
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json)
Hash identifier: uPeUrNgREDnygvSWTcii4fzzIxuJTxLfmjW14mmFG18=
Subject key identifier: 4F:D0:41:3E:BC:4E:03:84:BD:C8:C8:25:FD:C0:95:02:CF:35:4E:0E
Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Certificate serial: 0D37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
Manifest number: 0D00
Signing time: Sun 01 Mar 2026 22:33:21 +0000
Manifest this update: Sun 01 Mar 2026 22:33:20 +0000
Manifest next update: Sun 08 Mar 2026 22:33:20 +0000
Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: CftkaNFWdYnPmt2JlDGqO8keZZ9jai5fMnnAqdkcfXA=)
2: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: rZrIOdq3ol6lcEAYXeq2DsJFaFbmt+O1xVdoQjKA9Ic=)
3: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: i9uCa/jnhktxFdjqViYAybuthNUR7oD6rAf8exjN1kI=)
4: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +v702T+ecCOjmmS56vuMtDJ6RGqPmaswdGe/Ps9k7F8=)
5: 5B47C2265D8411F0BBB04858C4F9AE02.roa (hash: 5Gz1em/PdO/Bv/3TCy3czbXrmcPfmWaq1s4vYyqJQmE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3383 (0xd37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Validity
Not Before: Mar 1 22:33:20 2026 GMT
Not After : Mar 8 22:33:20 2026 GMT
Subject: CN=69a4beb1-86b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:d2:69:71:99:c4:92:c3:56:a9:67:a8:5a:
95:7c:cd:eb:c8:4f:d0:98:03:47:3f:ed:2b:ff:77:
09:af:a1:a5:dc:a9:32:60:2b:b0:a0:ba:78:d3:ea:
74:df:91:ef:ec:dd:5f:5c:c7:cf:39:6c:74:2e:1b:
48:ed:a2:8b:48:96:10:6c:5c:7d:8e:33:e6:29:7c:
2c:80:07:b9:a7:9e:42:21:e4:92:7b:0f:cc:6d:88:
ba:9a:30:77:9e:38:41:67:3a:1b:9c:5c:8a:2d:1a:
9c:19:0e:c8:b5:71:43:ad:fa:80:66:7e:4e:48:a3:
60:65:51:d4:99:41:3c:54:bc:ec:94:27:c7:d9:e1:
20:c8:39:23:53:31:22:48:85:ab:93:ae:50:67:06:
38:78:8b:08:50:0d:36:77:19:84:ef:85:6e:18:0b:
33:c3:c6:77:3b:cd:52:67:96:1e:5e:7b:09:50:ac:
52:9b:d9:ff:f9:00:93:53:1a:fa:9c:fc:7b:43:a8:
d4:6b:23:05:71:d3:ef:04:ac:9a:c1:dd:da:f3:6a:
31:33:d0:ff:f7:d5:30:b1:1a:5a:5e:48:2b:d3:3b:
42:78:0a:20:25:e6:fe:fb:d8:5e:12:02:b9:9b:4a:
64:08:a3:fd:05:95:24:c9:9f:90:0e:37:3c:b1:8e:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D0:41:3E:BC:4E:03:84:BD:C8:C8:25:FD:C0:95:02:CF:35:4E:0E
X509v3 Authority Key Identifier:
keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:5c:f0:84:b0:f9:b1:a0:7b:3b:49:8f:1f:60:52:d5:ac:22:
66:38:6c:0c:1b:b9:23:e2:83:ad:71:26:10:ad:72:98:9e:8a:
cf:8a:c6:47:d2:d7:d1:3c:3b:48:86:ee:f4:bf:07:0d:e0:c1:
30:43:24:00:05:15:77:62:ff:52:8d:ef:f2:c0:4a:38:69:43:
28:65:a7:e1:d5:72:60:4d:0c:2f:11:61:e6:01:c1:d3:b8:77:
8e:9a:00:70:7c:cd:d9:a2:23:f7:74:95:c3:b2:2e:b4:ae:4c:
5d:06:4d:79:ac:8e:22:24:6f:ef:82:aa:d9:0a:a6:d3:5d:7d:
b9:85:bc:79:f4:25:b5:02:ae:00:b3:29:63:1e:62:ee:0f:83:
bb:c3:8f:59:9d:4b:79:33:25:7f:4c:05:09:58:79:1c:5f:5d:
21:37:eb:3d:48:fb:d3:fd:f4:29:da:6c:0c:a8:96:06:5d:8a:
4f:6b:02:23:69:31:ff:2d:46:da:db:18:99:4b:ca:55:8e:5b:
0c:d6:76:bb:d6:97:59:8d:40:88:12:05:3c:3b:ad:e2:f6:bd:
71:5b:9f:d7:ea:7e:12:08:30:79:d8:43:bf:48:64:0a:5b:c6:
be:2f:12:d7:4e:70:26:53:ab:83:96:4b:96:e0:11:fc:48:5a:
af:ad:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:26 2026 by rpki-client