
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
File: F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json)
Hash identifier: OENYuZzs9yIvynci9r/cqvnNeB6PoKAxlVBpvG/ZKhE=
Subject key identifier: 00:C6:B0:11:D4:EA:A7:B6:13:CA:4D:48:FF:C8:C6:03:B9:85:98:2E
Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81
Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
Manifest number: F1
Signing time: Sun 01 Mar 2026 07:25:43 +0000
Manifest this update: Sun 01 Mar 2026 07:25:42 +0000
Manifest next update: Sun 08 Mar 2026 07:25:42 +0000
Files and hashes: 1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: 3iYh7FISKiCW+KJwkphtne5wTd3zyoQIE7sVtVuleIE=)
2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: TJ/GBu5lvEogZ8tUOv45ZlaDd67cdBKVLZ/FNsJlT7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl
rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81
Validity
Not Before: Mar 1 07:25:42 2026 GMT
Not After : Mar 8 07:25:42 2026 GMT
Subject: CN=69a3e9f7-8b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:31:eb:56:fb:52:f1:d0:51:2b:51:5d:9f:
98:83:ed:ef:49:ac:cf:fc:f8:a1:30:2d:39:ea:33:
33:d6:25:93:14:79:dd:6d:74:34:38:f4:b8:0d:d2:
1b:01:58:eb:1d:51:e8:81:d5:e2:9a:77:0f:90:ea:
23:53:93:3f:2e:79:f3:0e:94:23:22:56:f7:52:88:
95:da:60:17:dd:9a:f0:21:68:17:26:bb:f6:68:96:
d9:9f:09:51:a1:ac:47:6d:c0:d4:ed:c4:9c:90:7c:
6b:e4:d8:3f:b5:e2:ad:77:db:4a:82:85:fa:d8:41:
e4:5d:19:c1:37:81:c7:29:69:fd:8f:bf:da:69:e9:
7b:cc:74:7c:86:2c:0f:70:1b:7a:f5:51:db:b4:8b:
7e:4f:d8:47:67:f5:35:54:81:a3:85:82:46:82:5c:
91:98:07:34:f5:2b:05:77:cb:bd:9d:20:18:f9:06:
be:d5:bc:7b:de:b0:1d:6d:0b:c0:03:09:93:72:7b:
9e:1e:f9:65:3d:3a:d8:71:b2:90:d5:d9:e7:74:c4:
e5:94:f8:97:c1:a7:fc:d5:f5:aa:e9:56:7f:8e:6b:
26:93:8f:a5:a3:8c:e9:8b:c2:ee:6c:47:23:c2:d7:
3f:11:5a:8a:da:62:da:f4:f0:2c:d0:46:9e:cb:ca:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C6:B0:11:D4:EA:A7:B6:13:CA:4D:48:FF:C8:C6:03:B9:85:98:2E
X509v3 Authority Key Identifier:
keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:81:36:25:42:5c:8e:55:bd:05:78:e5:4c:fe:79:36:d3:
26:14:21:4f:64:41:6d:4f:96:62:f0:f9:92:1b:76:ce:0e:b2:
99:8f:4c:e6:28:a8:c7:66:00:46:68:fd:82:15:95:5e:8b:79:
71:96:05:19:3d:e0:ad:64:3b:99:c8:80:8f:7d:e1:75:a2:e4:
46:bc:37:c1:79:55:c9:e7:e5:79:58:35:e4:d9:b6:28:60:68:
28:ee:9c:22:05:18:2e:18:cb:89:b1:4b:42:b4:99:68:67:b2:
ee:03:e6:2d:2f:4e:3a:27:76:58:93:d2:df:02:c2:c8:c5:10:
4c:fc:48:45:a0:57:9e:1d:72:20:4f:b8:9f:22:46:f2:b3:12:
05:31:32:6a:c9:e9:2d:18:7e:e6:e4:d0:80:5d:2d:c2:90:a7:
24:33:a6:22:39:5d:95:f1:fa:0f:9d:86:f7:2d:28:5c:21:da:
8e:cf:2d:39:fc:be:ef:2d:ff:fe:a4:97:a9:d9:31:80:3e:55:
f2:74:17:4d:1c:02:36:b5:34:95:50:00:21:92:3c:0f:c5:ed:
22:f2:83:02:a0:d2:df:6b:fc:b4:9b:87:55:45:ef:02:af:2d:
37:f5:b0:f9:99:9d:27:a6:25:58:e7:09:8d:59:b5:47:d5:7f:
9a:d0:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:38 2026 by rpki-client