
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json)
Hash identifier: uSpdM6JSm2BNrFLlAHOa/wTvELcryX5sGBQc+ffveD0=
Subject key identifier: 9D:D1:14:8B:E4:E6:52:12:43:FD:4F:1D:E2:30:5E:1A:AE:23:26:34
Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
Manifest number: 0133
Signing time: Sun 01 Mar 2026 23:39:26 +0000
Manifest this update: Sun 01 Mar 2026 23:39:25 +0000
Manifest next update: Sun 08 Mar 2026 23:39:25 +0000
Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: 5+Mqwk6aX8gZJY43HYPBALB7YgNFwJgneCU6iMdJ6eQ=)
2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: XlfXtiHFNX7/67H2UR1inFOAMG5dLCk4KBq/ZXW7m4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Validity
Not Before: Mar 1 23:39:25 2026 GMT
Not After : Mar 8 23:39:25 2026 GMT
Subject: CN=69a4ce2e-0971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:95:3e:7e:00:61:e1:d3:e8:67:e1:57:b3:
58:12:39:8a:81:79:01:a3:24:fd:0d:e7:0d:13:cc:
37:77:08:ba:57:de:fc:dd:a1:e1:ac:90:ef:b9:31:
32:42:b1:c2:98:45:4e:38:00:b0:a4:d0:84:5c:6f:
36:ed:3a:1b:8d:c2:36:0f:4e:71:e7:21:40:ba:b5:
d7:0d:76:c3:d8:f8:7b:03:13:ec:ba:06:54:dc:9a:
ca:0f:1b:96:ed:3c:5f:40:73:88:9a:63:b2:aa:7a:
d6:0e:70:4d:7e:3b:9f:e9:3f:b2:d7:4a:47:07:1f:
31:c1:21:80:db:9f:8e:85:37:5f:27:24:81:93:56:
20:0a:05:c3:45:2e:9a:b7:80:14:00:8a:f0:05:2a:
3e:09:a5:92:a4:f2:da:bd:42:2a:98:14:3a:81:df:
8f:ab:4c:d3:0a:6b:9d:0f:16:27:b6:7e:70:b4:f6:
4b:d4:ac:42:b8:bc:50:e2:88:7c:fe:f2:73:b3:0b:
35:47:9f:b5:03:4e:0a:15:16:1e:40:d8:b0:f6:32:
4e:01:32:73:8a:3e:36:44:71:27:bd:e8:19:78:d2:
ed:c9:20:4c:3c:6d:0a:64:d8:0f:ad:a4:a1:54:db:
75:ce:48:ed:c4:82:3c:7e:c4:5c:4b:23:0e:52:38:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:14:8B:E4:E6:52:12:43:FD:4F:1D:E2:30:5E:1A:AE:23:26:34
X509v3 Authority Key Identifier:
keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b8:cd:b8:07:04:a2:61:c6:b2:d3:20:31:da:4e:a7:69:2d:
d5:63:86:b1:6b:9a:3a:6f:f1:92:cf:38:4d:5f:2b:37:1c:81:
9a:84:67:d8:74:6b:48:00:15:09:22:ec:34:8f:92:2b:ca:32:
d8:36:9e:57:15:5b:dc:44:a1:3d:38:ea:57:1c:0d:f1:bf:c2:
9d:5b:c2:6b:4b:22:63:62:8b:5e:a8:53:25:70:41:7a:a0:f1:
a3:53:94:fe:c3:3c:5d:11:2f:59:80:c3:ca:6b:31:6c:53:23:
5f:ef:95:53:40:b0:35:cd:df:1e:8e:da:a4:3f:65:14:22:cf:
37:6a:c5:17:2b:71:81:ae:73:cc:d3:a9:38:7c:0c:0c:8a:24:
c4:72:6c:72:79:95:43:5f:7d:3d:62:06:05:a3:c8:56:c2:ea:
26:53:cb:60:ea:55:4d:c2:bc:3c:aa:c5:da:8f:01:d5:9e:70:
7c:6e:7c:8d:38:9f:65:76:8e:88:ea:cf:7f:7e:4a:ec:5e:6e:
1b:f5:a9:8c:29:9b:bb:40:e2:b3:4e:02:bb:c0:7b:7d:46:32:
46:78:e5:cb:cc:13:38:09:d3:d2:02:cc:94:42:80:ee:1b:d1:
29:5d:5d:b4:a5:26:31:5a:46:f6:31:56:76:ca:fd:f5:b1:5e:
86:88:31:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:53 2026 by rpki-client