80:
88:29:50:5e:2a:e8:ef:f9:3a:ef:6d:6b:5e:39:7f:
68:db:b5:8d:55:78:f6:66:74:fe:29:5e:07:18:36:
70:fb:af:c5:36:cc:d8:13:84:f8:a2:fb:68:f7:b3:
98:96:ef:6c:54:dc:65:ee:76:3e:03:d1:89:f8:c7:
02:59:17:0a:80:6a:37:05:38:d3:98:34:2d:dd:d0:
b4:17:38:19:42:d2:ec:e1:a6:cd:20:d5:1f:d1:4a:
22:61:3d:4d:2b:20:ab:e5:c8:02:3e:5b:e4:9b:cb:
55:c2:9e:50:3c:7a:8f:00:d7:1c:f1:19:bf:e2:08:
b2:0d:48:f2:48:89:48:2f:78:4c:71:62:ef:1d:4f:
77:75:64:59:e6:22:5a:10:f3:3a:e8:40:7a:17:54:
46:3f:c8:57:6f:c0:cd:1c:bb:f0:6f:55:04:e5:92:
f8:f5:8d:50:32:0b:c7:2c:09:65:97:38:6c:18:b4:
8e:84:7e:14:87:c5:ae:d9:95:54:30:6f:9e:28:f3:
2c:0c:11:8f:a8:44:81:87:9a:7d:12:a1:b0:44:52:
9f:ba:ac:3c:cd:95:3c:48:37:fd:8f:a1:9f:f1:67:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D4:72:56:2D:B6:B4:B8:11:4B:A9:0D:71:B0:BB:12:1A:77:1A:66
X509v3 Authority Key Identifier:
keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:3b:56:b3:d8:0e:2c:25:8c:56:c8:c4:a8:0d:80:4a:6d:9b:
59:aa:c6:d4:4a:ff:8f:3b:47:d8:ea:54:64:19:45:6e:f5:fc:
4c:72:13:7a:97:19:88:5b:48:1e:30:11:a8:6a:d7:08:90:2a:
d2:2c:75:c7:22:1c:3d:55:09:5f:d4:1c:fc:b5:2f:82:70:86:
b8:bf:40:a0:3f:6a:ce:e0:e7:d5:43:cd:db:35:7f:92:ab:4c:
c1:39:c6:0c:60:90:19:a9:e5:f4:38:8d:6b:54:6f:40:67:77:
4b:73:72:a2:59:ec:03:a9:e2:2e:a4:ed:dd:c2:9a:35:8e:a2:
18:0c:44:49:7a:f2:79:69:3b:90:46:7d:a3:79:e9:46:21:a7:
c5:56:10:4b:38:7a:c3:59:66:20:f4:d1:f2:9a:9e:49:4d:b9:
ef:b8:7e:81:ef:bd:73:a6:27:42:2b:bf:1f:4e:65:5c:c3:f2:
e5:46:8b:d7:16:7e:28:a5:f3:88:49:8c:c9:cb:48:85:20:cd:
12:46:9e:5e:48:58:06:e1:ea:1d:d8:49:b2:71:e3:94:9c:19:
3e:a8:e7:8b:93:c7:13:f7:5e:d2:3a:62:41:30:98:7a:ea:c1:
4d:0b:a5:44:0a:17:2a:d4:70:b1:e5:08:87:49:c2:97:c6:a7:
0a:3b:ce:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:18 2026 by rpki-client