
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
File: s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json)
Hash identifier: i30nJw5LkAZqWc2yqNMSM6VIOXCd4jWVsOdFAJgsKNU=
Subject key identifier: 49:81:32:44:77:3E:A6:5C:2B:3B:4A:30:9D:0F:F9:10:79:E6:E3:2B
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Certificate issuer: /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial: 0B78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
Manifest number: 0B6A
Signing time: Mon 02 Mar 2026 02:49:52 +0000
Manifest this update: Mon 02 Mar 2026 02:49:50 +0000
Manifest next update: Mon 09 Mar 2026 02:49:50 +0000
Files and hashes: 1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: +nY5WtfwaBO0UnYcKyd/MFEn07rCH20+am6TD9Temdk=)
2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: WhXKErJLAIqR1zLHcYxgscDMvLyXfXcOfeeDlHCZXbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2936 (0xb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Validity
Not Before: Mar 2 02:49:50 2026 GMT
Not After : Mar 9 02:49:50 2026 GMT
Subject: CN=69a4fad0-70c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:ff:9c:7a:67:f9:31:82:82:9d:0e:e8:fe:
7c:9f:ff:fe:a0:19:d8:f0:b5:db:42:df:60:64:e7:
3c:96:e8:b5:81:8f:c5:07:59:a8:b7:0c:e5:a5:5f:
2b:00:3e:06:2c:d2:a5:2e:09:e2:25:bc:d3:2d:d8:
8c:24:74:4e:f5:40:b1:86:aa:20:5a:7f:fe:43:80:
a7:be:2b:73:80:fa:cb:eb:16:f5:f9:f5:e9:84:63:
08:b0:a2:e0:39:40:04:10:75:04:2d:a8:4c:f2:ba:
c3:2d:4b:c4:5a:ed:f9:e1:98:5b:07:3c:9c:a5:2e:
44:2c:25:42:0d:e2:3f:37:51:81:02:61:7b:9b:80:
c2:3a:5b:22:d2:58:54:bb:7d:d9:34:f8:cb:a6:d5:
16:ab:5a:cb:f7:b6:6f:2a:24:3e:22:7c:81:b3:da:
b7:87:e2:c0:b6:09:4a:e2:6d:02:b1:bd:17:07:f0:
d4:57:64:1b:be:e8:59:00:03:03:9a:17:92:2e:45:
fd:d4:0f:5e:ca:bb:b8:7f:f8:71:b8:98:a6:27:ca:
bb:d2:cb:c4:59:51:cd:fa:98:5b:68:43:fd:59:06:
83:78:4e:b8:ae:b2:88:09:f5:c9:56:9d:ed:4e:32:
38:6e:b4:db:5e:8c:6e:69:8c:9f:c8:8a:3f:bd:0e:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:32:44:77:3E:A6:5C:2B:3B:4A:30:9D:0F:F9:10:79:E6:E3:2B
X509v3 Authority Key Identifier:
keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:3c:68:ca:dd:1e:17:51:a5:8b:3b:8a:33:65:62:dd:df:e8:
20:7d:cf:76:d8:52:1b:56:7e:43:f0:ff:82:0c:93:1f:19:8f:
50:f9:96:06:96:47:47:ec:cd:c5:bd:c1:51:19:df:4e:4f:11:
d1:94:36:9d:a1:15:05:35:9f:ee:ae:3a:80:c3:4f:9e:a2:16:
42:d3:6c:c7:f9:66:61:43:a5:5c:96:fc:06:ef:ec:a9:1e:0d:
47:d2:0a:4b:ab:da:01:20:f3:f9:42:0f:34:1c:5d:db:2c:1a:
61:6d:7d:f4:ae:79:7c:8b:ca:0d:2b:ba:a4:e8:8c:18:7e:4a:
4f:88:0c:33:ec:ef:23:aa:5c:1b:ab:c0:d8:46:df:a3:6d:4e:
3e:63:d9:9a:5b:19:22:04:32:76:b1:25:70:76:7b:29:9a:f6:
5e:9c:f3:e3:22:9b:9a:01:fb:ce:54:96:dd:67:ce:4c:60:02:
40:c1:5e:8d:9c:4d:cf:a4:94:e2:20:7a:e3:b9:a2:06:01:56:
0e:01:cf:db:9e:ec:82:e3:71:7b:9e:38:dd:a6:2e:32:16:88:
69:c8:2f:0e:c2:43:4b:7c:f7:d7:24:a3:b0:9d:18:2a:06:31:
be:3b:11:2e:4f:72:6f:e5:a7:22:5c:f0:87:4d:cb:32:39:e9:
af:bb:3d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:01 2026 by rpki-client