
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
File: rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft (raw, json)
Hash identifier: ES9oaLlyuhRS33oWiuvz9BJHyShehIcx33Mya/Ls3JY=
Subject key identifier: 6C:11:FA:B0:5F:73:BD:B9:9C:9C:58:75:10:DC:5F:0F:82:D5:3C:58
Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
Certificate issuer: /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
Manifest number: 1A
Signing time: Sun 01 Mar 2026 10:27:16 +0000
Manifest this update: Sun 01 Mar 2026 10:27:16 +0000
Manifest next update: Sun 08 Mar 2026 10:27:16 +0000
Files and hashes: 1: rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl (hash: qTXn45E4vOAY38sakoQ+UJecfpRM9+vHMi/Xr9AYn68=)
2: A6977620FC6911F0B9F21353506F56BC.roa (hash: 2+c+kkZNH5WFLaEH+Mtz0KAlZ3T9lg2Gax329RYsTqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Validity
Not Before: Mar 1 10:27:16 2026 GMT
Not After : Mar 8 10:27:16 2026 GMT
Subject: CN=69a41484-04fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:1f:c3:9c:24:95:be:70:71:ca:49:81:c0:
66:cb:3d:80:5e:15:64:7c:c0:a2:bf:a2:9f:99:06:
3a:45:93:95:c4:5a:2d:79:ac:be:87:1f:e4:ba:f7:
b2:cc:ca:19:21:86:4d:da:93:f7:33:b5:ec:05:50:
c6:62:7a:22:1c:ba:5d:ca:04:bb:5e:fd:78:63:6a:
67:c0:46:40:86:4b:bf:cc:b8:12:19:66:0e:1f:42:
aa:a5:66:22:80:4e:53:db:38:e8:45:93:5f:fe:d2:
73:92:b0:12:40:31:a5:3d:85:fd:e1:d3:93:fd:73:
0a:da:5d:a6:5c:f8:71:98:7f:11:a2:85:f1:28:f3:
3d:2c:d8:41:b7:29:d9:a8:35:76:94:35:46:72:60:
71:09:4b:a8:e5:5b:57:dc:c1:72:56:f4:70:2a:81:
35:fe:bc:e6:23:da:54:34:b4:0d:f4:c8:3a:6d:15:
54:ef:98:27:fb:0e:3a:b2:f7:f4:cb:bc:64:49:df:
73:3f:61:a0:31:30:33:19:1d:c9:42:3e:fd:85:f3:
85:d7:4d:5d:23:17:cd:3c:7d:c7:0e:ce:46:67:ea:
52:78:a7:e1:ba:95:cd:7f:af:70:ee:4a:ce:20:51:
d1:79:58:0d:8d:81:7a:a2:ba:0e:bf:66:a9:a3:53:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:11:FA:B0:5F:73:BD:B9:9C:9C:58:75:10:DC:5F:0F:82:D5:3C:58
X509v3 Authority Key Identifier:
keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f4:ce:16:e9:8e:08:1b:f8:28:2e:67:19:b2:49:ad:54:c3:
b9:32:70:97:ab:0d:2c:8a:3a:ef:dc:ca:19:fd:67:fb:30:3a:
d8:e8:e5:e8:db:a6:89:82:bd:79:04:db:28:38:5e:db:f2:c8:
4a:81:f4:a4:4e:47:9d:a9:8d:80:43:8a:a2:16:52:1d:52:f9:
d3:37:e7:bc:16:31:9f:0a:01:ad:61:0a:1d:12:10:50:a3:16:
88:97:f0:1f:e7:8b:e9:57:78:b8:67:b2:b9:c8:cc:cd:45:4a:
33:1a:19:3d:21:69:77:9a:3f:3c:db:84:6d:95:20:cd:c2:35:
d2:b4:0d:ff:9f:e1:dd:16:f8:be:1e:1a:e3:53:77:b9:33:a4:
8f:fa:3a:1c:8b:43:82:48:a5:78:24:8c:74:6d:22:66:b6:01:
ab:6a:df:fa:de:2f:a5:18:0e:f7:f2:12:da:3f:6f:95:76:51:
67:54:fa:3c:ad:f5:c8:66:58:91:3a:ca:3d:d7:9b:6c:bc:2b:
24:88:4d:29:ef:a7:75:e6:48:51:05:80:21:cb:39:ba:82:2b:
89:c3:a6:99:0e:f3:da:ee:6d:a2:3a:10:20:f1:b1:43:04:d8:
d3:e3:da:3b:69:b6:ed:38:e9:94:a0:bc:ce:5b:8b:f0:db:e8:
7b:b2:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:03 2026 by rpki-client