
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
File: e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json)
Hash identifier: zI9u/+hoTpMpBI3fGz5ilTY9ERfjoaQxu0RTi5y33I8=
Subject key identifier: 6B:6A:9A:C7:5E:DC:CD:EF:3F:60:22:98:B0:5F:F4:0D:85:69:CB:61
Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Certificate issuer: /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
Manifest number: 34
Signing time: Sun 01 Mar 2026 10:06:32 +0000
Manifest this update: Sun 01 Mar 2026 10:06:31 +0000
Manifest next update: Sun 08 Mar 2026 10:06:31 +0000
Files and hashes: 1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: 8B254Y53fdJFgjPluPSZ6sXGKnstsYVEWQ2UM+Jrbtg=)
2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: CPLpp/+FM2b54xSn6vuECW27aWUXXJQyS5P46Daeh1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Validity
Not Before: Mar 1 10:06:31 2026 GMT
Not After : Mar 8 10:06:31 2026 GMT
Subject: CN=69a40fa8-c689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:4a:87:0a:e0:cb:e6:02:fc:1f:59:6d:d0:
c9:ed:02:7b:7d:a0:27:6f:c9:0d:0c:8a:ab:2c:3d:
95:ea:ba:65:ab:41:bd:66:c4:e6:3c:f0:f7:19:2f:
1c:c9:0d:34:3a:33:4c:bd:56:81:a4:6d:a6:dc:b5:
7b:d0:fc:99:ee:29:24:45:45:de:ae:6e:ff:81:ae:
7a:13:5a:e3:14:6a:05:48:5f:ff:d7:87:05:d7:68:
09:0d:f9:62:97:d6:df:69:0a:01:e3:63:27:cd:e4:
44:6d:f9:09:c9:8f:3f:62:36:5b:dc:96:17:d6:52:
d4:2a:80:37:ef:05:ae:f6:c7:f3:92:00:7c:47:f2:
72:50:5a:08:c3:bd:1c:2a:11:e4:68:2a:7c:22:33:
71:8c:a6:59:d1:9d:2f:a9:aa:d2:8c:c6:5b:5f:6e:
f3:4e:be:20:62:00:ad:bc:65:f3:23:e2:64:1b:75:
89:f1:64:a5:41:de:f3:89:3e:13:2b:9b:2a:b3:c9:
dc:2d:3b:06:36:de:cd:a1:de:9e:5c:dc:62:3d:c1:
6a:a8:a5:5a:87:35:3f:fb:4a:a3:ff:32:35:ce:8e:
81:49:cc:e5:08:44:20:46:86:7c:88:b2:9e:ba:25:
3d:fa:7e:30:b8:62:4c:af:d2:15:c6:bc:0e:91:7f:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6A:9A:C7:5E:DC:CD:EF:3F:60:22:98:B0:5F:F4:0D:85:69:CB:61
X509v3 Authority Key Identifier:
keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:63:61:b5:b9:71:27:d6:97:70:80:d0:aa:67:4e:12:a0:0b:
dc:dd:df:5b:2c:50:b7:43:8b:77:7b:7a:2e:11:8a:d3:e4:52:
9d:06:c1:da:9e:74:17:ff:0d:98:b7:62:07:fd:6b:c7:c9:19:
9f:c3:4f:6d:99:d6:ac:21:98:51:cb:ce:bc:b1:40:d1:27:08:
0f:68:c2:20:3a:fc:bf:55:c8:6e:f4:ec:95:38:4b:08:99:3d:
94:4f:6e:0d:4b:ad:4e:85:ea:bb:12:b7:96:e1:2b:c7:36:ed:
68:99:68:6b:a5:28:30:9e:02:5b:f6:67:b0:1a:51:a6:50:0b:
47:59:13:df:90:72:32:b0:e8:dc:c0:01:c1:f8:d4:6f:19:d3:
d7:9b:02:ed:f5:1c:95:6e:8e:d5:4e:fe:3f:d1:d7:41:31:ed:
17:1a:9b:f2:1f:d0:7e:88:28:46:20:38:b7:23:ad:69:62:c4:
b8:16:fb:eb:eb:13:1b:e0:17:6e:c1:89:07:ad:d5:08:ec:df:
73:23:30:f2:0c:bf:f7:d5:e9:fe:ba:ec:78:f0:cf:18:df:8c:
27:29:13:3b:ee:9a:10:8a:28:60:2f:10:fb:41:c1:fb:5e:d3:
98:c2:de:50:7e:84:17:04:06:ea:05:d2:a9:16:36:0a:bc:47:
a5:4a:2c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:40 2026 by rpki-client