
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
File: 0fGDjm-uASwUWNKgeiJNnhEBJdw.mft (raw, json)
Hash identifier: kQQIyrcWc7O/yti8pS/Yg52vINGJBX3Yqb4bS33sKdI=
Subject key identifier: DF:01:25:96:69:10:E1:18:3B:B9:E3:E4:71:34:6A:2A:4D:DA:8B:DB
Authority key identifier: D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC
Certificate issuer: /CN=A91D3603/serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
Certificate serial: 056A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
Manifest number: 0563
Signing time: Sat 28 Feb 2026 23:55:53 +0000
Manifest this update: Sat 28 Feb 2026 23:55:52 +0000
Manifest next update: Sat 07 Mar 2026 23:55:52 +0000
Files and hashes: 1: 0fGDjm-uASwUWNKgeiJNnhEBJdw.crl (hash: NHE0gNEBQErzshD8ODWi0hBqBBysU8nnvSC1I3K02XI=)
2: 11F818F81F7311EC9027050AC4F9AE02.roa (hash: b/ItM9VGVv0zUWnweJ6+Pz3YcBgADXF1u82bmhYCBN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl
rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1386 (0x56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3603, serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
Validity
Not Before: Feb 28 23:55:52 2026 GMT
Not After : Mar 7 23:55:52 2026 GMT
Subject: CN=69a38088-6490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:77:74:36:85:72:8a:23:f6:8d:72:76:66:
6f:b0:d3:46:ad:80:97:05:fc:9a:37:2d:6c:2f:1c:
9b:25:b6:9f:3d:c1:6d:86:d4:6a:3c:b7:a9:69:bf:
01:9b:68:5d:a2:eb:2b:24:dd:4e:77:35:13:4b:8e:
41:ea:5a:fa:16:81:42:b1:b3:2b:ed:57:e3:b7:d9:
35:c8:af:43:c5:72:45:02:72:f8:f9:75:fb:ad:a1:
00:15:5e:cf:b2:9f:fe:ef:0a:41:4e:71:4c:cc:3b:
8f:37:9d:e4:ed:16:d7:73:5c:c9:54:36:64:57:19:
14:ab:a4:ab:ae:1c:d8:3e:85:d3:ad:d1:ee:cb:ff:
9c:fb:e9:e7:8b:99:61:75:dc:19:fa:83:3f:1a:f8:
f9:42:c6:f8:40:10:5a:81:69:1d:4c:39:85:9a:8a:
a5:9c:f0:51:93:7e:ce:d3:01:6e:57:5b:3f:e2:af:
30:86:38:07:3c:16:db:86:e0:c9:1b:f1:f8:86:95:
85:5a:1f:41:22:6f:5e:c0:e3:cb:fc:75:20:a5:2c:
ee:3c:6c:4d:10:2c:4d:97:c8:d8:4d:77:58:5b:6c:
3b:a6:39:e6:a2:68:49:fb:f8:60:93:98:08:3d:0e:
16:62:0d:22:b6:5b:96:0b:55:ea:54:d7:6e:8b:36:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:01:25:96:69:10:E1:18:3B:B9:E3:E4:71:34:6A:2A:4D:DA:8B:DB
X509v3 Authority Key Identifier:
keyid:D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2a:ff:dc:dd:99:d6:ec:e9:63:09:36:29:bc:0c:94:ec:56:
76:35:b6:59:52:0f:9f:ee:1f:2c:37:13:66:d4:be:a0:9d:12:
9d:a9:53:e6:de:a9:a3:70:2a:9a:68:37:6a:0b:bb:ca:0b:50:
36:4a:cf:93:ef:96:53:64:73:05:c1:3e:ad:9c:cc:a8:b4:7c:
68:60:a5:91:0c:af:44:19:5e:77:8b:20:d6:37:da:98:33:49:
b0:33:4a:c0:32:13:9f:23:5b:30:31:63:cd:2b:22:f3:28:c9:
82:ce:bb:e2:51:00:ea:4a:6b:09:a5:93:83:8b:be:a5:ff:c8:
a8:c7:c2:e5:5c:b2:a1:40:58:4c:b7:c7:96:56:51:3a:8d:d7:
54:94:9d:b3:09:46:99:4e:25:91:73:7a:05:60:94:ba:51:7c:
e9:ef:35:6b:e2:ad:42:2b:8f:df:68:17:b9:a0:db:da:0b:7e:
da:99:a1:9d:ff:6d:84:61:ee:ed:36:da:ae:ef:50:c2:b0:57:
4f:3e:9e:2f:c7:c5:6e:f5:9f:19:6b:1a:88:b3:bd:17:ab:a4:
05:d8:51:7f:ae:7d:1e:96:8e:fe:9a:b3:f0:3b:60:da:fc:43:
2b:52:d8:b5:b7:62:cf:b5:37:90:a1:42:1b:3b:63:a8:50:5c:
e4:7b:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:19 2026 by rpki-client