
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json)
Hash identifier: IJA6H0H8mN0ax5+egOSk7OkLzYxlmCSLW/jwGITW/QQ=
Subject key identifier: BD:88:67:7A:CE:76:1E:1D:3C:57:3F:2C:F7:88:75:2B:36:3C:B2:07
Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5
Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
Certificate serial: 0390
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
Manifest number: 0390
Signing time: Sun 01 Mar 2026 01:37:09 +0000
Manifest this update: Sun 01 Mar 2026 01:37:09 +0000
Manifest next update: Sun 08 Mar 2026 01:37:09 +0000
Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: d3lYN4xUXXFZT8GYfIQ+dAaPyUnWh0H2GLwoT/ALgWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl
rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
Validity
Not Before: Mar 1 01:37:09 2026 GMT
Not After : Mar 8 01:37:09 2026 GMT
Subject: CN=69a39845-537f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:2d:3a:83:45:65:30:49:72:ec:86:7e:24:
fb:62:e4:e6:34:10:29:29:39:cd:67:16:2a:bd:40:
1a:10:b7:9c:35:c5:c3:4a:c2:90:36:66:b7:bf:9b:
ca:b9:c0:31:2d:6b:24:bf:2b:c7:b7:d7:1f:a9:22:
9c:a5:ec:0d:8f:aa:e8:b0:74:d6:1b:81:46:e3:90:
a8:26:cb:e5:2d:a5:e6:0b:c0:c4:b4:df:34:fc:19:
61:17:d4:d4:37:ef:11:fe:9e:1a:b2:e4:6a:4a:d1:
cf:2b:8c:9e:ed:d4:e4:5c:3c:91:f8:c1:03:d4:bd:
4f:5a:2d:5b:fb:a6:24:ae:33:76:0e:43:63:35:fc:
3b:34:d6:27:e3:84:97:2d:6b:e3:48:dd:e6:01:58:
77:d5:54:69:a6:9c:a4:f9:c2:a2:40:19:d7:0d:b0:
98:d4:0b:f2:76:e2:59:00:31:0b:ae:22:15:f0:e6:
ba:94:de:df:1c:61:38:8d:bb:d9:ad:d8:9d:87:df:
f6:49:0c:fc:18:68:1b:61:50:aa:01:4d:07:02:72:
a8:c0:65:25:da:35:aa:7c:a7:e2:63:81:7d:6f:17:
e9:ee:90:61:c0:df:78:11:78:e9:ba:7f:a8:81:32:
80:29:d3:9d:cf:0e:68:91:c6:8a:87:50:f6:89:c8:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:88:67:7A:CE:76:1E:1D:3C:57:3F:2C:F7:88:75:2B:36:3C:B2:07
X509v3 Authority Key Identifier:
keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:5b:50:d4:d2:f6:03:97:05:31:27:ec:49:68:4a:b5:92:f8:
29:e4:23:a7:ff:8d:16:40:cd:49:ff:80:d9:6b:cb:77:57:85:
75:ee:0b:5b:46:e2:6c:01:bf:4d:e5:10:50:63:b9:d6:ab:a7:
c9:0c:e1:4e:56:90:ca:64:89:a6:0e:16:f8:f2:7a:5d:b8:c6:
4c:7e:da:8c:c7:77:c3:84:c9:9b:8e:8f:9b:aa:ee:62:37:d5:
bf:34:38:84:29:2c:59:4b:7d:44:94:1a:74:11:6c:2b:55:41:
93:0f:e8:ab:a5:6d:9d:92:61:9b:10:9a:97:99:d7:a3:c5:fb:
a4:52:0c:a2:e5:d0:ec:9f:3a:b8:52:38:f3:46:a5:85:4b:1e:
95:e0:23:c4:7f:95:a7:eb:ec:9e:19:cd:2b:41:51:85:b9:86:
8a:11:5a:00:73:4d:35:73:2e:8a:54:b1:2b:61:38:1b:f3:8e:
75:8b:a5:e5:f3:d0:60:78:d1:ba:df:af:38:ff:17:4c:71:41:
10:83:ba:71:78:24:c1:b8:cd:c3:ac:84:d5:74:69:92:72:1c:
02:8c:80:51:67:11:32:9e:ff:26:46:23:c1:15:56:50:ad:1a:
2b:c1:48:a4:6e:96:26:5b:84:3b:6e:da:66:f3:b6:43:fb:3c:
08:bb:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:15 2026 by rpki-client