
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier: Fpfu/+aiF8nq/jJzEfZHmjRN7w2nDSmVw5DHkGQ4Csk=
Subject key identifier: 4F:5E:CF:77:2B:E0:05:3F:1B:D6:78:CB:ED:FD:C0:10:B0:0E:71:6D
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial: 11C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number: 11A7
Signing time: Mon 02 Mar 2026 00:03:06 +0000
Manifest this update: Mon 02 Mar 2026 00:03:05 +0000
Manifest next update: Mon 09 Mar 2026 00:03:05 +0000
Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: llw1GTu9Zk5XmgPrMnvXl+Eak/qX/zxWSEhpELpCzyc=)
2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: dJ40ZvkvEtXP02NZp3lyJfj9qvrbjW3gvJFMNBqnO1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4545 (0x11c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Validity
Not Before: Mar 2 00:03:05 2026 GMT
Not After : Mar 9 00:03:05 2026 GMT
Subject: CN=69a4d3ba-47e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:09:c7:2b:e9:42:17:44:27:e7:0c:7c:26:
d6:89:1d:47:10:d7:0a:96:fd:19:b3:59:a8:ce:a4:
e9:34:84:1a:b7:59:d9:3e:78:a0:6d:41:16:b4:1a:
6d:71:49:85:11:09:d2:f5:8e:fa:35:e5:80:5d:08:
f3:b4:f2:95:76:af:27:4a:d4:99:0a:aa:d3:e8:8d:
d6:08:d2:7e:63:28:c0:f2:8e:6e:28:da:b2:f5:3a:
a0:27:dd:0b:e3:8a:98:88:67:f8:77:ef:3f:09:6b:
90:7c:00:14:4b:7a:06:29:a1:fc:70:6a:b8:29:17:
20:df:b5:f8:9d:09:74:47:9b:b4:ad:61:e6:bd:ea:
01:f7:2f:3c:ad:5c:6c:d5:43:6b:47:52:53:02:c6:
af:42:fa:23:41:cf:ad:54:ac:c4:db:b9:46:41:27:
9f:d5:a3:00:a6:1d:c8:03:3e:f3:fc:30:35:c9:b6:
f5:79:25:69:2e:3a:e7:08:5a:a1:3b:17:48:76:46:
ac:d7:22:1d:ce:d2:47:81:2e:13:5e:ec:e8:0b:55:
3c:b3:ce:fc:a7:bb:5d:ec:29:01:ab:07:47:1a:61:
26:04:92:58:ba:02:1a:e9:1e:72:9c:74:c9:cc:3a:
10:40:ee:8e:d4:b1:74:ba:0d:d3:f7:10:23:46:47:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5E:CF:77:2B:E0:05:3F:1B:D6:78:CB:ED:FD:C0:10:B0:0E:71:6D
X509v3 Authority Key Identifier:
keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:61:00:97:0b:04:06:72:ff:fc:05:9c:a0:08:5b:8a:37:02:
a5:a6:55:44:07:7a:c5:8f:e2:cd:05:2a:d6:ec:82:60:4f:32:
6b:de:70:35:ec:f2:e4:d3:3c:e6:10:c9:ab:24:4f:00:8e:05:
cc:9e:8f:4a:6a:3c:ec:b1:dc:3e:14:11:36:74:c3:fa:5e:5c:
52:cf:c5:d6:33:72:9d:8d:c2:60:fd:3e:78:ab:be:ab:bc:2e:
9f:f7:45:8c:51:cd:63:85:d2:d2:2a:d0:2f:98:60:6a:d5:9c:
8a:89:94:3c:31:5c:75:93:41:58:c8:cb:9a:8e:20:b1:1c:ab:
ae:26:d7:d3:2a:5e:a0:ba:e4:db:c1:4f:de:6f:ee:e3:b3:87:
23:1c:e1:23:41:9e:10:36:ff:e7:d0:c3:99:2d:c8:73:ac:6e:
83:be:22:17:a1:3f:7d:f4:f6:63:a3:ad:10:8b:bb:48:9d:cb:
85:54:f7:2d:b2:6c:48:18:65:65:ce:c6:fd:19:bf:c6:44:7e:
69:6f:e4:7c:75:3e:cf:87:57:a0:f3:68:29:3b:16:d2:81:ad:
d2:73:90:d7:fa:9e:db:de:8b:98:44:15:c8:17:f6:ac:09:0b:
cb:c8:1d:b7:82:cb:c6:07:04:0e:28:60:3d:70:1c:b4:a8:b6:
19:26:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:22 2026 by rpki-client