
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File: F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier: N6SC7GGQqN0frzPRdKPmQqwGnuH9O3rmT2whvALas2s=
Subject key identifier: B5:AF:A0:7D:0C:8C:72:E1:F9:5C:30:FB:C8:37:20:7D:C4:32:5E:06
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer: /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number: CA
Signing time: Sun 01 Mar 2026 07:59:02 +0000
Manifest this update: Sun 01 Mar 2026 07:59:01 +0000
Manifest next update: Sun 08 Mar 2026 07:59:01 +0000
Files and hashes: 1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: ikWNYjBzqB7rtVY8M//favalRk0yardfOD1bDs2MT8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Validity
Not Before: Mar 1 07:59:01 2026 GMT
Not After : Mar 8 07:59:01 2026 GMT
Subject: CN=69a3f1c6-dbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:eb:fc:bb:e7:c4:a7:ad:9f:a8:ff:6c:07:
dd:41:18:00:f3:58:f3:76:a4:14:72:33:25:9f:db:
55:13:b4:3b:4e:83:f1:b9:da:20:40:70:e8:c7:fc:
d6:45:3b:e1:85:b5:91:29:d3:22:9d:5f:3b:f2:dd:
94:a7:c3:ec:d5:ac:f0:58:5b:24:c4:c8:e5:dc:e0:
4a:d2:30:7c:1a:f7:7e:9e:3a:3e:70:1f:c9:dd:32:
fd:29:a7:13:74:8b:7d:55:d5:d7:fa:1e:e2:64:c9:
6f:cd:7d:be:7e:cd:ae:bc:49:88:00:2c:9f:fb:17:
59:f2:c4:19:66:3f:03:11:ff:42:47:01:ed:b3:ef:
6f:44:ae:7a:b1:50:48:b7:5e:a8:e7:18:33:64:35:
6c:8c:ed:dd:85:ad:16:8d:7f:81:52:1d:ed:b4:34:
82:98:2b:63:8e:a6:47:6e:19:d3:1c:dd:9b:cc:2b:
4c:60:ee:4f:b2:09:16:0d:66:ff:58:e2:8b:cc:de:
17:a8:e3:2b:99:01:70:e3:cc:a2:c3:22:62:84:7c:
e3:07:c9:c4:5d:4d:1f:ab:8d:df:af:d9:32:5e:48:
10:1c:a6:23:49:16:a7:6a:5d:d6:91:7e:e9:e4:47:
c0:c8:5c:78:2f:d5:df:32:a7:69:50:b8:18:e2:e2:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AF:A0:7D:0C:8C:72:E1:F9:5C:30:FB:C8:37:20:7D:C4:32:5E:06
X509v3 Authority Key Identifier:
keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:37:14:61:73:e4:2b:25:9c:9f:af:01:53:7a:7a:3b:9d:26:
70:b8:13:7e:a2:87:8c:bd:a4:1c:a8:1c:db:a7:0f:fe:43:6f:
44:20:6b:bc:bb:92:e7:45:a5:31:9e:bc:85:e3:6b:a8:f5:b4:
2e:6e:54:6a:8b:68:0e:77:e6:d1:fc:02:23:b0:d5:25:36:84:
6b:f4:c7:2b:ac:e4:3e:95:62:ea:10:26:1e:4f:6c:5e:35:10:
28:e8:ac:fd:58:1e:ab:fc:d8:84:98:a3:45:d9:82:f3:aa:84:
32:d2:82:60:dd:d8:f0:7e:90:c7:d9:b3:b4:6b:20:3c:e1:1d:
45:49:44:14:80:5f:05:5a:80:8a:fc:91:6e:2c:8e:ab:96:6f:
32:0d:04:f8:a4:45:b8:0e:7a:d7:01:0b:cf:ec:ad:a6:ff:53:
65:27:d5:71:8f:08:91:7b:ae:c7:7e:e3:0b:f9:ce:0e:2f:21:
fd:ee:11:be:43:c8:dc:ed:64:28:19:42:ca:f9:64:eb:4c:1d:
8d:77:3e:e3:11:15:de:94:84:f6:0f:6e:3e:f4:33:9f:e6:9d:
d9:3f:df:1f:13:80:7e:37:2a:57:9b:8b:58:04:a5:c4:89:09:
7f:ab:2c:ae:0a:05:51:7a:22:b7:ef:7a:97:f0:bd:e2:f5:77:
47:3b:d9:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5RjUxMTAvBgNVBAUTKDE3OEM2QkI0NzZCMzdDNUYxNUU2RTk1M0FCRTRDQkNG
MDg2MTA4MkIwHhcNMjYwMzAxMDc1OTAxWhcNMjYwMzA4MDc1OTAxWjAYMRYwFAYD
VQQDEw02OWEzZjFjNi1kYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJfr/LvnxKetn6j/bAfdQRgA81jzdqQUcjMln9tVE7Q7ToPxudogQHDox/zW
RTvhhbWRKdMinV878t2Up8Ps1azwWFskxMjl3OBK0jB8Gvd+njo+cB/J3TL9KacT
dIt9VdXX+h7iZMlvzX2+fs2uvEmIACyf+xdZ8sQZZj8DEf9CRwHts+9vRK56sVBI
t16o5xgzZDVsjO3dha0WjX+BUh3ttDSCmCtjjqZHbhnTHN2bzCtMYO5PsgkWDWb/
WOKLzN4XqOMrmQFw48yiwyJihHzjB8nEXU0fq43fr9kyXkgQHKYjSRanal3WkX7p
5EfAyFx4L9XfMqdpULgY4uJ/8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWvoH0M
jHLh+Vww+8g3IH3EMl4GMB8GA1UdIwQYMBaAFBeMa7R2s3xfFebpU6vky88IYQgr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zQTgyOTBFOERG
REExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZGOFY1dWxUcS1UTHp3aGhD
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Y0eHJ0SGF6ZkY4VjV1bFRxLVRMendoaENDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDlGNS8zQTgyOTBFOERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZG
OFY1dWxUcS1UTHp3aGhDQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsTcUYXPkKyWcn68BU3p6O50mcLgTfqKHjL2kHKgc26cP/kNvRCBrvLuS50Wl
MZ68heNrqPW0Lm5UaotoDnfm0fwCI7DVJTaEa/THK6zkPpVi6hAmHk9sXjUQKOis
/Vgeq/zYhJijRdmC86qEMtKCYN3Y8H6Qx9mztGsgPOEdRUlEFIBfBVqAivyRbiyO
q5ZvMg0E+KRFuA561wELz+ytpv9TZSfVcY8IkXuux37jC/nODi8h/e4RvkPI3O1k
KBlCyvlk60wdjXc+4xEV3pSE9g9uPvQzn+ad2T/fHxOAfjcqV5uLWASlxIkJf6ss
rgoFUXoit+96l/C94vV3RzvZpw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:54 2026 by rpki-client