
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json)
Hash identifier: 8QFZ425Os3/7Et+FnXM0uxGLtUjvOnYAYMdIgWwn+0E=
Subject key identifier: 7F:61:15:37:10:91:6E:3F:E3:12:3B:4C:9D:45:17:F8:81:6F:44:C3
Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Certificate serial: 0E0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
Manifest number: 0E04
Signing time: Mon 02 Mar 2026 01:55:04 +0000
Manifest this update: Mon 02 Mar 2026 01:55:02 +0000
Manifest next update: Mon 09 Mar 2026 01:55:02 +0000
Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: ZB8J7WSx5VXzf9ss50l9P54FveIxCZW0q5H4tAqdqT0=)
2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: +xrfw+PMfK0lsfCpKdypZSJ7HrqpfwkVGn+eLq+hX/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl
rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3596 (0xe0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Validity
Not Before: Mar 2 01:55:02 2026 GMT
Not After : Mar 9 01:55:02 2026 GMT
Subject: CN=69a4edf8-769b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:10:9d:5f:90:d1:23:bb:1f:2d:73:3e:7a:
85:ae:b2:65:c3:41:6c:84:06:b1:aa:90:7e:7a:75:
4e:9d:c8:71:71:dc:da:56:87:40:4d:cc:22:ee:e5:
58:c3:af:bb:d1:a9:67:3a:8c:14:e2:ea:62:52:1d:
f9:fb:3e:33:6f:c4:03:87:6b:bf:3a:90:5d:43:d5:
d7:12:6f:1e:c7:4d:3a:69:de:ac:46:d7:04:71:48:
54:a3:9c:2b:14:72:7d:6e:36:1a:fc:ae:15:6e:1e:
93:57:90:f5:ac:c5:ec:73:50:29:6c:bb:2b:2d:4d:
2f:54:c0:e1:aa:3e:95:b4:cb:41:46:a0:19:21:94:
58:c0:bf:c3:2e:d0:e1:49:45:17:a4:a6:45:51:81:
6b:1e:1a:8f:b0:1a:8c:84:4e:ca:7d:b5:e8:57:3b:
16:1c:3a:34:9e:67:b8:ff:54:35:58:c5:9b:27:e6:
6d:3c:e3:2a:52:a5:b5:5d:d8:6b:ae:92:9e:4d:3f:
71:ee:65:93:81:3b:21:43:a8:e1:69:9c:46:12:4a:
94:f2:80:ba:5d:0e:20:4b:27:04:6c:55:0a:65:8b:
c4:b6:40:f0:d8:de:96:99:4b:58:49:27:15:19:4e:
f8:71:f5:f0:d2:7a:28:62:de:b2:1d:ba:91:c1:1f:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:61:15:37:10:91:6E:3F:E3:12:3B:4C:9D:45:17:F8:81:6F:44:C3
X509v3 Authority Key Identifier:
keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:d8:ea:87:ef:4d:de:9d:bd:d9:e7:0b:42:06:e5:89:58:72:
3b:3a:ab:46:a0:f3:4e:c4:9d:ab:51:ec:d8:cd:4b:52:57:51:
d7:24:51:81:f3:2e:e2:25:46:2f:02:3a:4d:61:a9:7b:03:28:
d0:47:58:3e:d1:07:0d:a4:3d:49:90:8a:75:f7:cc:cd:3b:b3:
c3:8c:61:62:98:c0:4f:b5:c0:df:83:01:d0:04:90:af:cd:b3:
66:a4:3d:74:b0:75:29:ed:2d:af:87:5e:95:56:fa:4b:2c:bd:
26:c8:fa:15:8f:9a:84:04:d6:be:c0:b3:d4:43:ce:fb:85:01:
3d:dd:97:30:da:fe:a9:63:d5:14:3d:9c:4f:47:81:75:b5:9c:
e1:f4:25:cc:39:cd:be:f7:5c:de:12:96:b0:cb:98:84:8a:c3:
00:45:29:43:b1:bf:77:b9:3b:77:59:24:2e:4e:ab:26:d6:67:
56:c3:61:a5:af:41:64:d4:24:82:06:2a:88:7d:f7:a0:3d:5e:
41:73:d4:08:1d:b6:53:4f:67:82:2e:38:80:20:9c:08:da:7f:
8f:f2:5a:e9:9b:bf:3a:73:11:24:e7:f9:4f:6b:fd:cf:ba:36:
3a:dc:6b:aa:ee:04:f4:67:9b:4b:de:55:76:08:4a:5e:e2:c0:
4e:78:09:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:53 2026 by rpki-client