
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json)
Hash identifier: f19RzZuzTiAveYu8mOxoUPFNRL04+xoQzyikvDtk4i0=
Subject key identifier: DD:DB:C0:24:43:AC:DA:4D:D3:FD:65:D9:9D:E5:B0:FB:39:97:2E:3D
Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
Manifest number: 73
Signing time: Sun 01 Mar 2026 09:12:46 +0000
Manifest this update: Sun 01 Mar 2026 09:12:45 +0000
Manifest next update: Sun 08 Mar 2026 09:12:45 +0000
Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: UMsgY3nC0nvVMn9gfyeottC8BZ04piJP9j6o+jnFNyk=)
2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: aq1rkL3lbBFNGSwriSfEgnoepxf49LO+cuY4rWY4wMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Validity
Not Before: Mar 1 09:12:45 2026 GMT
Not After : Mar 8 09:12:45 2026 GMT
Subject: CN=69a4030e-6663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:5b:1c:83:cd:c6:73:98:f0:de:c1:7f:60:
61:c0:6b:5a:d1:ba:7e:c9:42:9a:5a:86:a7:2b:3b:
c0:d8:12:b2:f5:80:73:3b:4b:a9:aa:9e:12:05:d8:
0e:f4:49:8b:c3:b5:ed:fd:58:2d:48:13:af:9e:8b:
11:eb:8a:7b:b1:e5:e0:ea:b6:23:a1:11:37:f2:93:
33:82:8e:f8:ae:1a:4e:f1:8c:db:0e:d1:0f:50:31:
ad:15:5a:9f:b8:02:dc:6b:a2:93:e3:90:29:47:31:
ce:1c:30:60:4d:c0:ef:59:42:44:82:46:b4:bb:13:
5b:a7:2d:1a:d2:4c:b9:7f:10:40:0a:b3:27:f7:36:
07:23:74:11:71:70:5b:75:3e:5f:54:19:39:d6:c9:
5b:41:cc:25:4b:68:b2:45:2d:61:55:c0:5a:c2:bb:
85:e7:75:26:67:29:06:9e:79:19:7c:51:89:09:8c:
3b:d9:66:bd:ef:aa:57:ba:6f:21:56:fe:5f:4e:85:
58:d5:b3:36:b1:1d:d1:d9:2e:c6:42:77:7f:7f:ff:
34:2a:71:31:7d:56:e8:fd:5a:10:b4:f7:45:f6:6a:
08:43:15:e2:00:21:27:47:49:0d:32:e1:10:80:48:
4b:cf:69:f6:31:12:10:4a:70:8f:04:bd:92:2a:37:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DB:C0:24:43:AC:DA:4D:D3:FD:65:D9:9D:E5:B0:FB:39:97:2E:3D
X509v3 Authority Key Identifier:
keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:2d:ea:e5:76:28:65:dc:2f:1b:a0:92:3c:2c:42:38:5b:47:
b1:74:d7:f1:52:31:49:c5:5d:4c:ac:05:d6:2e:9e:67:e2:3e:
36:38:9f:4a:fa:82:a9:ad:41:08:d7:10:c4:cf:96:67:5c:ea:
ff:60:1e:dc:20:04:b1:ce:5a:c5:4a:4d:f9:ad:d7:ca:94:cb:
00:14:0a:9c:e2:30:4c:3d:ab:84:69:7d:bd:7a:5a:cd:37:5f:
08:1e:a4:25:bc:87:3f:e8:5f:46:7b:19:96:18:4d:4f:8a:19:
0f:27:81:c9:02:b6:e9:c1:f9:1e:65:6b:ce:34:12:99:78:1f:
5f:42:11:47:d9:39:c9:6a:da:cd:08:c1:fc:5a:b5:53:4f:f1:
16:c7:48:a0:30:d0:7f:16:5f:ba:e7:a5:36:ac:a0:54:82:75:
d3:14:90:db:ed:8d:f7:af:83:ad:45:08:f4:88:15:f4:e6:e0:
6c:a0:6d:f3:97:a1:db:02:cd:83:9e:cc:44:da:d0:8f:bb:ae:
af:60:05:48:e1:e8:89:85:19:87:ef:78:aa:25:6d:72:03:76:
83:a2:ad:07:86:ea:3e:32:25:b9:17:16:95:ab:94:e5:24:b1:
40:4e:ec:22:11:51:f5:04:04:dd:92:f1:73:49:a0:2e:dd:ae:
3f:62:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:34 2026 by rpki-client