
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
File: SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json)
Hash identifier: xPJw4J6LB8YJ1PoSrQtbBNGxX8tc++MYz/DZwrU/BIE=
Subject key identifier: 44:E1:11:07:AA:8E:7F:23:2D:A0:EB:37:D1:09:56:19:06:89:1E:6E
Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Certificate serial: 0388
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
Manifest number: 0383
Signing time: Sun 01 Mar 2026 23:38:34 +0000
Manifest this update: Sun 01 Mar 2026 23:38:32 +0000
Manifest next update: Sun 08 Mar 2026 23:38:32 +0000
Files and hashes: 1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: brJFm9ehhvkq1e79aCC53ZA7n9RmM+/2tlZQElljHiU=)
2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: UoeTGdDWFi8XFqsO7bK2F7lfw58R0SVfg1rPBc2qAFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904 (0x388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Validity
Not Before: Mar 1 23:38:32 2026 GMT
Not After : Mar 8 23:38:32 2026 GMT
Subject: CN=69a4cdf9-e45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:fa:98:e2:3b:18:0a:22:06:91:60:99:01:
68:a0:31:c8:50:88:18:de:18:3d:7d:d6:e2:4c:d2:
e2:f1:30:3a:64:25:c4:a5:56:d2:a7:16:b4:62:dd:
f0:49:8e:44:96:5b:55:9a:f7:16:6f:b0:8e:84:4d:
73:2d:82:b9:93:55:49:76:05:63:6e:52:c6:a8:b4:
fd:d7:1a:fb:67:46:19:76:00:61:6e:15:a3:f3:6b:
2c:92:63:2d:5e:e2:71:51:0f:e0:6b:30:b5:62:e8:
a3:14:f5:77:ae:28:e0:0f:01:12:52:30:dc:9d:25:
7d:4e:c3:72:9d:d9:74:7a:90:08:eb:03:ac:ef:82:
0f:32:1f:de:35:63:33:6b:87:6d:96:70:5f:9f:fe:
99:5a:3a:b6:5e:ac:e4:66:fc:1c:a2:b2:8e:36:3b:
85:e4:21:22:d0:c7:f3:35:c6:a0:03:c4:d8:47:8c:
88:c2:4b:8e:bc:4a:4b:f2:f7:a8:72:80:b9:c2:22:
20:db:bc:88:f7:91:b3:af:0b:15:84:d3:4d:9c:d0:
33:54:e9:58:68:29:60:9b:45:17:37:c1:86:fe:58:
92:77:1d:16:19:ca:24:b2:57:45:50:a5:36:57:d3:
12:8e:f9:25:fb:35:df:92:96:2b:54:70:28:b1:7d:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E1:11:07:AA:8E:7F:23:2D:A0:EB:37:D1:09:56:19:06:89:1E:6E
X509v3 Authority Key Identifier:
keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:bc:3d:26:34:f5:da:d6:42:83:b3:50:9e:72:15:06:28:53:
1d:e3:cf:34:8e:1e:85:e4:80:18:8f:cb:2a:95:57:a8:70:73:
dc:f5:c6:e1:ad:4b:61:97:6a:9b:43:c2:f5:12:8a:09:ad:62:
59:fb:e2:f4:bf:53:ae:72:70:32:98:dc:54:98:ae:b8:53:e9:
23:99:ae:58:18:93:e6:17:64:2f:b2:92:f7:60:1a:9e:30:f2:
8a:04:63:8d:9b:53:d0:58:55:c8:4a:10:52:94:89:5c:c3:df:
af:27:81:7c:5f:13:e4:ee:c4:c9:21:26:7d:fc:83:72:a3:01:
17:73:52:3a:52:ae:62:cc:42:56:b2:2c:b2:81:e3:58:0a:39:
8e:64:9e:e6:f3:0b:d6:5e:a6:7b:49:df:e8:b7:2f:dd:74:72:
68:14:45:2d:92:d5:9f:a4:d3:98:7b:1c:44:35:06:32:d3:9a:
93:04:4e:54:b7:94:c8:8f:51:7f:b1:4f:2a:db:c0:5c:cc:97:
8d:4b:89:b5:cb:87:4c:5e:5f:c2:42:9d:29:43:e8:3e:77:8d:
7c:82:f9:49:96:0e:20:ad:ec:40:94:79:3f:9a:d5:ac:7e:23:
24:ea:95:ab:29:c1:fb:91:e2:86:b9:1e:cd:ee:aa:57:2a:16:
b3:c7:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:07 2026 by rpki-client