
$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json)
Hash identifier: 4/jDSi3gRkBYzwO4Ons0gcNplbELMWkWE6AsRAW7aH8=
Subject key identifier: 8A:D0:1F:38:97:8C:26:F9:2D:10:2E:DA:A0:8B:A1:16:49:86:02:21
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
Manifest number: 01FB
Signing time: Sun 01 Mar 2026 03:57:02 +0000
Manifest this update: Sun 01 Mar 2026 03:57:01 +0000
Manifest next update: Sun 08 Mar 2026 03:57:01 +0000
Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: ODalyl4EoiMc5vcXOsRsov+ZBU0XmZSrGAgEM7cMG4g=)
2: 87695D32591811EE973B1058C4F9AE02.roa (hash: t+UtlSfQB7uB9LxMHNDwpYNTZSeeRrSKvGFeOr/lo+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Validity
Not Before: Mar 1 03:57:01 2026 GMT
Not After : Mar 8 03:57:01 2026 GMT
Subject: CN=69a3b90d-21be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:13:87:80:fa:88:15:e9:32:4f:d5:ef:35:41:
67:d1:bf:59:9b:a8:6b:3e:ca:27:14:65:97:6c:27:
23:4d:04:86:c0:ff:ea:0e:87:8c:03:96:49:5f:27:
15:bb:8e:d8:f3:24:58:de:1b:dc:b8:cb:8b:7a:e9:
7d:4d:13:27:b8:e4:52:0b:93:56:92:bd:17:d1:cb:
8b:49:02:b9:d2:ce:f5:01:83:e4:7f:75:08:b8:cb:
90:ba:bf:f2:67:b8:73:d6:f6:3f:e8:4f:06:fc:98:
74:d8:3f:45:85:74:eb:68:91:d0:c1:dc:d8:5b:fb:
46:08:20:1b:75:e0:95:49:fc:4e:32:f0:7f:71:0e:
ac:bd:a7:1f:21:28:f6:0c:6f:e0:a5:1f:f1:fd:21:
c8:93:aa:97:ed:9a:7f:77:f4:4f:b7:de:f4:21:09:
77:0e:f2:49:26:0c:12:a8:96:2a:58:9e:10:ba:e3:
62:34:1a:92:55:f3:56:38:e4:61:a7:50:48:e2:bd:
65:4e:1d:c2:fd:59:05:a4:93:e3:de:5f:d0:83:dc:
1a:7c:6e:a4:51:39:c2:a9:c5:94:c9:66:a6:5c:76:
e0:9e:ed:59:0b:ef:a7:1c:e3:9c:e4:a3:c1:f5:d4:
28:6f:c2:88:47:a0:04:9a:66:7b:e8:04:00:d9:67:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D0:1F:38:97:8C:26:F9:2D:10:2E:DA:A0:8B:A1:16:49:86:02:21
X509v3 Authority Key Identifier:
keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:77:56:9c:c2:74:59:71:aa:9e:71:d2:8e:8d:b4:9a:e6:8e:
aa:8a:ac:b9:e8:af:ef:a8:82:c6:bd:c6:13:20:c8:2f:3e:06:
9f:e2:c2:fe:13:58:7b:4f:ea:c4:01:29:31:e0:33:cb:9c:c9:
4d:f4:b2:d7:30:2b:05:e8:03:1b:45:e4:72:e2:27:08:7d:09:
51:75:ab:a0:0c:23:a3:d9:73:ac:1f:cd:df:1b:26:e5:44:6a:
c9:bb:9b:ea:9c:23:d9:4b:12:4c:f1:0e:f8:cf:a9:28:92:18:
58:62:01:bb:05:67:17:cf:9a:c7:7e:34:f6:a6:79:a7:c9:4c:
b9:f7:bd:c6:3e:c0:20:82:e2:a0:fd:5e:13:f5:7b:3e:24:0b:
86:49:76:7d:dd:2a:5c:53:1f:e4:ca:15:7c:82:05:47:71:48:
bd:5d:2d:00:a9:e9:50:db:a3:ab:f6:ee:26:b5:2f:7e:38:4c:
b1:8a:f2:41:62:75:c2:35:d2:07:9b:6e:fd:43:36:4c:9b:19:
e3:5c:b2:52:af:45:a0:13:a6:b9:11:81:40:0a:90:a6:4c:de:
e5:17:58:31:56:18:cb:0a:08:36:77:c1:5e:bb:23:a7:64:fe:
4c:e5:26:39:ea:a0:11:30:5c:49:7d:89:4c:e1:b8:c6:46:75:
ff:e6:e9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:00 2026 by rpki-client