
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
File: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft (raw, json)
Hash identifier: fT+VulqIXZyfZFzNSuYwwapWiPicjUgzJcDP8s7eZto=
Subject key identifier: 38:41:4F:C9:E6:AD:47:28:2F:C0:5B:DF:8A:17:1A:6F:14:1B:9E:5D
Authority key identifier: D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4
Certificate issuer: /CN=A91EB820/serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
Manifest number: 73
Signing time: Sun 01 Mar 2026 09:12:49 +0000
Manifest this update: Sun 01 Mar 2026 09:12:49 +0000
Manifest next update: Sun 08 Mar 2026 09:12:49 +0000
Files and hashes: 1: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl (hash: KKfqE2+Z4GtpTAy/KM0GEzAeJ6WxlzYz9K/M29LH1CI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl
rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB820, serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4
Validity
Not Before: Mar 1 09:12:49 2026 GMT
Not After : Mar 8 09:12:49 2026 GMT
Subject: CN=69a40311-c215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:04:75:bd:6d:5b:7b:74:6c:97:c2:53:d3:
ff:b7:20:c4:85:85:fd:c3:e9:11:cf:c2:2d:60:b2:
08:a1:32:12:83:d4:6f:4e:4c:bb:38:03:ba:3a:bd:
40:e8:2c:ba:ef:75:0c:0f:f1:82:5c:fa:17:92:b9:
14:40:d3:a0:a1:c4:56:99:d1:a0:ca:03:f7:4e:c9:
0f:00:95:ae:7c:81:d6:77:51:40:ef:c1:98:2c:c7:
45:b3:2a:41:13:5c:97:3c:d3:eb:9c:f7:fd:cd:f1:
69:99:3c:e3:d2:aa:5c:70:a7:09:30:80:20:5e:32:
9d:d2:e0:3a:da:90:94:19:2f:e8:fb:d5:35:72:42:
6f:65:aa:e8:95:07:6a:a4:48:b5:2a:b3:5c:ef:3a:
83:1c:f7:f5:e3:be:eb:2e:56:fc:81:b9:f7:a7:d5:
6f:60:58:f5:cb:aa:bb:9b:a9:2f:db:3e:b5:cf:eb:
22:b2:66:3e:c7:d6:5b:92:41:c9:d2:04:03:f3:00:
68:51:5c:84:ed:70:d1:d0:6a:cc:da:c4:a6:f4:c3:
05:c9:6b:3f:5b:75:94:e3:98:9b:0a:9e:a7:b6:c9:
cd:f4:63:b4:b5:be:32:27:8e:f7:3a:b0:70:56:c1:
e0:69:b2:a5:0e:62:5d:86:30:86:20:9d:ea:5f:71:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:4F:C9:E6:AD:47:28:2F:C0:5B:DF:8A:17:1A:6F:14:1B:9E:5D
X509v3 Authority Key Identifier:
keyid:D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:29:56:fd:2c:3e:8c:5a:74:c5:de:0f:b8:5b:53:7a:fe:73:
de:92:80:88:af:5e:ee:ac:b1:19:f9:d6:1d:72:ec:56:9e:48:
ac:23:dd:20:07:c8:dc:36:c2:1c:ff:c0:55:a5:44:d0:8f:c7:
6c:6b:2a:31:ad:a8:e4:46:bf:da:5c:c0:17:15:c3:43:fc:ee:
c2:dc:b7:fa:58:83:55:9c:8a:35:37:00:61:d1:bb:c8:08:21:
15:d7:e9:bd:ea:09:4d:27:e3:a1:ca:07:1b:a2:97:70:8f:52:
e9:60:d9:fd:f3:06:ec:00:81:94:93:3b:67:74:42:0a:67:05:
85:7a:72:2c:09:96:15:57:47:d6:2a:83:c7:cb:31:84:89:e6:
fa:93:cb:fe:6c:2c:43:3b:98:8a:4f:dd:73:62:1f:38:6a:3c:
94:7d:90:24:6f:9a:03:36:3f:d1:89:63:b3:3c:57:0d:38:fd:
48:59:19:9e:2f:f4:52:63:4f:39:7e:d4:fa:75:88:12:e3:2b:
fd:db:30:f3:e9:c3:77:f7:10:87:92:02:72:4f:aa:cc:eb:19:
fa:b1:01:19:d8:ab:72:bf:7b:13:c2:45:98:49:2c:98:cb:8d:
d3:aa:d1:13:77:f5:7f:59:8e:4a:ee:5b:3e:9a:b9:79:c1:3a:
d1:c3:e6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:38 2026 by rpki-client