
$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json)
Hash identifier: tCVE4fCwy5M0hpq4vl0i0zlng/HwEd/qY0UM0jaAXa8=
Subject key identifier: B6:9E:92:4B:BF:DC:CD:EF:3F:9E:2A:F1:00:D3:3F:24:A9:C2:26:A6
Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Certificate serial: 0A44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
Manifest number: 0A34
Signing time: Sat 28 Feb 2026 20:00:17 +0000
Manifest this update: Sat 28 Feb 2026 20:00:16 +0000
Manifest next update: Sat 07 Mar 2026 20:00:16 +0000
Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: fpMqIiAYogm3B2Mp+tAdA+guB7nGRqtBedhmKTy6XNU=)
2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: oKxH1slQnBcxxB/Xh/Duy/VUqwWP+wlSdyJOsRinTcw=)
3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: oEOFUnEt8M3b87Re+i1Xzb3Xnn+XVIaIOLo4ivZ01FI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2628 (0xa44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Validity
Not Before: Feb 28 20:00:16 2026 GMT
Not After : Mar 7 20:00:16 2026 GMT
Subject: CN=69a34951-b66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:73:0a:4c:b4:bb:4e:1f:5f:d4:d9:3c:ae:
6a:da:87:7e:e6:86:34:46:de:39:66:b3:77:b1:da:
1f:f8:a8:14:de:e8:17:f5:f8:08:ce:c3:f1:0e:e0:
bc:f8:c2:e0:db:79:62:9c:50:45:97:b6:7b:24:01:
c1:b0:ec:6e:3f:1e:6b:9c:7b:66:9c:d3:3d:9b:95:
4e:cd:bd:8d:32:9c:97:18:49:8a:78:79:85:68:f0:
62:e0:1f:49:d4:51:f3:2b:1f:3e:63:02:e5:b3:e7:
d8:d1:0e:45:1b:db:9b:b4:b7:f3:3d:7c:f7:f5:cf:
35:3c:ea:3e:c3:29:c9:d8:2d:06:ae:07:c1:7e:b1:
da:07:10:3f:8c:d2:68:df:50:a2:39:0c:00:2c:ea:
2a:dc:0b:bb:6a:fc:0a:d1:54:97:50:08:45:39:d9:
53:6a:01:ab:6d:bd:03:71:1b:d4:c9:14:38:c9:02:
52:e6:14:57:57:48:a2:7e:03:fe:de:9c:c2:55:d0:
79:6b:44:9b:89:0e:58:5c:6f:fc:6c:32:a9:ac:92:
36:9d:9c:6b:a8:98:fe:53:2e:ca:cf:46:91:2c:c9:
7b:d4:5c:45:75:04:64:df:47:a3:b6:50:a1:6a:68:
2e:ae:07:ca:2f:35:dc:7c:83:36:6c:de:be:38:60:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9E:92:4B:BF:DC:CD:EF:3F:9E:2A:F1:00:D3:3F:24:A9:C2:26:A6
X509v3 Authority Key Identifier:
keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fe:34:a1:ba:ff:51:fd:4d:e7:88:c5:24:e9:44:4c:42:43:
f0:8c:43:2b:ad:db:6c:c7:53:c6:1e:83:f5:ee:41:2b:78:be:
c1:df:38:0c:11:5e:fe:5e:43:95:a4:e7:4d:ab:5b:f6:5d:38:
a6:2b:e9:74:88:77:10:09:93:57:c9:92:70:0f:55:f4:fa:9d:
32:cb:0e:be:04:80:fc:31:d9:87:e0:26:88:78:6f:ff:34:c9:
cc:ef:05:0a:ef:9c:3b:e4:29:a0:0d:fa:5c:4a:d1:f5:37:d0:
96:18:15:2f:1e:07:8d:2a:7b:62:d3:c5:23:e1:ae:81:0b:60:
58:d9:bf:2f:a9:62:b1:97:48:0a:82:56:b9:be:c8:8f:25:85:
e9:3d:26:21:80:87:b1:38:94:f5:f9:10:bc:32:b1:60:b0:2f:
22:c9:b2:cb:47:1e:9a:1d:f0:65:3b:04:f2:17:68:85:c0:ab:
26:d0:43:45:78:d5:7f:7f:b4:a9:65:98:0b:b2:5c:d3:e2:fd:
dc:67:60:23:83:57:c5:84:3a:44:69:3e:37:59:fb:25:3b:db:
fb:02:b0:89:9e:93:35:7e:34:8b:3a:96:6d:40:fa:8b:39:a5:
74:20:5d:2b:22:d4:7e:f1:69:d7:aa:ba:43:4f:67:bb:d3:09:
ee:d4:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:00 2026 by rpki-client