
$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
File: ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json)
Hash identifier: wDyiraqWD9TdUAp60u5i51exH8B75cWD0O3k3NWTXSM=
Subject key identifier: 20:9B:CF:62:0E:7B:BB:14:EA:6A:EC:21:F6:3E:0F:FE:42:B4:7B:9D
Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Certificate serial: 0658
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
Manifest number: 0651
Signing time: Sat 28 Feb 2026 23:13:10 +0000
Manifest this update: Sat 28 Feb 2026 23:13:09 +0000
Manifest next update: Sat 07 Mar 2026 23:13:09 +0000
Files and hashes: 1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: JtoFIYT7dj13/n2Uu3RvgsLPEtVNmJ3BfMDSWpZyk7I=)
2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: 1LEbeB2sOSy0yXmk2wIYI71rgNCCnZow4wFFO18wbUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl
rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1624 (0x658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91944AB, serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Validity
Not Before: Feb 28 23:13:09 2026 GMT
Not After : Mar 7 23:13:09 2026 GMT
Subject: CN=69a37685-33e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:10:0b:ed:1f:0f:25:e8:a0:4f:d7:d9:20:
a8:1b:2a:31:a5:c0:03:a4:ca:52:f6:fa:3b:94:79:
18:75:6e:ce:ca:d6:cd:46:56:da:ad:d8:fe:df:cf:
71:7d:34:60:25:26:75:7c:3f:b5:d9:00:59:2d:9c:
e2:33:55:9c:b7:8f:fc:1b:b4:31:cb:9f:10:0f:a0:
90:ff:04:5a:dd:e1:bc:58:e9:5f:fb:74:e0:0f:e6:
92:0b:7b:07:d9:80:22:c7:2e:72:96:0d:13:dc:9c:
b3:32:08:c9:66:9e:4f:fa:95:36:de:95:d1:96:25:
2d:90:a5:aa:03:62:8f:55:89:9b:c4:65:59:b9:c3:
5f:8f:fd:0c:10:86:69:65:65:f9:8d:45:67:de:90:
c6:61:ba:65:98:06:4a:45:df:f7:c0:90:f6:7f:4f:
04:f5:17:0e:37:9c:96:ba:2e:31:77:48:66:e6:31:
9d:97:4d:e6:d5:34:95:ad:ad:24:b7:0b:2e:f4:32:
d5:e2:c9:23:f8:a8:8b:58:05:e3:bd:30:a7:88:cb:
d4:12:41:67:07:e9:80:50:95:95:07:af:f3:42:e0:
c9:d4:23:89:17:d8:fd:4e:3b:d9:5d:f3:a6:0c:fc:
31:b4:ea:7e:89:fa:72:5e:6a:35:11:19:fc:f8:f8:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9B:CF:62:0E:7B:BB:14:EA:6A:EC:21:F6:3E:0F:FE:42:B4:7B:9D
X509v3 Authority Key Identifier:
keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5a:d4:4c:04:9e:c0:27:ac:7a:89:9b:07:0a:3a:a2:7b:1d:
7c:d5:0b:24:7e:ca:af:2c:fe:5c:17:2b:a0:91:f7:e2:ff:0f:
de:20:e7:2c:e5:13:63:73:08:32:77:e5:7b:da:30:3a:d6:58:
80:bd:cd:db:ce:3e:bb:e0:3c:84:d0:bf:5f:db:86:32:a2:a8:
de:f7:99:17:ea:dc:22:97:d6:c4:92:f1:90:a0:b7:8b:bf:b0:
1c:8a:b0:3b:03:1c:d8:f4:e6:ff:68:56:40:3a:af:9d:f6:5b:
74:db:aa:c6:96:a5:bf:c9:b3:56:9f:e2:4f:fe:e3:39:0c:32:
0d:2d:94:06:fa:08:9e:c5:a9:1a:38:05:92:d6:74:a6:57:bf:
16:24:12:62:f9:29:fb:f9:bf:a6:05:92:0b:ea:b8:d2:aa:b5:
93:e4:30:54:5e:b0:2c:02:92:6d:7f:51:73:85:78:8e:c6:db:
26:e2:64:fe:2a:4d:8b:53:b2:4c:ca:f1:b9:da:1c:91:90:a9:
dd:43:ca:82:a4:15:28:66:cd:83:b8:0a:18:3a:1e:cc:8e:23:
cd:18:cd:fc:ff:7c:44:b8:e5:1b:d4:d4:58:57:67:ee:60:08:
64:45:7f:78:c3:6c:5b:b0:ed:b2:32:4b:30:67:6c:8d:8b:aa:
b1:12:f9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:57:48 2026 by rpki-client