
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
File: L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json)
Hash identifier: NwY2rr37StXkLvyOMZu0Lbcgzn39Lt6hldaIUYog3rM=
Subject key identifier: B4:A8:D2:83:9E:03:79:85:49:C1:B6:64:E9:8D:6B:2C:77:1E:E1:65
Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Certificate serial: 0838
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
Manifest number: 0831
Signing time: Sat 28 Feb 2026 21:17:42 +0000
Manifest this update: Sat 28 Feb 2026 21:17:42 +0000
Manifest next update: Sat 07 Mar 2026 21:17:42 +0000
Files and hashes: 1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: e4E7GcbsPAc+ksmzlmvs45bfRzw2gdq1m19csf9yu2E=)
2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: Rn+i/x8H2eWzt9fmwTwYfrRk8EJ3dubKBMEnFNfmhUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Validity
Not Before: Feb 28 21:17:42 2026 GMT
Not After : Mar 7 21:17:42 2026 GMT
Subject: CN=69a35b76-27be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:56:eb:d6:86:e0:9f:01:93:97:9a:ca:87:
25:00:00:5f:d4:e3:08:9c:b6:50:6c:57:a1:39:80:
15:37:66:0a:9f:f4:76:19:b5:d4:2a:2b:dd:27:03:
da:be:cc:e9:d3:7f:2b:4d:81:05:e8:ff:2e:ed:5d:
6a:3a:5d:70:05:76:74:66:9a:64:a3:41:03:d3:22:
4f:c8:80:f2:53:58:50:82:05:79:00:24:b0:5c:27:
51:ba:79:9b:5b:20:38:a9:70:ea:ef:31:e2:56:20:
e9:72:26:de:db:8b:03:8c:47:53:6a:e5:71:cf:2f:
f6:80:8a:bc:99:c5:5d:63:50:1c:f6:28:e7:79:a4:
3a:11:31:ea:3b:c5:60:c2:3f:e5:1a:69:46:1f:82:
2c:9c:2f:fa:39:7a:24:2d:94:e4:a1:f3:15:70:11:
c9:d0:2b:e4:e5:4d:41:f4:46:76:bf:92:32:32:b7:
ee:ce:41:6f:de:9e:c8:10:9e:85:ff:f0:1c:e9:4d:
15:43:f0:bd:80:2c:01:38:7d:81:58:c1:93:98:f6:
51:df:8d:8e:7f:66:c7:a4:eb:06:22:a1:82:c9:e7:
f2:ae:14:63:a9:5e:09:f7:6b:32:ca:79:a2:87:4b:
d8:e1:93:46:c5:2e:a8:19:eb:2c:68:0b:e4:bf:eb:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:D2:83:9E:03:79:85:49:C1:B6:64:E9:8D:6B:2C:77:1E:E1:65
X509v3 Authority Key Identifier:
keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:83:da:44:b0:40:ca:b8:9c:86:d2:df:73:9c:ee:5f:b0:26:
62:47:f9:d2:41:fd:8c:79:f5:6c:c7:53:82:42:6a:a3:f8:7b:
7a:5b:25:93:7e:19:89:92:01:de:71:cc:12:c4:4d:b9:59:3b:
82:65:7e:f6:75:21:fe:20:a5:f7:11:c3:39:1b:f2:b2:4f:65:
c6:32:38:b3:c4:7f:a8:0b:c6:17:bf:4b:fe:f2:c1:6e:1d:7f:
28:4e:d2:e7:c9:eb:04:a4:39:d2:98:a3:34:73:fe:e1:7b:c0:
7e:c1:d1:02:94:b6:a7:93:00:c2:17:8d:f8:7f:9c:05:90:66:
bf:c3:ec:8f:ef:82:a3:d9:5f:42:51:77:e6:34:9e:95:7a:07:
6c:64:c3:26:ea:cb:1a:a5:02:4d:2e:e3:38:0a:14:44:48:07:
ed:f6:9b:73:b7:f9:e7:40:54:01:ad:03:d5:bf:08:3f:79:bc:
9a:af:5a:7b:eb:e2:20:99:8b:c0:49:bf:1d:bb:1c:66:de:de:
dd:cc:8b:b8:c0:70:10:79:0b:00:af:a6:bf:65:08:cd:7c:41:
59:da:29:d5:bc:37:ac:51:17:51:e5:fd:f2:77:63:55:df:ed:
54:d7:e0:43:b4:ae:da:26:56:3a:8d:f6:8d:2b:a3:11:70:27:
aa:08:a9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:26 2026 by rpki-client