
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier: JRRgV9aYaztMo6T8Fr7YzC1Sxx0ENsJ+YzI9hWJN3/k=
Subject key identifier: E8:5F:1C:BC:22:D3:B0:33:23:BB:DC:08:9B:AE:51:B5:BF:0F:DE:70
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial: 081D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number: 0814
Signing time: Sun 01 Mar 2026 23:40:03 +0000
Manifest this update: Sun 01 Mar 2026 23:40:01 +0000
Manifest next update: Sun 08 Mar 2026 23:40:01 +0000
Files and hashes: 1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: CNIOvTEoSMe7wH6a8dvpcroEOw5TwZp6z/h9B8tOhS4=)
2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: FlKi2ZxHz6D5064I2oVQSbDeOoF5annLB1jMFwj5Qkk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Validity
Not Before: Mar 1 23:40:01 2026 GMT
Not After : Mar 8 23:40:01 2026 GMT
Subject: CN=69a4ce53-fb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:af:d9:e8:18:d7:d1:43:12:c4:3d:8c:5c:
00:57:68:84:fb:01:f9:29:b2:8c:c0:01:07:0e:61:
bd:9d:a8:56:b9:eb:c3:49:28:1f:bd:0f:91:da:4e:
ac:f2:8f:91:c8:85:92:85:37:c3:ad:11:8b:a4:b0:
1b:c5:a2:d7:66:74:dd:9b:72:67:cc:5e:25:d7:fc:
32:75:8a:a7:5a:80:4c:21:72:7d:ce:67:ae:cb:a6:
67:3e:28:b6:c6:d5:af:67:4b:ee:36:d1:ae:ce:3a:
dc:2f:da:ca:4c:f3:68:00:ed:f4:1a:c0:64:e1:0a:
9e:54:e5:07:59:29:36:c3:06:c9:cb:4a:e4:25:d3:
74:75:cc:d2:91:a6:dd:3c:dc:db:75:44:11:6f:45:
34:2d:1e:43:82:77:d0:91:dc:f6:b6:d2:42:b1:59:
f9:69:38:81:bd:b0:f7:e7:86:15:29:97:94:84:ff:
ea:8f:36:42:06:92:b3:45:e4:76:78:bb:fd:c3:26:
bd:b7:b8:e5:e6:d7:e7:25:eb:77:8a:55:37:ad:43:
d9:39:01:87:54:9a:78:bd:b3:53:12:5a:5d:08:f4:
2c:ae:53:03:42:16:e1:a0:21:ec:7a:58:72:36:d3:
03:7d:c9:42:fc:1f:5e:d4:8b:d1:eb:f8:e0:e3:77:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:1C:BC:22:D3:B0:33:23:BB:DC:08:9B:AE:51:B5:BF:0F:DE:70
X509v3 Authority Key Identifier:
keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:35:cb:fd:2b:9c:9e:c7:05:b2:c0:1f:81:1f:02:12:b9:cd:
cf:56:d1:a7:02:35:1e:5b:38:3c:16:bc:2e:3f:77:c1:36:36:
67:10:69:f6:ec:2b:f0:9a:6d:97:81:b7:39:0a:a7:70:b8:70:
1c:56:48:fb:dd:1e:8f:17:2d:25:1a:fc:93:a9:a1:7d:28:e3:
85:11:ce:71:6d:a6:53:c1:9c:42:3e:a0:ca:cb:84:c6:81:0d:
f5:3c:7b:d9:30:90:86:b8:72:ac:9d:d4:fb:96:aa:a0:54:82:
bf:17:08:53:d5:49:fe:84:b1:f1:b6:d0:e2:36:bd:53:a7:fb:
19:2a:b1:7f:fb:36:70:a9:5b:36:eb:74:5c:12:41:81:4a:37:
14:ac:66:de:e0:1d:9f:e1:96:82:a0:be:e9:84:f3:f8:f9:be:
46:ee:91:3c:68:d5:ed:5f:d9:30:94:d9:0a:79:f3:88:6c:c8:
f6:98:33:ec:d9:f9:b5:c4:cd:2e:95:64:04:2a:30:c0:17:2a:
6b:02:99:62:89:a1:5b:bf:d7:b6:b3:9a:84:0f:04:c9:28:67:
e5:7b:e0:b0:ef:22:12:d8:21:82:d1:7c:13:53:58:26:37:94:
e8:83:57:f1:77:f3:58:5c:23:22:53:a7:e0:e1:86:0c:b3:b5:
63:13:6d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:37 2026 by rpki-client