
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
File: AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft (raw, json)
Hash identifier: UYpYPwaBCvvFC5zqfRSPUTWLoay/M0Zot4oh+m+vc88=
Subject key identifier: 4C:A7:23:71:FA:19:CE:8D:1B:02:9C:D8:61:A5:6D:BD:70:A4:17:A2
Authority key identifier: 01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9
Certificate issuer: /CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
Manifest number: 01B3
Signing time: Mon 02 Mar 2026 02:14:10 +0000
Manifest this update: Mon 02 Mar 2026 02:14:09 +0000
Manifest next update: Mon 09 Mar 2026 02:14:09 +0000
Files and hashes: 1: AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl (hash: 0cmdPYXfJYLOCiqH6JHSEiNmED0bUFgG/gQXksvn7NU=)
2: 110A7248841F11EEAF514B09C4F9AE02.roa (hash: WZwK2r73IsiV+oGVGxRJ30SomvnS8YITANsfQ8tCVa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl
rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3C52, serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
Validity
Not Before: Mar 2 02:14:09 2026 GMT
Not After : Mar 9 02:14:09 2026 GMT
Subject: CN=69a4f272-e4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:92:48:df:16:94:02:a2:06:f9:6d:c5:c1:
1a:c3:78:f6:63:2f:b2:6f:d0:d7:8d:9a:99:6d:51:
9f:4f:01:8b:3f:b4:b3:9a:7a:3f:9b:06:32:e1:13:
c5:10:ca:29:94:95:3a:76:f4:dd:83:d6:4d:d9:fe:
90:10:e0:d2:54:12:ce:5a:04:bb:73:4b:38:24:a6:
69:b4:aa:b9:89:13:6e:0e:2c:70:c5:42:e9:5c:78:
d8:24:f4:66:38:89:c5:7e:43:d4:89:03:dc:de:90:
e4:ab:aa:78:0a:a8:51:3c:05:b9:ac:94:2b:f5:c0:
7b:05:f4:51:4d:16:be:85:92:56:20:d6:e2:02:1c:
12:8c:94:c3:3b:40:99:8c:5c:50:b3:aa:a4:bd:80:
af:85:1c:50:97:5e:a0:11:dc:93:a8:5c:14:dc:37:
39:51:b9:9a:36:2b:a4:ba:e5:94:73:ac:df:6c:52:
ff:01:12:52:4b:f7:3c:8a:d4:0e:0d:06:06:c7:66:
15:d6:8d:07:33:bc:f7:2e:ec:b5:2c:a8:35:8f:c1:
8b:16:5c:15:32:93:da:9b:0e:9e:24:23:21:4f:05:
5e:7e:53:0c:24:d8:cb:75:f0:52:d7:f3:ac:7d:2a:
f7:c7:95:c9:e1:e1:ce:d0:1f:bb:51:1c:cd:39:aa:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A7:23:71:FA:19:CE:8D:1B:02:9C:D8:61:A5:6D:BD:70:A4:17:A2
X509v3 Authority Key Identifier:
keyid:01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a4:74:40:48:5d:46:bf:df:42:24:aa:85:8a:cd:c9:61:ae:
e1:b1:6c:7f:33:54:68:5f:3a:1b:8c:cc:44:39:9c:99:cd:41:
e3:9f:83:46:c8:7c:eb:b6:59:59:04:7c:fa:5d:11:a3:6f:77:
79:28:28:15:8c:1f:b4:9a:2d:8c:52:fc:7f:fe:9d:00:38:f8:
21:39:4b:4d:37:d4:2e:f6:ae:9a:a5:88:6a:b1:c8:22:cf:29:
97:ab:52:67:bd:e9:03:d8:06:4b:fd:6d:ca:42:b9:00:8a:41:
a3:67:2c:b8:26:9d:06:ad:1d:23:7e:98:2e:90:51:82:a5:f6:
30:a3:ca:a1:f2:c5:25:82:db:1a:96:ae:ed:4d:78:bd:83:b1:
c5:95:74:3a:33:96:45:ab:62:b6:c7:b2:cc:65:26:e0:f0:a5:
55:51:a7:de:f3:64:38:eb:f5:d4:0a:5d:ca:f0:15:d9:df:1c:
5a:99:d5:cf:13:ad:d3:7e:1e:34:75:19:87:38:a6:3c:77:ac:
a4:f4:a5:bb:f5:45:61:96:c9:d7:4d:fc:de:62:3c:b3:62:96:
00:c7:ef:2a:99:99:82:d0:33:6a:34:c0:2c:79:31:2c:1f:a5:
97:85:34:4f:85:72:67:e7:1f:7f:db:ec:68:4b:1f:92:3b:2c:
6a:55:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:39 2026 by rpki-client