
$ rpki-client -vvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
File: mFDq_-09ooRdUfCVrBEkUIjVYj8.mft (raw, json)
Hash identifier: MaYqs+zgl2hhj0YUjMRhz4ny8jfAJ9NXwvK2illYzZY=
Subject key identifier: 40:8E:00:42:51:A1:4F:51:1E:23:E4:DD:94:5A:01:40:C3:69:1B:C2
Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
Certificate issuer: /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
Manifest number: 55
Signing time: Sun 01 Mar 2026 09:35:03 +0000
Manifest this update: Sun 01 Mar 2026 09:35:02 +0000
Manifest next update: Sun 08 Mar 2026 09:35:02 +0000
Files and hashes: 1: mFDq_-09ooRdUfCVrBEkUIjVYj8.crl (hash: HZ+5M9zRrBDkHuVHsrmWCCzZg147jV9DZ+9Ff6hyW9c=)
2: ACA405589E7011F083978F1AC4F9AE02.roa (hash: YmblmfroJEPUhmWz7o6a8qxz0P00eBgbcYH8HDNSw40=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Validity
Not Before: Mar 1 09:35:02 2026 GMT
Not After : Mar 8 09:35:02 2026 GMT
Subject: CN=69a40847-0558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:e3:4f:ae:9c:a2:4d:51:6a:9d:1b:70:f6:
70:fd:77:68:77:bd:3b:71:97:a9:68:38:da:9a:83:
be:14:c7:f0:77:97:6a:e0:47:0c:3d:28:30:29:bb:
cb:d8:8b:c7:7e:c8:7a:1e:b4:75:e2:6f:da:bf:f8:
07:e8:79:9d:5b:2e:a2:d9:a2:97:02:05:8e:60:51:
b8:38:1a:29:01:52:22:e3:8e:7c:28:1e:74:82:9a:
57:76:4f:cf:7e:ad:33:b5:82:bf:6d:31:52:3b:ba:
60:9d:95:ac:d4:eb:6f:8f:06:47:d7:72:57:db:67:
03:06:20:77:b3:fa:43:6b:ad:d4:46:72:51:c9:51:
f9:87:d5:5b:ad:da:c2:da:cc:d1:f5:60:03:05:f1:
3c:29:e0:1a:89:d1:c3:17:f1:27:43:01:dd:29:e4:
b8:c6:64:fd:80:7e:b1:db:ad:70:41:5f:86:9d:e9:
fa:6e:b8:a3:a0:2d:bf:1d:85:cf:07:22:0b:36:94:
0b:20:0a:61:10:d1:5b:27:b9:6d:ff:26:33:19:61:
77:d9:4b:e4:06:75:a1:8f:12:56:fa:60:db:20:b1:
bc:6c:b2:52:dc:08:ff:5f:91:2e:81:49:b8:1d:6a:
d9:b2:1c:c5:0d:42:ce:e5:b7:df:45:93:75:26:06:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8E:00:42:51:A1:4F:51:1E:23:E4:DD:94:5A:01:40:C3:69:1B:C2
X509v3 Authority Key Identifier:
keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:56:b5:f1:7b:08:af:08:35:d1:ca:08:42:75:20:04:96:f0:
e0:7e:8c:bb:9c:9f:2c:a4:31:37:66:72:44:3e:80:85:ea:a9:
3d:7f:77:9d:fe:91:7f:eb:a7:d8:e9:f3:38:c9:c5:0a:39:44:
ec:59:e8:dc:63:27:bf:1d:39:80:06:94:ab:5e:15:06:78:bf:
79:de:06:ad:01:ea:68:93:4d:81:e3:43:74:8f:12:41:aa:67:
b3:1b:2b:1b:92:71:e3:81:7b:01:44:95:cc:b3:68:27:d5:d0:
ce:f1:1f:83:d6:ba:09:fe:8a:9e:02:7b:2b:45:c0:cc:1b:1c:
4d:4e:5a:d7:8f:68:ef:b8:ab:f1:96:a1:2b:b3:40:f0:89:c0:
df:f7:53:53:cb:d2:c0:c5:c7:5c:40:e7:3e:00:96:10:1e:98:
c7:63:f7:aa:ee:1a:67:78:c1:23:08:4d:cd:66:16:f2:3d:04:
c7:d4:af:2e:63:09:a2:49:2e:87:19:38:51:b4:9b:a2:e0:fe:
4f:6f:1b:1d:62:99:67:95:ad:6c:c8:61:c3:af:c2:c7:ec:92:
60:28:70:a4:b4:16:67:74:8a:c2:ef:cb:6c:cd:20:39:44:e5:
eb:af:50:59:99:8c:8e:90:43:9f:e7:2e:de:38:4a:7c:66:fd:
08:bd:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:28 2026 by rpki-client