
$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
File: 1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json)
Hash identifier: jvIRyFLwt54fbjpKl+KRifEMM36UNsYa9lOcl2swXe0=
Subject key identifier: B0:DE:98:A3:4E:C4:F4:96:98:49:09:CF:4C:68:1B:E9:42:53:42:43
Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
Certificate issuer: /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
Manifest number: 36
Signing time: Sun 01 Mar 2026 10:03:38 +0000
Manifest this update: Sun 01 Mar 2026 10:03:38 +0000
Manifest next update: Sun 08 Mar 2026 10:03:38 +0000
Files and hashes: 1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: Kga9T+ak3r7wDfN3RpR/vWbd1Jp1QZN22k9LyiEGckc=)
2: CE34BEF810A111F195BE013C393D8C67.roa (hash: rDiCsLkX8LztFPRKhHu/8w/OO3VhnMwZmTtx/fy38wU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Validity
Not Before: Mar 1 10:03:38 2026 GMT
Not After : Mar 8 10:03:38 2026 GMT
Subject: CN=69a40efa-aa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:4b:4a:a6:92:8d:40:0b:ff:4f:55:a8:53:
f0:f6:e2:a6:65:71:b1:fb:8b:b4:fe:f4:63:45:a4:
b9:54:ba:63:11:1d:e0:f5:a3:60:25:50:25:db:ec:
dc:b0:08:12:b6:16:99:40:cb:aa:d1:7b:8d:7c:68:
ef:30:d7:5f:e9:0c:5d:a9:79:0e:5e:a3:4f:34:36:
d6:ad:c0:6a:5c:bb:c2:32:ef:9f:3f:2a:e6:d7:ce:
d5:d5:4f:74:ba:52:83:95:b6:1e:ca:b7:6d:4f:fa:
10:b1:88:37:e4:ad:29:57:4b:7f:a6:d9:6c:67:ce:
62:78:e6:ad:af:69:4e:12:56:cb:09:fb:2c:31:5a:
73:e3:ad:09:1d:15:62:c5:5a:7a:eb:6c:52:61:89:
9f:0a:bb:3a:55:ac:a8:57:b3:7f:dd:86:0c:d2:94:
74:f7:2a:77:c2:26:4c:db:81:78:2d:a4:fa:c4:a6:
7a:02:65:d0:8f:75:0c:a1:22:7e:e0:39:eb:2d:24:
87:73:68:85:d3:81:bc:20:c0:af:e5:4a:ea:ad:90:
32:cc:86:0e:cb:8f:4b:e8:74:87:87:34:00:ba:28:
f3:99:ba:44:bf:35:98:73:b4:54:c9:d4:ec:b2:dc:
a0:d1:f9:65:a7:90:1f:f2:23:ff:44:23:90:96:72:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:98:A3:4E:C4:F4:96:98:49:09:CF:4C:68:1B:E9:42:53:42:43
X509v3 Authority Key Identifier:
keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:4e:34:4e:36:f8:ea:7c:2a:a6:97:a2:8d:b6:c7:02:ae:e0:
71:5e:be:9b:7a:7f:2f:92:6e:c6:98:8c:56:15:7a:43:63:8d:
b9:86:58:d8:93:23:a9:07:1f:6d:fc:c0:73:9e:81:8a:6a:90:
ce:5a:fd:80:bd:57:0f:78:47:a0:7f:1a:2e:f6:9f:c0:dc:ec:
40:2d:4e:68:47:62:52:21:d8:21:c7:2c:33:e7:3e:d4:ee:8b:
7e:0d:a9:29:0b:92:5f:fc:fc:b9:e8:6f:37:e5:ed:18:48:2f:
90:19:57:0b:1a:58:14:0c:de:75:c9:f6:75:4e:9f:5c:89:83:
c5:4b:14:91:59:40:b3:cd:b8:ab:04:1a:2a:2e:b0:dc:23:7c:
75:c5:ad:f8:21:65:7b:53:dc:24:0f:52:7a:14:f4:50:e0:f4:
7b:57:5d:c2:71:74:49:30:66:4d:c3:b4:7d:85:c8:5f:3d:63:
e3:2d:54:e3:9a:7b:d8:63:34:8e:43:8d:c1:c7:84:18:d5:a2:
a1:1d:ef:6d:40:d3:38:33:b7:6d:fa:c1:c8:a9:80:f2:22:ee:
35:20:12:9d:89:bd:b4:6f:fc:fe:d4:18:c1:36:5b:fe:9f:69:
f7:ce:d4:05:39:44:2e:7c:2e:80:4d:43:0c:f6:b6:cf:4b:9d:
7a:e1:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:02 2026 by rpki-client