
$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File: o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier: cS35KDc9a5OH26oc8D7OEjU+ydHUyuXbOtx8KIgrB6U=
Subject key identifier: FA:B3:C5:BE:B6:A3:95:C4:3F:28:AC:DD:AB:37:60:B6:79:74:3E:06
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer: /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number: 31
Signing time: Sun 01 Mar 2026 10:05:41 +0000
Manifest this update: Sun 01 Mar 2026 10:05:41 +0000
Manifest next update: Sun 08 Mar 2026 10:05:41 +0000
Files and hashes: 1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: XQStddrLdZh8FH1zLuQutj48M8S3g5xp3nN6sI47Ops=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Validity
Not Before: Mar 1 10:05:41 2026 GMT
Not After : Mar 8 10:05:41 2026 GMT
Subject: CN=69a40f75-2aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:fc:8a:a2:45:ea:cb:87:19:92:c9:e1:09:
b3:04:3e:d7:9b:a4:55:2c:94:44:aa:f4:9a:df:2c:
e1:b5:7f:88:a4:3a:f7:60:25:56:a7:16:aa:dc:e4:
4d:b5:da:f7:1f:5e:c7:7f:00:1b:dd:4b:cd:79:44:
41:b0:49:4d:f0:c4:ac:fc:8d:84:41:cc:43:97:0c:
92:d0:75:5b:70:d8:43:5b:c3:70:12:ec:cf:06:e7:
2b:8c:ef:59:e8:6c:34:20:3c:c6:f4:d0:71:81:75:
d8:32:4e:86:e6:3f:14:78:38:6f:4f:eb:bf:90:2c:
8d:d0:60:86:c5:56:a2:b5:b6:bf:c9:13:b0:88:d9:
e7:83:b7:20:db:cd:c5:18:35:3f:7f:a1:71:08:8b:
9a:b2:db:28:4c:10:56:13:9e:08:bc:68:20:dd:64:
25:ba:f7:5a:b2:9d:c7:df:08:bd:da:0f:83:02:cd:
b0:c0:3d:a5:e0:07:31:02:76:96:c9:ee:9f:21:d4:
45:be:2e:bb:83:99:04:fb:87:38:07:63:d8:a1:f9:
f3:83:60:f0:2a:e3:6f:20:0b:41:3c:04:ce:53:c4:
4f:03:92:79:35:0a:6f:d1:35:fa:32:77:cd:9a:69:
58:d2:69:2d:e7:c7:b4:a8:cb:f7:3d:bc:fe:49:61:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:C5:BE:B6:A3:95:C4:3F:28:AC:DD:AB:37:60:B6:79:74:3E:06
X509v3 Authority Key Identifier:
keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:46:d8:8f:1d:a0:8e:86:44:cd:d2:4a:59:28:72:3a:9d:eb:
6f:46:12:dd:b2:24:b9:0b:22:6d:ac:68:5b:e7:46:18:00:f1:
43:87:1e:fd:f1:bd:42:27:12:02:59:07:9f:dc:e7:0a:98:ab:
f9:7e:d1:f9:4a:5f:0f:ba:55:ad:82:8e:ea:c2:5d:b9:2c:54:
03:f6:33:b2:65:e6:54:dc:ce:50:b5:7c:4e:18:24:29:99:b5:
e7:39:1a:6e:76:b9:1f:28:29:29:42:37:fe:33:ca:9c:b4:af:
ea:6e:cf:50:ab:e8:87:0f:b0:03:c8:09:79:23:c8:89:ae:76:
21:f4:66:02:10:1b:48:5f:67:ab:c4:2d:a2:4e:04:77:e1:45:
b8:1e:71:95:da:1b:ee:8c:5b:30:85:4d:b2:2c:b0:70:c7:43:
a7:0a:c0:e5:3f:8f:14:86:df:5b:db:42:10:18:62:d2:ab:e6:
c4:52:ee:1b:50:8e:7a:99:37:72:f8:c2:e0:8b:c8:4a:3e:89:
5f:eb:9c:7e:79:99:29:52:74:97:55:2b:a7:69:75:d1:24:33:
d5:7b:5b:43:78:24:b1:f9:70:43:8e:98:7d:94:b5:cd:e6:ad:
70:3a:06:10:3c:4f:e9:11:48:9b:ff:df:1d:5b:b9:43:41:70:
e7:69:63:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:24 2026 by rpki-client