
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
File: NtWtbhJs1bGOwUW8dy9JAPlMprw.mft (raw, json)
Hash identifier: H/8ubuHBRTYKNLrJNijJ//GdEHxiW1NoBBGCd6jNHHc=
Subject key identifier: 2A:10:E6:95:EB:25:76:A5:5D:17:20:32:BF:FF:22:C5:43:8E:66:77
Authority key identifier: 36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC
Certificate issuer: /CN=A91FD4E2/serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
Manifest number: 45
Signing time: Sun 01 Mar 2026 09:46:30 +0000
Manifest this update: Sun 01 Mar 2026 09:46:29 +0000
Manifest next update: Sun 08 Mar 2026 09:46:29 +0000
Files and hashes: 1: NtWtbhJs1bGOwUW8dy9JAPlMprw.crl (hash: 4ZIXRBqNem1A3+CS5HKXHgB761zOaR0YkO7ivR4A9Zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl
rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4E2, serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC
Validity
Not Before: Mar 1 09:46:29 2026 GMT
Not After : Mar 8 09:46:29 2026 GMT
Subject: CN=69a40af6-a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:62:7e:2f:79:ea:13:fc:b4:d4:41:11:c9:
01:ed:70:65:53:7a:d8:11:bb:f1:20:b1:67:c9:a6:
53:fa:09:3b:86:55:31:a7:9f:e7:73:87:cf:df:3c:
8c:e6:01:80:1e:c1:b2:eb:ae:3f:e1:f2:29:6e:99:
72:e8:6a:3f:43:f8:b5:69:d4:9e:0c:73:33:ac:7e:
ac:58:1e:7a:ad:07:b9:5c:9a:af:24:b3:0f:d8:4e:
49:ef:01:5b:53:bb:c4:3d:84:37:9f:69:fe:cb:6d:
90:b9:43:15:c5:57:09:72:74:71:0c:b3:f9:8a:a5:
63:67:2b:a1:9d:80:64:76:25:d7:eb:a1:01:92:c6:
0c:84:30:14:22:9c:fd:61:eb:44:54:30:4f:e5:1d:
c2:85:b8:a1:3e:30:8f:f2:36:1a:ae:1c:a7:b5:88:
bf:5e:21:8d:3e:de:25:ca:4a:df:08:eb:10:e5:39:
d4:dc:44:aa:72:ee:15:45:2f:8d:9b:f7:a1:86:a6:
b8:a3:a3:04:78:44:c1:d0:e4:d3:7f:96:9e:d1:46:
52:9c:1e:fb:4c:19:71:5c:38:23:f8:57:1b:b9:dc:
4e:b0:40:1f:b5:b6:4c:3b:b9:53:da:7d:88:76:1f:
42:3a:c4:62:32:1d:19:16:32:e5:8b:76:ea:90:67:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:10:E6:95:EB:25:76:A5:5D:17:20:32:BF:FF:22:C5:43:8E:66:77
X509v3 Authority Key Identifier:
keyid:36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:55:9d:ee:70:2c:74:93:42:16:3d:c5:12:12:ae:4f:c9:ab:
07:b6:af:6a:2f:39:87:ff:17:ca:2e:30:79:a4:4b:fc:d4:94:
b8:73:16:03:89:c8:df:28:54:79:16:9f:89:83:6a:f5:f3:97:
81:b3:12:68:ef:23:66:6e:9e:ab:80:b3:cc:cd:b7:5a:93:85:
01:8d:1c:a2:13:b1:60:58:e2:54:9e:cc:4f:4a:71:e8:b8:5a:
12:11:4d:eb:a6:00:cb:db:27:ca:f5:e2:19:f4:a7:1c:ee:1a:
3c:2d:a1:17:38:4a:01:d0:96:f2:5b:69:b8:8b:c1:51:29:d7:
8b:e4:e0:c4:d9:2b:1b:01:13:98:c2:fe:01:cd:22:37:9f:74:
e9:5f:cb:c8:29:94:56:e7:9b:0d:6e:0a:f3:5b:6e:b8:3c:ed:
a6:ee:9c:2f:72:8e:a7:9e:64:45:e0:1a:a8:b2:4f:e4:f6:cb:
cf:bc:75:64:17:ed:75:57:68:7d:a0:17:b1:85:0e:ee:3f:e6:
f8:da:39:1c:00:17:de:ef:bc:f2:ea:84:6d:8b:ac:a6:ac:44:
0b:72:99:93:fc:7e:cd:50:22:a2:f9:a5:dd:12:2e:8b:e1:14:
1a:3b:61:f7:9b:d9:91:60:6e:ab:5a:37:df:d9:59:8e:88:11:
1a:92:9c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:29 2026 by rpki-client