
$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json)
Hash identifier: r8MRaLqLZnIf+agf3cp6pkQAJ2sWWONUisp+3Whiho0=
Subject key identifier: 08:33:6C:90:7F:76:6F:27:41:21:1A:07:93:5E:33:BB:B4:02:B4:9F
Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Certificate serial: 03CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
Manifest number: 03C0
Signing time: Sun 01 Mar 2026 22:49:08 +0000
Manifest this update: Sun 01 Mar 2026 22:49:07 +0000
Manifest next update: Sun 08 Mar 2026 22:49:07 +0000
Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: DYjTEQcuCNZR94ysU5wYE9jGS+UFW8Qj/e8ZERRvo8g=)
2: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: pSZyO8DRU7k04LVzxpq4jULZp/HQ6qCZD+25WSrrumg=)
3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: 9ddhu2yrw8Y1Qn76lqowUGOY2CYHuc5bqh90B9kOwck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 971 (0x3cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Validity
Not Before: Mar 1 22:49:07 2026 GMT
Not After : Mar 8 22:49:07 2026 GMT
Subject: CN=69a4c263-6f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:69:25:5b:f5:8e:36:58:f1:6d:ed:16:0c:
3d:8e:79:68:f3:94:46:28:78:09:78:cd:5c:82:86:
d1:ef:5e:07:66:a7:25:75:83:ed:26:ef:80:9a:2d:
ff:92:96:f1:36:0a:7c:76:70:18:3d:3e:b4:6d:99:
29:78:37:11:5c:05:99:9b:83:45:25:90:5a:e7:29:
c7:8d:68:de:24:15:f5:e5:d8:49:0f:8a:e1:a5:5d:
0c:0a:e8:ca:27:a6:91:c1:b4:96:ca:76:4b:9a:c0:
bc:a2:3c:ee:03:80:d5:3d:3c:5d:dc:2d:e0:75:64:
88:77:83:4b:04:54:3d:2c:18:84:ad:9f:09:3f:ec:
eb:84:5f:93:9a:5d:11:3d:82:55:b9:17:fe:83:6f:
4a:e8:27:04:e8:7f:dc:25:42:6c:48:db:e0:4d:ba:
1e:bc:9e:d0:e3:de:c7:89:eb:72:c7:27:61:7f:3b:
ce:53:c7:cf:6e:97:d9:ca:e2:ac:12:39:a9:b4:94:
b3:12:2d:0d:82:d5:28:c9:83:57:75:53:b7:8f:e1:
97:7e:9f:f4:f3:6d:01:10:34:2d:b4:2b:68:0a:4f:
42:03:a6:a1:ed:2b:44:d0:8a:96:1c:cb:7c:ac:52:
78:23:82:df:2b:78:25:a1:e1:a0:ca:7f:97:15:12:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:33:6C:90:7F:76:6F:27:41:21:1A:07:93:5E:33:BB:B4:02:B4:9F
X509v3 Authority Key Identifier:
keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6d:f0:69:7a:dc:cd:ce:80:f7:b2:a2:48:05:f0:7c:e5:74:
ff:2a:f9:a5:bc:6f:8a:4f:e0:ac:6a:08:93:24:b5:ba:a3:32:
91:54:b1:04:ed:9d:03:83:ba:4f:be:3c:9c:74:a5:ad:5c:ad:
24:08:6e:23:21:89:fd:3b:b7:06:9c:e9:60:52:c4:1c:c8:96:
16:6a:74:19:ef:f2:8d:07:4e:74:3e:9d:b9:b6:de:7e:c4:a1:
b9:c4:f8:46:af:ee:48:aa:89:08:32:94:36:22:c7:25:03:38:
89:a4:45:93:b9:84:d0:3a:ae:01:50:39:4c:80:04:d8:a4:d4:
51:15:cd:0d:d0:08:0f:9e:62:20:04:1f:74:93:58:0e:11:08:
ac:ec:cb:ab:c3:f0:63:d0:cd:b1:4d:2f:27:30:ca:75:ea:e9:
a3:50:19:52:50:cb:21:ec:c9:42:d8:bf:24:63:80:1d:95:c8:
14:e7:62:8d:b3:3a:2e:bf:1d:38:38:ba:65:e1:65:15:b4:bf:
58:ef:49:a7:11:22:42:11:ff:dd:1f:96:0f:0f:cf:a1:c4:98:
29:3f:88:af:81:fb:aa:3f:4e:66:7d:5b:80:25:fa:04:e9:f4:
1e:62:22:f5:b0:7c:87:d0:20:a7:94:46:a6:79:c8:93:ef:96:
b5:87:75:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB
RjI4ODYyRjYwHhcNMjYwMzAxMjI0OTA3WhcNMjYwMzA4MjI0OTA3WjAYMRYwFAYD
VQQDEw02OWE0YzI2My02ZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzJpJVv1jjZY8W3tFgw9jnlo85RGKHgJeM1cgobR714HZqcldYPtJu+Ami3/
kpbxNgp8dnAYPT60bZkpeDcRXAWZm4NFJZBa5ynHjWjeJBX15dhJD4rhpV0MCujK
J6aRwbSWynZLmsC8ojzuA4DVPTxd3C3gdWSId4NLBFQ9LBiErZ8JP+zrhF+Tml0R
PYJVuRf+g29K6CcE6H/cJUJsSNvgTboevJ7Q497HietyxydhfzvOU8fPbpfZyuKs
EjmptJSzEi0NgtUoyYNXdVO3j+GXfp/0820BEDQttCtoCk9CA6ah7StE0IqWHMt8
rFJ4I4LfK3gloeGgyn+XFRIs9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgzbJB/
dm8nQSEaB5NeM7u0ArSfMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2
MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDJCOS8zQjcyRUU5MEM2MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBo
czNCRlN3RG10Wk92S0lZdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS23waXrczc6A97KiSAXwfOV0/yr5pbxvik/grGoIkyS1uqMykVSxBO2dA4O6
T748nHSlrVytJAhuIyGJ/Tu3BpzpYFLEHMiWFmp0Ge/yjQdOdD6dubbefsShucT4
Rq/uSKqJCDKUNiLHJQM4iaRFk7mE0DquAVA5TIAE2KTUURXNDdAID55iIAQfdJNY
DhEIrOzLq8PwY9DNsU0vJzDKderpo1AZUlDLIezJQti/JGOAHZXIFOdijbM6Lr8d
ODi6ZeFlFbS/WO9JpxEiQhH/3R+WDw/PocSYKT+Ir4H7qj9OZn1bgCX6BOn0HmIi
9bB8h9Agp5RGpnnIk++WtYd14Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:35 2026 by rpki-client