
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json)
Hash identifier: MBg1d1xfgdGO1QWu1bkBiPVn4eRUBQHQqjJDP5hTrLM=
Subject key identifier: 9E:40:C9:E5:9D:D5:B3:19:94:34:1F:A3:16:EC:40:88:52:47:A3:F0
Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Certificate serial: 352C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
Manifest number: 3520
Signing time: Sat 28 Feb 2026 15:00:40 +0000
Manifest this update: Sat 28 Feb 2026 15:00:40 +0000
Manifest next update: Sat 07 Mar 2026 15:00:40 +0000
Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: YwIH7Y2xutIZzTDiA1a2heBvCoExjZs4MJER2esVP/o=)
2: 991B38BC44E811F0968D8B30C4F9AE02.roa (hash: eEF2YFvICJOqay9i6WsFZPXnUiZoOP0Qsq3SyzYoK+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13612 (0x352c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Validity
Not Before: Feb 28 15:00:40 2026 GMT
Not After : Mar 7 15:00:40 2026 GMT
Subject: CN=69a30318-112e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:a4:f5:f3:3e:82:19:7a:e8:6e:39:b3:89:
58:06:c9:77:21:c3:15:1e:f9:35:88:73:ca:00:fb:
e5:fe:0e:79:7e:75:52:90:e5:5b:7c:6b:27:54:58:
79:09:38:4f:50:62:bc:7e:cc:45:56:3b:9e:a9:28:
92:9a:56:26:7d:77:41:36:4b:04:a0:9a:f4:5e:56:
40:2d:f0:15:3b:a9:cf:78:d8:f1:45:e6:70:bf:c6:
53:af:97:47:ca:3e:d7:ef:7b:27:d4:31:83:4c:df:
58:3a:fe:19:ed:b0:1b:c6:2d:53:97:9c:7f:22:e2:
03:ff:0a:1a:e8:3a:16:c5:d6:96:8c:90:ca:82:76:
98:31:45:91:17:f2:d3:71:67:cd:ce:16:a3:ee:e7:
3e:be:45:cf:86:e4:da:65:c8:3f:86:fd:c8:8f:e1:
f0:cb:a8:c2:6b:44:2d:1c:92:e8:bb:4e:14:16:e9:
0d:b7:11:71:f7:0a:ff:2d:e7:ec:86:cd:66:50:4f:
b3:e6:95:c5:7f:34:80:c7:3e:78:bf:06:11:c4:58:
f8:09:05:25:7c:ce:25:64:5c:01:a9:11:d0:ed:19:
0d:02:cf:72:da:ae:5e:37:48:fc:14:b2:b3:42:4a:
96:19:75:ad:0a:77:55:99:51:8c:8c:fb:31:ae:36:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:C9:E5:9D:D5:B3:19:94:34:1F:A3:16:EC:40:88:52:47:A3:F0
X509v3 Authority Key Identifier:
keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fc:65:6e:ff:7c:6d:0a:3c:54:a8:fa:b7:d0:60:4f:19:3c:
2b:35:7d:aa:17:0b:c9:29:3d:ce:0e:ef:de:b1:09:54:7b:85:
0d:86:de:d8:d6:02:fa:76:13:b8:c2:73:2b:98:4d:d5:7e:d1:
54:d2:b7:7e:0e:83:76:b5:b5:bf:4f:0c:f1:32:0e:2a:c9:80:
82:c4:04:8b:df:fa:1b:d3:6e:38:a8:ca:45:c5:84:4e:e8:8e:
7d:f4:c5:35:62:50:77:7d:93:2f:80:8b:4f:88:42:b3:d0:70:
c3:0f:ae:22:e5:7e:e3:29:b2:46:a2:5e:b5:13:27:5b:f2:b0:
65:66:4a:e1:a8:fb:2b:be:03:a9:b0:00:05:35:52:af:bf:ac:
dd:b6:06:eb:ba:a1:bf:65:a0:45:86:b0:7e:40:78:16:74:d7:
71:3f:44:a7:b1:62:a5:af:a9:ee:d2:2c:97:fc:4c:33:b6:34:
df:0f:24:4f:73:6a:88:de:8d:17:d5:e2:e8:3c:1e:19:39:cf:
82:8a:d7:e0:fa:a6:13:40:70:60:18:26:3d:35:6e:7d:a2:cd:
05:7f:8f:cf:f2:1b:ec:ac:39:10:b7:bf:f0:93:38:23:5f:b7:
83:29:91:84:b2:fe:8c:48:54:64:7e:20:1f:26:aa:26:19:3f:
73:13:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:46 2026 by rpki-client