
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json)
Hash identifier: iVWtpNr6v2DFLp0BENyJ42zlbKpqvk34A9qP09LeoS0=
Subject key identifier: 5B:55:60:53:9F:CE:54:58:83:B3:A2:EF:DF:71:0B:CF:D8:81:70:18
Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
Manifest number: 95
Signing time: Sun 01 Mar 2026 08:41:51 +0000
Manifest this update: Sun 01 Mar 2026 08:41:51 +0000
Manifest next update: Sun 08 Mar 2026 08:41:51 +0000
Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: WZlxjYPfXP6jqIxb18SsWh6zsCG1a5cIlaVpJxN7jnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Validity
Not Before: Mar 1 08:41:51 2026 GMT
Not After : Mar 8 08:41:51 2026 GMT
Subject: CN=69a3fbcf-b360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:13:4e:47:ae:de:fb:20:08:e1:86:c1:22:
f6:54:c4:15:86:e6:65:97:9f:1a:54:6b:4e:8c:33:
74:30:f5:45:52:aa:25:ed:59:67:7e:86:af:08:14:
d0:ce:b8:f7:8d:a6:4f:e6:d9:de:81:2c:6c:37:e7:
b3:2c:45:c0:e4:b3:17:85:16:5c:4d:e8:75:eb:c3:
9f:0c:c3:dc:cf:37:2b:46:69:6d:bc:4a:b6:84:8f:
b7:ba:d7:68:62:d2:9e:f8:13:51:af:fa:ac:a0:13:
ae:04:1a:5b:51:34:6f:b3:84:a3:8e:43:4b:a4:ee:
a0:68:c4:17:14:f7:63:0e:67:78:02:a5:d1:11:0f:
b9:3b:35:ad:32:3e:36:45:dc:33:c6:d8:26:5d:7c:
6d:25:93:b7:5e:06:49:ac:e2:ef:1e:42:eb:bf:9b:
ef:0e:58:a7:06:66:ee:81:0d:7b:ca:c0:08:a9:bf:
46:3d:fc:6f:4c:7f:7a:c9:01:2b:a8:89:45:e5:22:
a8:ef:04:8f:43:67:ec:5d:04:10:2a:96:f7:f5:d9:
8f:58:5e:18:72:51:d2:db:c8:80:ee:fa:00:e1:e2:
38:e8:0b:fd:c9:32:32:bb:f4:c3:31:b9:93:15:8d:
38:e9:ba:bd:5c:00:6c:65:38:b2:cb:78:d2:b9:b4:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:55:60:53:9F:CE:54:58:83:B3:A2:EF:DF:71:0B:CF:D8:81:70:18
X509v3 Authority Key Identifier:
keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:3d:44:b7:91:fb:41:9d:5f:e1:dc:15:d3:52:47:3d:1d:98:
59:2c:5a:b9:47:6d:dd:e9:79:6a:cc:e9:a6:2c:e8:4d:49:2e:
65:85:b7:89:9a:f2:cc:2b:34:af:4f:cf:1b:0b:8d:fe:21:bb:
16:47:3b:37:e4:24:51:be:85:e6:17:b3:f2:28:7e:5e:8a:a0:
22:55:c2:d5:a2:11:db:1e:eb:b6:d3:8f:6a:3a:6c:b9:c4:73:
68:79:1d:ae:3d:93:f4:f2:fc:00:da:b4:db:6c:91:55:43:3c:
a3:58:f8:3b:14:46:3b:2c:2d:1f:19:6e:70:c2:07:25:16:3e:
95:a8:5a:89:94:8f:0a:d1:42:2f:90:68:6b:42:bb:9d:74:2d:
5e:61:44:6f:3e:2e:58:4c:cf:90:55:69:ae:7f:70:60:47:c4:
8a:01:94:a1:46:58:08:64:3e:8a:84:3b:c0:60:a7:fe:81:56:
b6:56:aa:8a:61:a3:5f:8d:20:7a:b3:cf:0b:f4:10:08:ef:9c:
be:7f:93:3e:e7:74:24:05:8d:91:b5:18:1a:fc:f1:98:77:51:
e2:29:12:88:e9:b7:f2:5a:87:9c:71:bb:64:cd:c8:95:22:45:
4d:48:69:3d:50:fb:e4:50:a7:6e:61:43:00:5f:eb:2a:44:66:
a4:da:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:59 2026 by rpki-client