
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
File: Py6661HMOPlbMj3QyF7oMK_jN7M.mft (raw, json)
Hash identifier: LabjUD8GZuUOj8bw8G+1uitMRK0scunhuC7vRv/RGYU=
Subject key identifier: 59:33:59:59:CD:D2:F0:15:F4:8D:C6:43:C5:D8:CC:86:9A:76:44:12
Authority key identifier: 3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3
Certificate issuer: /CN=A91C430B/serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
Manifest number: 49
Signing time: Sun 01 Mar 2026 09:42:32 +0000
Manifest this update: Sun 01 Mar 2026 09:42:31 +0000
Manifest next update: Sun 08 Mar 2026 09:42:31 +0000
Files and hashes: 1: Py6661HMOPlbMj3QyF7oMK_jN7M.crl (hash: sicZCjUl3X62sryAMFyQxIB3/miVHqjxpchBAJbKVpo=)
2: B32AFC52A7CF11F0923B7A2BC4F9AE02.roa (hash: 1uCfLlF3eOYzrWGfrDsn6fFJeWHxdlAShDA4pPyjH1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl
rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C430B, serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3
Validity
Not Before: Mar 1 09:42:31 2026 GMT
Not After : Mar 8 09:42:31 2026 GMT
Subject: CN=69a40a07-bc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:21:1f:99:6e:3f:00:e9:d4:bf:95:03:5b:
ba:49:f7:57:b9:b3:17:d1:ca:78:7a:5a:22:f9:4d:
80:fc:9e:d2:b2:e7:31:7e:d0:d5:d2:f3:48:14:1f:
b5:9f:1b:42:4c:dc:34:d2:e2:17:6d:31:38:93:8d:
87:38:b8:51:28:74:e6:99:58:9e:06:23:a3:58:e3:
e9:85:37:e6:9a:aa:27:55:b9:c2:43:53:aa:d8:3a:
a1:97:14:1d:04:10:cc:05:02:a6:39:e0:60:ed:e9:
57:4e:d3:e4:ba:55:54:67:3f:7a:84:0a:74:bd:07:
10:c7:b1:bc:8d:d4:57:3c:97:c3:d2:c4:14:59:11:
47:4e:41:c1:aa:08:74:d8:0d:5a:18:c0:31:9c:71:
49:91:f9:cc:bc:b2:fe:5a:95:82:f2:9e:cc:05:07:
7d:66:6d:2d:98:94:8d:4e:bb:10:19:31:cd:5d:3b:
be:ad:6d:92:a9:90:be:3a:54:11:5d:9c:8b:ea:04:
1b:e6:95:51:60:f5:25:95:5e:60:0a:54:93:17:98:
89:38:62:1c:05:eb:67:df:fa:68:a3:97:38:e3:62:
c3:57:e2:49:01:3d:aa:94:be:33:47:5e:29:4d:c0:
09:57:24:6b:31:8a:ed:91:91:40:76:ba:c2:40:b0:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:33:59:59:CD:D2:F0:15:F4:8D:C6:43:C5:D8:CC:86:9A:76:44:12
X509v3 Authority Key Identifier:
keyid:3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:67:41:ac:79:25:78:73:f8:77:16:7f:96:29:74:cd:16:fe:
31:0c:b0:da:2b:95:50:50:ce:30:9d:cc:19:f7:67:8a:c1:d3:
0c:c8:9a:e9:00:0c:40:7b:a5:44:75:d7:a3:ac:26:e1:9d:bd:
01:d0:2d:c4:4c:e7:ed:af:94:af:e0:66:15:d6:58:66:02:f2:
4e:93:8d:5f:f0:6e:ae:5f:12:a3:3f:a2:f6:fc:f9:bc:cd:37:
23:07:b8:ec:ba:af:46:dd:e3:22:d2:9c:72:0f:a3:77:5a:d3:
5d:d6:33:03:a4:97:4e:51:1f:50:f0:57:00:a5:b1:24:24:73:
ad:34:ec:f2:b6:19:b8:b4:91:26:db:bc:22:4f:fa:f0:01:0b:
78:2e:d5:f9:f8:bf:16:d6:eb:44:69:df:20:cb:fd:01:fe:b3:
b1:d5:f1:10:c5:9e:ea:ea:18:cf:79:df:ad:47:81:9c:43:7b:
b2:52:55:fb:35:02:66:50:aa:d0:bb:73:31:47:8e:2a:b3:53:
d9:24:a7:83:f4:b9:f6:1a:92:f1:4f:e4:bb:f0:88:ac:10:2e:
5e:ee:79:58:bc:50:1b:c7:7e:5c:b8:f2:b3:00:dc:af:50:e5:
85:02:eb:5c:2f:a9:25:42:0d:e6:53:fa:1f:df:28:65:61:e5:
7f:9f:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:21 2026 by rpki-client