
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier: jx0TJ8uJHum8y9VU8S0B4K36eDd+ZdQYdkt7IllEbHY=
Subject key identifier: 4F:5E:BC:F9:3F:8E:DC:31:CC:49:B0:A3:0F:B6:97:A2:02:EB:33:AC
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 0593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number: 056D
Signing time: Sun 01 Mar 2026 00:03:33 +0000
Manifest this update: Sun 01 Mar 2026 00:03:33 +0000
Manifest next update: Sun 08 Mar 2026 00:03:33 +0000
Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: TFlK6/jZDv1qOSP9xGVBdmfrmySOgJEziwZv3XgzGrU=)
2: 53B4619407CB11F19B0357131B3D8C67.roa (hash: cDpOxJyGcDUZfsLfbeDDvwlG60DFBR0tHk2S0DKukZs=)
3: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: AhcbearK6iV6xBjXUDN0qGwO1GubeQ+m8AdvrMUpw0Q=)
4: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: BaDUL34/Gwa3G8jGhtSk9P3jmeq3rCjBk1zIOgJr1cM=)
5: FBBECF1A694111F08D368069C4F9AE02.roa (hash: Hxo/oVA2HgH6qQ01M6fl9cqj5vSj3O9qRMc68jJm0P4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1427 (0x593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Mar 1 00:03:33 2026 GMT
Not After : Mar 8 00:03:33 2026 GMT
Subject: CN=69a38255-b55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:b4:a1:3b:bd:1f:80:b7:26:c0:c5:fe:af:
08:b0:bc:81:97:e7:e3:32:8c:72:8f:20:3a:6e:db:
3e:d1:eb:8d:19:44:79:14:7f:b0:23:e7:f6:f7:9b:
c9:1e:63:55:c2:14:a4:88:98:6b:e4:12:00:30:2b:
95:8b:b1:52:4e:9b:c3:a9:72:47:be:4f:02:db:63:
1b:e5:a1:a7:59:16:c8:cf:ec:fd:95:b6:24:cb:4c:
0d:8d:0a:b0:e7:fc:66:48:42:2e:f4:85:d2:75:bb:
27:09:31:95:12:cf:c6:63:09:c6:89:e1:51:a2:92:
72:3c:30:18:1e:41:6e:76:bf:1a:b8:f2:93:f5:ee:
1c:c1:76:82:e7:69:12:d0:ed:f5:bd:f0:e4:41:5f:
1e:2d:38:56:cd:1a:11:5b:02:81:4d:40:cf:f9:c9:
bc:e6:dd:2b:34:b7:af:94:01:fc:f4:2d:73:8b:3d:
81:91:47:2f:d0:dc:01:71:ad:de:40:1a:29:2f:7e:
21:49:5c:70:39:e5:4f:ee:d7:48:f0:07:c3:b6:dd:
21:38:13:27:1e:7d:f0:c3:35:11:a8:2c:39:f7:4b:
1d:b5:a0:ac:27:4e:81:af:fc:ed:d7:09:ed:4b:c0:
a7:39:aa:4c:ce:4b:7a:37:a6:66:23:5c:bd:06:c1:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5E:BC:F9:3F:8E:DC:31:CC:49:B0:A3:0F:B6:97:A2:02:EB:33:AC
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ac:87:f6:c3:92:96:8c:08:f9:ca:27:ed:78:02:b9:f3:25:
08:00:b7:c5:1e:be:2c:d7:85:d1:c9:a9:d8:08:ee:a7:b3:55:
88:06:65:86:9a:a4:f2:4f:ed:b6:27:bc:40:77:f2:37:24:a5:
1f:fc:88:73:6e:d9:4b:7e:86:92:e1:88:5d:1f:cd:75:bc:34:
ef:88:d1:42:dc:0a:44:66:9d:09:ab:fc:76:e3:92:3a:22:77:
20:ce:b2:ba:53:84:ed:17:dc:b0:d9:9f:a4:3c:92:22:a9:e7:
05:51:40:b5:52:7b:a8:ff:98:27:60:99:4d:90:07:9e:07:ae:
1b:e6:17:79:aa:cc:5f:9f:f0:f2:47:1d:55:c3:35:3b:c7:99:
35:55:e6:18:2c:50:7d:87:d5:cb:e6:b3:ba:99:ac:d3:0e:11:
4f:6e:b3:cd:e9:77:a0:84:a3:8a:fc:81:79:a1:ff:14:00:e8:
6a:c2:57:4e:a5:3c:32:b0:94:19:e7:28:aa:e3:e1:79:5c:39:
94:fb:27:85:8a:48:64:e4:6d:91:62:d5:67:83:e1:08:05:c0:
fb:84:13:88:d3:b8:0f:22:e3:90:bb:79:bf:f1:36:f0:42:15:
c3:1c:c4:75:17:d0:61:d7:be:f1:23:a7:91:93:4f:b3:b5:54:
64:49:b8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:27 2026 by rpki-client