
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier: I+mmtN8k5766V4EcYVvauH4WvsuR+EMxkfG/q9RFj+U=
Subject key identifier: 8B:F0:FB:C3:7B:D7:E3:D0:51:15:58:F1:21:31:BD:D3:C6:0F:45:3D
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial: 0524
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number: 0517
Signing time: Sat 28 Feb 2026 20:50:52 +0000
Manifest this update: Sat 28 Feb 2026 20:50:52 +0000
Manifest next update: Sat 07 Mar 2026 20:50:52 +0000
Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: 94ipGe6Ek2qI1cUVVkRDLoyRGgfCWe4dudtiuiBbIr8=)
2: 0732C4DC090B11F1B0A6391E363D8C67.roa (hash: IX9rnjquqiOdFnnGegx74ZkU3MboGOsRwN5FnJblelQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Validity
Not Before: Feb 28 20:50:52 2026 GMT
Not After : Mar 7 20:50:52 2026 GMT
Subject: CN=69a3552c-338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:cd:83:ea:8e:76:c1:da:85:0d:81:04:f4:
43:fe:51:c7:23:63:c9:ce:e5:80:4d:50:dd:43:b9:
68:b3:89:87:41:43:60:b9:56:ff:3f:f6:aa:32:1f:
0d:8e:d7:5a:44:ce:13:1a:28:aa:ed:8e:d7:06:ca:
33:f4:3c:e6:7c:08:db:32:f5:30:65:62:13:79:3c:
94:ce:eb:97:d8:37:0e:9b:97:6e:db:47:c7:03:9f:
b2:9c:90:ba:66:ef:66:72:e2:08:1b:a0:5e:49:52:
95:83:7f:32:a7:84:ad:d5:13:8c:5c:b8:62:65:19:
8f:8a:a7:ec:50:81:43:6c:ab:ee:4e:41:b7:46:10:
26:66:f1:ee:e3:e8:4c:35:cc:bf:9e:62:41:71:17:
9e:3a:6f:09:52:0f:64:e3:ad:e2:4f:1f:73:d5:fe:
95:17:93:5a:b9:52:c9:b4:9f:30:86:c1:23:3a:ac:
d3:4f:73:fe:6b:f9:bb:cb:d7:6b:59:e6:3c:5e:d1:
d7:10:f8:e5:bc:4c:00:67:cb:17:3c:78:6d:63:1b:
ba:8d:f4:30:9b:7c:1c:d3:a2:fb:15:e5:1f:cf:e0:
93:33:60:dd:51:da:a6:6d:da:a9:59:57:d4:d5:b2:
0f:c8:27:a5:3d:c4:76:eb:c6:f4:0c:b3:49:8b:d1:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F0:FB:C3:7B:D7:E3:D0:51:15:58:F1:21:31:BD:D3:C6:0F:45:3D
X509v3 Authority Key Identifier:
keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:20:d0:7a:8d:88:40:6a:e1:63:52:18:22:cd:b6:a3:ca:ba:
12:78:6d:07:14:d0:06:f3:03:29:10:f9:40:b5:13:bd:6f:33:
41:1f:3e:fc:43:3b:f2:95:92:25:d2:cf:fa:5c:ec:8b:4f:9e:
b6:f8:cf:f5:97:6c:13:10:fd:e2:87:ac:7e:89:59:54:c5:d7:
f9:e5:48:aa:af:84:ac:0f:71:f5:65:b2:fa:06:5b:5a:55:5b:
5f:3b:9b:83:ef:e0:a6:36:ff:56:31:e0:3f:d7:5c:07:51:09:
b1:ce:e1:57:e4:73:e8:03:93:7d:c3:8c:59:0b:43:60:ee:e6:
fb:65:f6:d9:20:17:92:42:da:06:0b:9f:20:6d:cc:94:c3:09:
09:ed:de:c3:c3:78:84:de:1d:1b:47:c7:39:d8:f6:b5:e2:7f:
50:bb:54:f3:d9:60:5e:49:2c:eb:68:85:ef:4a:36:7d:c9:99:
e5:e9:c3:3f:3e:19:05:58:9e:d7:8b:36:d4:7b:61:62:9f:37:
f2:93:20:f7:4b:8d:ca:b7:cc:12:0a:b3:52:87:5e:bf:dc:c6:
eb:b3:b6:f6:30:8d:67:d2:74:11:51:df:0e:a9:bb:73:81:31:
78:90:4a:ec:2a:ee:83:53:0c:da:4b:79:ff:df:71:4e:3c:99:
d7:a3:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:45 2026 by rpki-client