
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json)
Hash identifier: z8q2CPWtUiHH42SFvzAMxAxaFzlSmDZeZTFF6naVd0g=
Subject key identifier: 14:5E:CB:97:05:59:B2:67:A0:0D:E5:FB:89:0B:CF:68:D5:F8:7A:3A
Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Certificate serial: 0265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
Manifest number: 0260
Signing time: Sun 01 Mar 2026 02:47:50 +0000
Manifest this update: Sun 01 Mar 2026 02:47:50 +0000
Manifest next update: Sun 08 Mar 2026 02:47:50 +0000
Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: SpUeulNipZ8b5tnJj+fD5Jmzv+aGTBurdXORiMjclDM=)
2: 203FA37E750611ED95126872C4F9AE02.roa (hash: fm9S9mNo6Y2ygfq7yhWG4UNmDV8piD8pCbOO7u7749k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Validity
Not Before: Mar 1 02:47:50 2026 GMT
Not After : Mar 8 02:47:50 2026 GMT
Subject: CN=69a3a8d6-0973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:61:ec:4f:06:62:93:4b:80:21:90:c2:8d:
eb:32:52:b9:13:ce:6a:0c:4d:85:88:be:33:e5:6b:
a8:67:90:48:27:87:de:87:ad:89:b0:c2:0a:46:0f:
7a:c4:44:df:0e:9e:df:71:0a:92:14:c0:e8:0d:7e:
6b:c0:a6:bf:d9:6e:ac:25:91:85:a4:50:3a:1a:17:
2e:8c:33:af:2d:df:6c:71:1d:dd:80:70:22:59:65:
4c:6a:7b:14:fc:b6:06:82:3f:35:91:4a:19:fe:e2:
9d:48:b5:3c:5a:7d:c9:4e:a9:1d:6a:cc:06:de:69:
16:21:da:d9:78:90:58:79:dc:51:3c:ab:84:a8:bc:
2f:6d:ab:7d:68:80:59:e3:cd:bd:ef:ac:b8:97:50:
77:d0:59:bd:75:88:1b:d2:fa:a4:be:60:dd:de:ba:
65:96:b3:ba:cc:62:72:f4:28:b7:b7:79:98:8f:1e:
80:d3:73:8a:e1:34:c9:64:66:e7:d1:35:69:0e:e1:
08:22:b9:a2:fb:f8:4a:3c:81:d6:1d:46:41:52:5d:
7c:ef:75:b8:c6:22:1b:f0:e1:b5:81:31:b4:c9:71:
43:b8:fd:f0:4d:40:f1:0d:36:4f:d5:fa:6e:0d:f5:
a8:68:da:09:0a:a3:9c:5f:98:98:9e:e8:c4:a5:a1:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5E:CB:97:05:59:B2:67:A0:0D:E5:FB:89:0B:CF:68:D5:F8:7A:3A
X509v3 Authority Key Identifier:
keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:24:4e:16:c8:a9:a0:d8:25:1c:f3:c0:50:7f:5c:b9:12:5b:
13:b1:58:e0:25:32:b9:bf:7f:53:11:5e:92:f1:0d:38:df:09:
71:18:64:3a:b2:2b:28:d0:26:76:d8:47:3f:12:c4:ea:c3:58:
91:4b:48:16:36:2f:25:10:01:9e:7d:fc:14:7a:a9:30:4f:3a:
4e:6e:1c:04:81:bd:46:a5:30:10:0c:e8:f0:e8:63:f2:e4:3d:
76:f1:ce:0d:ab:3d:f7:d4:b0:6c:85:4c:b2:32:7e:c0:a2:4d:
73:8f:f2:34:2d:6e:62:83:76:12:d4:cd:eb:75:e6:95:f6:f3:
2f:03:22:12:5d:0f:35:50:3b:3c:2b:04:ae:45:59:7e:41:9c:
c0:a8:fd:c1:c8:ec:55:ce:78:96:e1:23:b5:03:81:82:6e:3e:
37:02:fb:d7:4e:4f:29:95:47:24:e5:c2:a5:d0:8a:65:57:c3:
d3:30:bb:7e:27:6e:13:e4:a1:d7:96:9e:fa:4f:47:d4:4a:b9:
5c:c1:35:6b:0f:53:b2:ed:08:50:ae:92:5d:61:7b:41:08:2d:
75:d1:1f:a0:8e:2e:fa:36:5a:b0:23:3e:65:dc:d8:e7:bd:9f:
01:0c:05:db:14:93:d5:51:c9:42:99:7b:43:48:50:f1:b5:93:
76:53:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:03 2026 by rpki-client