
$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
File: RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json)
Hash identifier: bjroZc+jomSmYmAQPwpTSAYErKtMtqeIwDDEDfXRPU8=
Subject key identifier: 5C:9B:81:2D:77:9C:66:E7:76:95:62:15:0A:8F:7B:FD:3B:DF:CD:52
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Certificate issuer: /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial: 076D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
Manifest number: 0765
Signing time: Mon 02 Mar 2026 01:38:12 +0000
Manifest this update: Mon 02 Mar 2026 01:38:09 +0000
Manifest next update: Mon 09 Mar 2026 01:38:09 +0000
Files and hashes: 1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: /9qJdRdkYqqGV0MrW1vnDv0yQNyyERDaEGiBDs+TF0s=)
2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: sbyF3KrKZsJPlhcWGIocE8R+wXMDx5Dh9kMEDZMegNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Validity
Not Before: Mar 2 01:38:09 2026 GMT
Not After : Mar 9 01:38:09 2026 GMT
Subject: CN=69a4ea03-bd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:b4:0f:6e:e7:9c:e6:2f:3e:97:d9:a7:a4:
29:1c:e6:67:ed:14:83:fc:c4:fa:2c:8c:ee:03:c2:
0b:3b:12:db:c8:77:57:80:82:0b:db:86:39:63:fb:
31:21:e8:31:8c:1b:92:26:46:59:d1:67:db:22:df:
8b:4d:12:c3:8d:ab:16:16:3c:62:a6:b3:14:12:70:
42:eb:c9:68:33:51:4c:7a:d7:38:17:e5:65:17:9d:
14:4c:23:a5:a6:12:5c:91:64:21:f8:3d:b8:75:d7:
1b:dc:fa:1e:23:2b:6a:e7:68:d4:7f:ae:86:b9:c6:
45:3e:5f:98:35:c3:be:92:70:da:8f:b7:d9:18:7b:
b8:99:ea:b9:b9:6d:49:a7:8c:33:57:32:bb:40:b3:
0c:df:74:46:a9:f6:3c:92:90:78:9c:41:de:db:9e:
06:d2:38:6e:f8:c3:83:85:4b:fa:91:ae:6c:fb:3c:
f5:9e:fc:89:13:ab:9b:95:9b:e5:0b:90:03:c5:0c:
80:4f:49:c4:6a:5e:c0:8c:0c:7a:22:5b:90:cf:8e:
89:c8:e8:aa:c7:37:f2:e1:bd:02:3a:33:bd:83:ec:
e3:46:6d:7b:f5:5d:55:cf:70:91:bd:e5:e6:44:65:
7e:05:3e:27:ed:92:9b:10:df:e8:74:19:43:a4:20:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:81:2D:77:9C:66:E7:76:95:62:15:0A:8F:7B:FD:3B:DF:CD:52
X509v3 Authority Key Identifier:
keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:f7:c0:28:2f:7e:5f:87:d0:af:a4:70:00:c6:1e:c9:45:00:
2c:cd:45:fe:47:91:8d:8b:b9:8f:e6:97:a5:64:58:e5:4b:a8:
d3:f1:4e:27:c5:0b:36:1b:52:fa:bd:66:cc:be:1f:47:0f:92:
33:94:24:3e:c3:5e:94:10:29:48:da:42:d6:fd:ca:01:99:48:
d9:42:5a:42:a7:e9:f6:26:71:70:fd:5b:42:a2:df:08:6c:51:
4b:e9:e4:20:3c:d0:25:14:54:a1:89:de:2e:a3:39:cc:51:d9:
e5:55:b4:98:d6:59:81:a7:1b:47:9d:c4:2e:e9:b2:1a:63:b8:
e0:97:ef:1d:47:f3:3f:53:3d:5f:f5:ff:6a:ed:68:6d:40:b9:
0e:79:d7:f1:6e:2c:34:63:3c:c0:dd:2d:fb:9a:e9:67:33:e0:
57:85:85:99:2f:15:5f:f7:db:b4:74:2b:8f:5a:82:73:5e:de:
74:12:5a:c0:15:89:6a:ac:c8:f2:ec:67:ad:98:e0:63:48:20:
89:66:81:67:14:ff:95:15:42:ca:ec:c5:1e:32:9e:ff:c6:c1:
d7:d9:7f:db:48:bc:0b:33:c5:36:cb:ae:23:43:78:ae:c6:7e:
8f:ec:ef:03:e8:ae:2c:e0:da:90:d2:c1:59:45:95:1c:22:56:
6d:d3:e4:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY3RjcxMTAvBgNVBAUTKDQ0QzBCM0U1NUU4RjRENTgzMTg2MDVFNzIxMzQ5QzAy
QjI4OUMyRkQwHhcNMjYwMzAyMDEzODA5WhcNMjYwMzA5MDEzODA5WjAYMRYwFAYD
VQQDEw02OWE0ZWEwMy1iZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArvy0D27nnOYvPpfZp6QpHOZn7RSD/MT6LIzuA8ILOxLbyHdXgIIL24Y5Y/sx
IegxjBuSJkZZ0WfbIt+LTRLDjasWFjxiprMUEnBC68loM1FMetc4F+VlF50UTCOl
phJckWQh+D24ddcb3PoeIytq52jUf66GucZFPl+YNcO+knDaj7fZGHu4meq5uW1J
p4wzVzK7QLMM33RGqfY8kpB4nEHe254G0jhu+MODhUv6ka5s+zz1nvyJE6ublZvl
C5ADxQyAT0nEal7AjAx6IluQz46JyOiqxzfy4b0COjO9g+zjRm179V1Vz3CRveXm
RGV+BT4n7ZKbEN/odBlDpCA51wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFybgS13
nGbndpViFQqPe/07381SMB8GA1UdIwQYMBaAFETAs+Vej01YMYYF5yE0nAKyicL9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjdGNy9CRkQzRUIxQTU0
MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRWZ3hoZ1huSVRTY0FyS0p3
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JNQ3o1VjZQVFZneGhnWG5JVFNjQXJLSnd2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjdGNy9CRkQzRUIxQTU0MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRW
Z3hoZ1huSVRTY0FyS0p3djAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJvfAKC9+X4fQr6RwAMYeyUUALM1F/keRjYu5j+aXpWRY5Uuo0/FOJ8ULNhtS
+r1mzL4fRw+SM5QkPsNelBApSNpC1v3KAZlI2UJaQqfp9iZxcP1bQqLfCGxRS+nk
IDzQJRRUoYneLqM5zFHZ5VW0mNZZgacbR53ELumyGmO44JfvHUfzP1M9X/X/au1o
bUC5DnnX8W4sNGM8wN0t+5rpZzPgV4WFmS8VX/fbtHQrj1qCc17edBJawBWJaqzI
8uxnrZjgY0ggiWaBZxT/lRVCyuzFHjKe/8bB19l/20i8CzPFNsuuI0N4rsZ+j+zv
A+iuLODakNLBWUWVHCJWbdPkjg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:58 2026 by rpki-client