
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json)
Hash identifier: Nt1r5se7cxKqW3scPk3It4rirQCx9vt4qtMMtvxl4O0=
Subject key identifier: 36:71:C6:44:5D:EB:A3:54:5A:7C:45:CD:33:41:1E:8C:8F:65:53:40
Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
Certificate serial: 055A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
Manifest number: 0550
Signing time: Mon 02 Mar 2026 02:49:29 +0000
Manifest this update: Mon 02 Mar 2026 02:49:27 +0000
Manifest next update: Mon 09 Mar 2026 02:49:27 +0000
Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: 4m7OIvS7/BT2/BGLVLs9vRWywR0Jtfv4G4ke/bCJJE0=)
2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: bUHBBf5sOas57JoBnuGlqh7PgAmJoHgi2CnQkJdmpgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl
rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1370 (0x55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
Validity
Not Before: Mar 2 02:49:27 2026 GMT
Not After : Mar 9 02:49:27 2026 GMT
Subject: CN=69a4fab9-7838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:98:3d:cd:e7:59:64:3e:38:04:64:36:07:
c9:9a:2e:a4:b2:76:e3:c9:f2:d1:05:af:b9:6e:69:
e7:8f:f3:09:76:50:0a:7c:b8:14:61:93:37:a8:d3:
c5:e6:f7:5d:a0:a9:a4:56:02:42:2f:32:7c:3d:1a:
d6:6b:31:7d:53:2e:0f:8e:bc:ef:a7:21:6e:e8:83:
f7:85:9b:9f:4e:11:59:51:2a:f4:b6:69:f9:9d:27:
53:7b:de:bf:81:e3:1e:61:63:e5:da:ea:84:3a:ce:
1c:a4:51:55:fe:17:e5:48:7d:7c:b1:30:13:5b:bf:
ed:62:8e:10:69:25:3a:9f:c7:c3:00:9b:84:a6:5e:
b5:91:ea:68:40:2c:f0:aa:c6:5c:b5:2b:81:03:16:
a6:83:a9:f9:b3:9e:69:96:6a:19:a4:a3:3e:10:6d:
eb:2c:1d:87:da:af:01:54:29:a2:cd:20:f7:8f:24:
c6:03:2c:c1:fb:bb:90:cf:ca:b5:64:d9:06:d2:19:
cb:a0:47:6d:69:99:63:c5:4f:74:1f:45:c9:33:c1:
e6:6f:0b:42:b7:d8:d5:0b:04:54:00:f2:51:c4:e7:
32:4f:18:8a:2a:9c:58:15:c8:db:f9:fc:45:d3:17:
41:07:f7:66:d8:a4:8e:af:44:34:d8:db:c9:fb:ed:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:71:C6:44:5D:EB:A3:54:5A:7C:45:CD:33:41:1E:8C:8F:65:53:40
X509v3 Authority Key Identifier:
keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:89:d4:0f:fb:3f:e3:52:7b:b9:4f:f9:68:2b:43:81:88:fd:
68:c5:d5:3f:1c:03:68:91:f6:89:ab:96:4e:68:78:3d:b2:e3:
85:85:c6:ae:b1:2a:ca:84:09:1e:af:ff:46:6b:77:22:71:52:
ca:84:08:a4:55:0f:37:b3:d3:cb:15:2d:20:c6:41:fb:eb:c9:
f9:fe:28:63:cf:7e:ea:0c:10:d9:74:58:73:d9:7d:e5:60:de:
30:7f:4c:9a:2b:3e:20:bd:7a:06:8f:8d:67:b1:c5:20:14:49:
e7:78:8b:7f:fa:e8:ce:ea:87:5e:59:09:74:12:38:8a:c2:5a:
f4:70:3b:5c:ee:d1:f7:fe:bd:72:94:cd:0b:a5:3e:62:df:1f:
30:09:17:00:79:af:16:44:fb:aa:25:85:f2:1a:49:2d:40:a0:
b3:6d:61:ae:67:84:d9:0c:77:50:77:80:5c:58:11:d0:c2:0e:
96:c7:d7:6c:c0:0a:1b:83:77:1f:9a:87:4e:39:88:bf:f9:de:
91:da:35:35:c0:7c:28:a2:82:35:a1:91:65:21:40:30:88:55:
ff:e9:22:e4:2c:b8:fd:fb:02:c9:a0:c9:cd:70:bd:10:ea:c1:
d9:1e:64:e9:e4:de:41:79:47:be:8f:e1:5d:51:35:0d:2a:70:
a9:c8:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:02 2026 by rpki-client