
$ rpki-client -vvf rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
File: 0nYmctKXWA5IQijBceWokHMMF28.mft (raw, json)
Hash identifier: dkuAh0PiUBQVWLv6WEGe44nbdXrAI651i/JWDUphavg=
Subject key identifier: 23:31:D2:B7:E9:85:6D:2A:CD:AE:77:47:47:7E:B7:F0:07:FD:74:C0
Authority key identifier: D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F
Certificate issuer: /CN=A91724A6/serialNumber=D2762672D297580E484228C171E5A890730C176F
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
Manifest number: 0231
Signing time: Sun 01 Mar 2026 23:05:43 +0000
Manifest this update: Sun 01 Mar 2026 23:05:43 +0000
Manifest next update: Sun 08 Mar 2026 23:05:43 +0000
Files and hashes: 1: 0nYmctKXWA5IQijBceWokHMMF28.crl (hash: Bk/d1/ajJTEHeFOnKU221ZanpC/xhpevP/ngQvTYVI8=)
2: 950A55CCC3C711ED8419AA64C4F9AE02.roa (hash: rlJpxeuz4XfDgn5OftJBgDHyUQdmKKYiwzNQtX6KD/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl
rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91724A6, serialNumber=D2762672D297580E484228C171E5A890730C176F
Validity
Not Before: Mar 1 23:05:43 2026 GMT
Not After : Mar 8 23:05:43 2026 GMT
Subject: CN=69a4c647-73e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:65:e2:b0:90:68:d4:74:fd:b5:b6:df:56:
96:91:e6:49:01:0b:01:13:ec:cb:71:2c:4e:9c:d9:
07:c0:4a:63:b0:3b:c3:18:e8:b1:7a:6d:04:40:06:
44:8f:86:87:76:21:89:b4:5a:5d:9d:88:1d:f5:63:
93:fc:fd:0a:c9:d5:0b:b3:0a:ca:cf:53:e3:a9:9c:
b3:d8:83:e6:cd:71:d4:de:c5:72:65:87:f2:89:46:
eb:f9:7b:11:8a:c7:a5:d6:ef:a3:09:90:08:68:b9:
72:e9:8e:01:0b:a4:0c:ad:3b:b8:c7:d5:0b:34:47:
97:91:67:39:83:f5:7e:59:64:fb:36:86:b2:89:91:
cc:0f:e6:54:2c:3b:e8:d9:c8:a6:f1:9c:60:14:c3:
69:88:a5:fd:c9:2c:9d:ae:1f:1d:0d:17:45:21:b1:
84:ca:2b:5c:53:09:0a:6a:51:e3:57:a9:1b:77:48:
fb:60:33:10:c4:36:e4:69:8d:96:86:78:ad:39:2b:
11:4a:d7:c7:12:4e:02:27:a1:67:ce:6c:ec:78:92:
ea:d6:4f:5e:6b:5f:cf:b4:85:79:4b:6d:df:91:67:
85:8c:13:55:09:94:af:d6:29:c4:f1:27:59:dd:e6:
c9:d9:d9:a5:5b:83:5d:ef:e1:c8:04:37:26:8d:9b:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:31:D2:B7:E9:85:6D:2A:CD:AE:77:47:47:7E:B7:F0:07:FD:74:C0
X509v3 Authority Key Identifier:
keyid:D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:a4:04:17:07:6a:30:3c:9e:29:79:ad:8c:1d:4e:38:0b:95:
d9:82:55:47:72:bc:2a:3c:ef:7e:58:05:72:60:3a:1a:5a:e1:
1e:56:1a:fa:65:c1:1b:f1:99:f4:63:79:fe:f8:bc:85:d1:b8:
ae:54:57:9b:a5:8e:fc:a6:ec:38:65:61:b8:23:f6:ca:ee:7e:
42:63:43:69:86:f5:39:94:76:7f:2b:fa:42:6e:20:41:bf:04:
03:44:eb:4c:59:17:2b:cd:20:1c:ee:34:02:73:42:fb:e5:cd:
ce:1a:34:6c:83:3c:0a:de:22:73:38:d5:14:8e:d7:c9:7f:ce:
14:19:1e:63:33:07:ed:7b:8d:13:c0:76:2c:1e:d2:a8:cb:fc:
9c:ac:37:67:fc:dd:f9:35:6c:97:40:75:3a:e4:56:d1:ca:83:
24:37:db:92:8c:28:d6:09:f3:20:e0:15:6f:45:46:6c:3f:59:
5b:1c:70:dc:fe:b7:4b:54:68:09:e8:fd:a9:26:82:c6:91:fa:
6a:09:e5:be:f4:e7:e7:7d:6b:48:fc:b2:2e:44:71:23:93:31:
a5:62:7c:83:c8:79:fa:dc:76:82:67:b7:60:5d:39:0a:05:f0:
d6:6e:8b:04:ac:e1:d7:de:4c:0a:66:5f:f7:4f:9d:42:5b:ab:
71:9b:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:48 2026 by rpki-client