
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json)
Hash identifier: QNumpKp0vCtnGWS1gWzmq6uYUQBh7dqAIN3mPtXvbRA=
Subject key identifier: A1:0C:66:B3:02:8F:EE:31:A6:A5:7C:B6:BB:32:D4:E0:B7:3F:B2:03
Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC
Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC
Certificate serial: 036D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
Manifest number: 0367
Signing time: Fri 17 Apr 2026 00:47:40 +0000
Manifest this update: Fri 17 Apr 2026 00:47:40 +0000
Manifest next update: Fri 24 Apr 2026 00:47:40 +0000
Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: ARex+f2F4CEyl9D4B6WldjGeRdN/KGaZXL6+EIO4SSg=)
2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: 8K+tbBqygn5Cepj/v5AzwIQ0fcUMd7as7jI1naDpakc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl
rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D415B, serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC
Validity
Not Before: Apr 17 00:47:40 2026 GMT
Not After : Apr 24 00:47:40 2026 GMT
Subject: CN=69e1832c-3b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:0a:77:37:55:45:59:dd:bb:c5:63:41:9f:
85:04:3d:7a:7f:52:d4:46:09:f6:d1:15:d0:e3:96:
5e:4a:db:00:9a:d0:f0:7d:9e:91:d0:2c:92:07:fd:
87:b5:1a:92:41:39:10:55:43:07:c3:20:b7:44:d6:
7e:16:2b:00:7d:b1:40:c7:f7:ff:44:f1:cf:f7:67:
71:82:5d:c5:e3:e8:7d:c3:31:ae:10:1b:80:f0:39:
d3:e4:9e:f8:11:cc:ce:19:f0:17:b7:d7:f5:f5:e7:
48:26:07:89:f2:b8:fa:c4:22:3c:27:76:f3:99:44:
00:5e:1a:36:7b:e8:b6:03:c6:c8:36:b7:65:d1:76:
e2:1a:ce:59:35:06:ae:c5:0c:3c:a4:fd:e2:93:dc:
8e:f5:b5:9e:26:76:0a:d5:e4:0d:66:35:c7:40:e4:
79:02:d4:2f:e8:a9:6f:94:b6:3d:98:13:a6:23:fb:
83:6f:2a:7f:00:aa:8e:ac:c0:0c:25:af:cc:32:1d:
9d:d4:25:02:4e:31:2f:be:9d:f7:d5:5a:f8:07:89:
a3:c1:23:e8:1f:6b:0d:6d:8a:b1:61:80:0d:36:c0:
02:c2:c3:2f:ea:ad:b0:aa:02:71:d5:f5:42:c2:7d:
9d:ea:32:be:28:48:c4:3a:3a:4d:36:d1:b1:b7:ee:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0C:66:B3:02:8F:EE:31:A6:A5:7C:B6:BB:32:D4:E0:B7:3F:B2:03
X509v3 Authority Key Identifier:
keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:d9:1b:2f:1a:2a:ff:64:35:bd:56:70:f4:02:75:e9:ea:0b:
af:6e:e0:94:47:72:fd:1c:55:93:76:24:e1:32:06:b6:a1:de:
ad:b1:dc:02:6c:25:cd:0e:71:eb:c1:a7:b0:10:d1:28:88:ad:
64:8f:2b:46:3b:d0:25:b7:50:0e:b1:8e:aa:b3:41:8d:54:de:
a1:73:34:ac:9e:1d:70:15:ab:0e:d5:15:74:cf:9b:6a:90:d1:
62:ae:82:ee:19:75:6b:2e:15:86:fc:07:c6:57:5b:22:93:5f:
de:a9:2c:95:35:bf:0e:33:7e:3c:22:9e:9a:05:7b:5e:85:2d:
b5:42:a1:ba:b9:75:43:7f:48:90:50:fc:1e:b2:30:a7:de:aa:
0c:68:0b:72:1b:87:82:72:d9:be:9d:78:17:e2:c0:4a:43:67:
9a:27:90:ba:95:83:7f:25:f2:f7:43:78:b9:93:2c:bb:f2:a0:
58:91:29:69:5b:44:66:6d:5a:d1:08:ae:ca:16:7d:31:48:22:
3d:01:a4:d2:92:b2:65:52:15:1f:1c:e7:c0:49:2e:df:37:95:
8f:53:07:e6:99:49:f4:27:98:fb:dd:e8:31:3d:1a:e0:64:7c:
76:ab:b9:36:c2:19:ab:96:32:b0:6d:ab:19:bd:fc:18:11:95:
bb:9b:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:38 2026 by rpki-client