
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json)
Hash identifier: 0C6v+wvo4M1+NtxP4mjVLaL5RXfY+mSgkJz0i0/Ujl0=
Subject key identifier: CB:95:41:F1:74:27:BE:FC:82:C3:14:58:0C:91:7A:C3:62:17:3B:3A
Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Certificate serial: 09EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
Manifest number: 09E3
Signing time: Sun 01 Mar 2026 23:50:30 +0000
Manifest this update: Sun 01 Mar 2026 23:50:28 +0000
Manifest next update: Sun 08 Mar 2026 23:50:28 +0000
Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: taxXjac382g5D7geqW7OKxoNdlsJ/VIpkshxVY3EDHM=)
2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: TtvgX0HunQnxwePu7sD+x5FU7eZoqly/IQVqoa8h86s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2539 (0x9eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Validity
Not Before: Mar 1 23:50:28 2026 GMT
Not After : Mar 8 23:50:28 2026 GMT
Subject: CN=69a4d0c6-2ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:05:12:b1:99:c5:ee:5e:10:19:37:ea:a6:
de:ad:56:ad:d4:88:4b:37:09:81:ee:00:da:f2:5b:
60:7f:19:79:b6:41:68:ec:46:5f:49:26:ce:e6:7b:
85:57:8e:d8:8f:03:5a:b6:bd:22:ad:54:44:d0:67:
58:cf:e9:0e:01:c1:a2:f2:f6:e5:e2:9b:d1:47:e1:
4c:0b:8d:80:22:01:55:2d:ba:fb:31:91:de:7f:6a:
dd:0b:88:71:5a:c5:a2:d8:8c:c5:a0:6b:dc:3d:66:
c0:35:af:8b:9d:62:af:18:84:dd:a3:4d:96:26:0f:
a7:32:55:9e:c9:77:78:11:35:ba:86:29:b3:c3:5b:
3b:07:43:f2:23:38:31:17:5f:32:e9:da:87:31:b9:
66:d1:a6:58:9a:39:11:b4:81:e0:ed:0b:b3:92:45:
5f:f5:db:ca:e7:f1:99:fd:c7:a4:ae:94:64:c3:61:
c1:9a:08:bd:93:35:ba:db:18:b0:cc:e9:cf:7b:08:
6a:d1:9c:2e:78:93:f8:54:eb:c8:a0:d2:33:ac:fe:
c5:39:46:6a:7f:5f:23:cc:9d:53:86:58:77:42:d1:
6c:45:0f:93:6a:3e:e8:6e:15:7c:eb:25:4e:93:5a:
49:15:4c:f7:ed:ae:bd:14:bd:10:43:02:26:92:05:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:95:41:F1:74:27:BE:FC:82:C3:14:58:0C:91:7A:C3:62:17:3B:3A
X509v3 Authority Key Identifier:
keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:80:8f:df:fe:f6:07:9a:df:a9:4f:63:dd:8c:49:52:a3:35:
c3:e4:ef:c6:df:e7:78:39:65:1d:9a:6d:cc:cd:aa:ec:13:11:
2a:12:36:39:48:f8:21:61:98:85:29:86:93:fb:83:d6:e3:1d:
a7:7c:fe:4a:81:89:f4:88:1d:91:f3:69:a7:ee:0a:0f:bf:68:
a9:b5:6e:6f:36:f0:ef:a6:8c:4a:3e:d2:37:71:8a:46:18:98:
36:e8:f8:5f:69:eb:d3:93:7a:61:4a:57:d3:a3:ed:2a:11:89:
37:11:7a:33:2c:b9:c7:e7:37:90:49:35:a2:5a:a2:29:c1:19:
53:5f:07:32:69:e3:d6:78:dc:91:c7:a5:74:4b:20:b2:bd:8a:
28:83:79:5f:06:88:6b:25:dc:ee:d4:fa:a8:c7:58:15:09:b7:
fd:82:f2:3e:92:a1:74:37:a7:84:21:8a:96:37:33:ec:5f:86:
5d:fb:52:07:eb:3d:62:a5:56:88:33:6b:86:37:54:22:54:39:
00:b4:a8:ef:ca:8c:e7:d2:8f:23:67:f7:8f:e5:12:f8:63:16:
3e:ab:9d:10:4f:3f:89:dc:64:c6:61:be:f0:f8:1e:05:bc:92:
33:23:48:35:9c:dd:2e:91:df:37:1a:64:f8:f3:78:da:77:1f:
ea:25:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:45:00 2026 by rpki-client