
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json)
Hash identifier: V6fPJSC5svOJwlCqPbQPCaAMU7acdkR5hK3dCSiRj8I=
Subject key identifier: F2:79:A0:12:F1:13:F9:AE:C4:09:04:43:4E:48:5D:52:6D:0D:97:06
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 3668
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
Manifest number: 3591
Signing time: Mon 02 Mar 2026 14:56:44 +0000
Manifest this update: Mon 02 Mar 2026 14:56:43 +0000
Manifest next update: Mon 09 Mar 2026 14:56:43 +0000
Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: 91H94+2BqYPfVxU2wRXSuDOSjmYligDrMeSuQcujvtQ=)
2: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: mcPnEtJN4CwFlo9K5wKS7nNsKtBJ+C4x6y6oJtNpiUQ=)
3: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: R6YXr6mLTUDY2MoinQ6/ghJTAUyVeETH/6l5X7fp+n8=)
4: 347735B4C00511EE82324069C4F9AE02.roa (hash: /kUd9dg2x7gbUussL1CZiH5//c2g+atYXyM6o1Fjd68=)
5: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: Td8fpDl1muyggYTNSgp6i/pQqHmwkCCIVXTLbwgwDlA=)
6: 355461A4372C11EDB1059640C4F9AE02.roa (hash: NxJ2unXmkGj4Yr8VVZLWqjZNZJ7C6FQB8WBXPKvyldA=)
7: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: VIRmL951A2w0+MXfiiwjWiaHXlAvoYt8IPFvgYt8GJ8=)
8: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: g1chng8Zroh0xuqUUgiR9KsHEJpzRGDKOC2H2UuXyfM=)
9: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: SvhfDhu8z7AY1Gsx30cCjfYcMF/mDJRnCXF7NmFAbv8=)
10: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: +DlfNUUN/cRUX1kAlUw6vhOedHe0ghSEJgBGTWeBk+Y=)
11: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: R+EwkIyyW5Tva5rKC5LyIDMc9DCqL1tlwpEozeLBwXE=)
12: E28E6B84BB0011F0BF1A9179C4F9AE02.roa (hash: smbkx45zByj9Rn6fJhQgzAKRd1qZspDivWChDPD3Xgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13928 (0x3668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Validity
Not Before: Mar 2 14:56:43 2026 GMT
Not After : Mar 9 14:56:43 2026 GMT
Subject: CN=69a5a52b-54b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:da:25:6c:69:54:bb:cd:8a:38:78:20:b7:
54:5e:09:c0:e3:53:ca:f5:2e:7d:75:04:71:cf:9f:
20:d4:3c:94:e9:cb:42:43:ce:86:72:c0:66:c7:37:
d0:b3:a6:19:42:69:2c:cc:68:cf:f4:cc:09:8d:0e:
6a:77:58:3f:d5:3b:43:f3:08:cd:d6:fc:2d:9d:e5:
47:f4:27:87:6b:e9:e9:d8:84:5b:0e:63:a2:49:42:
1b:86:00:27:01:48:ff:09:f5:65:ac:43:b7:ef:66:
91:f4:b5:71:ce:da:ee:19:19:cf:6d:a7:3e:f0:d8:
1f:3f:a5:fc:00:c7:74:f3:ed:51:be:a1:7c:03:f1:
6b:76:5b:bf:e3:90:de:50:b9:1f:24:6b:9b:c3:20:
57:79:37:88:3c:7a:ac:8b:96:b6:d3:6b:de:4c:21:
7e:af:d1:5d:12:40:f2:2e:62:f9:74:bc:35:75:bf:
74:b4:a2:f1:9f:cc:fd:0b:8b:8b:b7:ce:94:4d:80:
d9:9f:09:09:38:74:99:26:0c:ec:f5:33:c6:4d:76:
71:46:9f:a3:ea:39:e4:05:6c:d2:c9:70:79:37:d8:
57:16:20:9a:e0:ba:85:d6:1c:11:08:0e:0e:e1:c5:
a2:45:ab:8c:ae:a8:73:b7:af:cb:87:99:68:43:61:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:A0:12:F1:13:F9:AE:C4:09:04:43:4E:48:5D:52:6D:0D:97:06
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:42:de:a3:59:c8:f8:c6:3e:a5:3c:b5:57:7e:02:7a:34:ec:
61:82:6b:46:30:59:ca:4b:87:a4:e6:51:99:29:07:ee:8b:45:
ef:8a:ac:2f:02:4a:53:f3:8a:1d:6b:53:da:de:1b:f9:47:12:
91:66:66:eb:65:b8:c3:ff:d0:65:3a:d2:e4:36:b8:c0:e6:76:
92:c7:c9:6c:d5:5e:36:80:96:33:2b:0f:11:8a:39:af:46:cf:
8d:3e:28:a5:f6:31:50:63:a4:2e:36:19:98:91:3b:dc:f6:c4:
f8:d4:f3:78:0c:d6:ed:7d:0b:fc:cc:83:35:98:1a:1b:fc:ad:
41:27:de:b2:f1:f9:e1:dd:d4:c1:24:38:bd:22:f1:c7:ba:40:
3b:49:12:90:40:43:20:9d:9d:30:af:95:e0:21:43:af:d1:77:
f7:eb:43:2e:34:8a:6b:b6:ac:ed:59:ea:7e:f6:58:6f:9f:8f:
50:63:68:75:cf:75:69:8e:94:6e:4a:ff:cd:b5:7d:24:b2:7c:
bd:66:6a:af:99:bd:86:d3:56:c7:f3:dc:78:73:42:70:0e:8d:
47:a6:40:af:20:93:a7:48:a1:3a:5a:19:c8:3c:9f:c0:e6:58:
7d:6e:55:c3:06:87:23:21:6b:08:4a:d0:d9:61:04:e1:cf:44:
63:29:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:55:07 2026 by rpki-client