
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json)
Hash identifier: YXq/KYf2F0LB0m9XDx/MVSNjLEgMAymuuBi1NvoF+fs=
Subject key identifier: C6:16:21:EB:F1:93:6C:B0:1A:2C:3F:62:63:B7:C6:53:0A:1E:29:7F
Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11
Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
Certificate serial: 06F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
Manifest number: 06EC
Signing time: Sat 28 Feb 2026 22:35:39 +0000
Manifest this update: Sat 28 Feb 2026 22:35:38 +0000
Manifest next update: Sat 07 Mar 2026 22:35:38 +0000
Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: fmw/NeGRCgq1slggwzjGvg9pX0PB5RaoT2bV9rjj8B4=)
2: 4863E7886BEA11F0AA50230BC4F9AE02.roa (hash: GcIFK8Guk5Mw4MCQJvhTgzOgqMQrjbwbQ9Fg20gZQJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl
rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781 (0x6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
Validity
Not Before: Feb 28 22:35:38 2026 GMT
Not After : Mar 7 22:35:38 2026 GMT
Subject: CN=69a36dba-91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:bf:93:56:b6:99:21:0c:cb:c9:cf:bc:0e:
b7:e7:56:bc:de:4e:fa:ce:ad:b5:80:d2:60:c1:da:
30:7f:12:d8:db:59:79:a2:4f:9b:a9:ac:c0:51:06:
f7:09:58:a5:a3:59:d9:f9:9c:c4:b4:64:2b:9f:fa:
ea:45:b1:1c:b0:f7:17:78:c5:ba:2b:36:eb:ad:b4:
22:11:93:ef:3c:3b:6c:96:d4:d7:65:7b:69:ba:c7:
4c:f5:a3:98:00:3d:41:67:ad:b1:33:36:31:88:cc:
d3:d8:95:47:f2:3c:77:8b:85:6c:c7:30:4a:ac:11:
10:4d:1e:97:3e:2e:f7:6a:aa:4c:a8:b9:5c:85:03:
31:ed:4a:9d:30:63:f9:aa:54:7a:01:41:c5:20:68:
5b:09:49:30:ef:92:03:35:58:a3:86:e9:6b:e7:87:
a1:ff:cb:bf:e7:70:44:f5:d2:68:a4:7b:aa:f1:74:
66:06:6e:98:b7:5a:c9:e9:20:15:b5:d6:35:6b:16:
41:f8:89:91:9d:6e:7b:4c:79:b3:c1:09:3d:8b:c2:
93:7d:c1:04:f6:ac:4f:26:44:25:fe:45:26:a1:64:
f7:e0:34:f1:42:fe:1b:8d:3b:3c:66:9f:bf:0c:92:
58:bf:fd:4b:f9:ce:c5:bd:00:d6:0c:0d:5c:27:16:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:16:21:EB:F1:93:6C:B0:1A:2C:3F:62:63:B7:C6:53:0A:1E:29:7F
X509v3 Authority Key Identifier:
keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:29:02:0d:ea:6c:f8:22:b4:df:4b:eb:2c:a4:aa:d1:6d:fd:
39:eb:b5:a2:dc:d0:b3:cc:3a:f5:af:d3:06:7f:1e:3e:3c:51:
d0:6e:60:87:ee:d1:50:9c:58:b9:e3:e7:ae:ed:7a:9e:7f:e4:
8b:76:c4:83:6c:34:05:69:0a:89:f1:24:bd:00:74:74:30:a6:
58:72:65:28:8c:4a:e6:12:6a:a4:2e:03:34:d6:16:a0:63:23:
c7:05:eb:5f:2b:96:c6:a6:84:6d:a3:1d:25:09:a4:dd:54:60:
a5:16:85:22:d9:f7:70:8d:6e:a9:ee:4e:fb:7b:57:20:e4:55:
44:8c:aa:d3:50:ba:1b:9a:4d:ef:75:51:e6:32:4a:01:50:f3:
b2:b9:16:b7:d7:8b:71:91:a5:62:2e:d3:9a:3a:66:53:e8:90:
0e:df:88:23:99:dd:a9:24:aa:d1:d7:bd:a9:0e:06:c9:e6:50:
93:db:0e:7f:4f:77:c3:4a:49:8c:84:a7:c0:59:39:59:ce:27:
26:20:a6:49:82:4e:11:ab:9c:2f:69:04:f6:13:c4:08:a1:c6:
be:2d:53:95:39:fe:39:bc:fa:28:97:f0:08:9c:97:b3:f5:b6:
9d:4c:38:b1:92:9a:be:50:7d:6c:57:b5:f7:a8:63:3e:95:e2:
bf:e5:bb:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw
REZEQjM0MTEwHhcNMjYwMjI4MjIzNTM4WhcNMjYwMzA3MjIzNTM4WjAYMRYwFAYD
VQQDDA02OWEzNmRiYS05MWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtyu/k1a2mSEMy8nPvA6351a83k76zq21gNJgwdowfxLY21l5ok+bqazAUQb3
CVilo1nZ+ZzEtGQrn/rqRbEcsPcXeMW6KzbrrbQiEZPvPDtsltTXZXtpusdM9aOY
AD1BZ62xMzYxiMzT2JVH8jx3i4VsxzBKrBEQTR6XPi73aqpMqLlchQMx7UqdMGP5
qlR6AUHFIGhbCUkw75IDNVijhulr54eh/8u/53BE9dJopHuq8XRmBm6Yt1rJ6SAV
tdY1axZB+ImRnW57THmzwQk9i8KTfcEE9qxPJkQl/kUmoWT34DTxQv4bjTs8Zp+/
DJJYv/1L+c7FvQDWDA1cJxYhDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYWIevx
k2ywGiw/YmO3xlMKHil/MB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1
N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv
V08zZThHa01qbFVOX2JOQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcCkCDeps+CK030vrLKSq0W39Oeu1otzQs8w69a/TBn8ePjxR0G5gh+7RUJxY
uePnru16nn/ki3bEg2w0BWkKifEkvQB0dDCmWHJlKIxK5hJqpC4DNNYWoGMjxwXr
XyuWxqaEbaMdJQmk3VRgpRaFItn3cI1uqe5O+3tXIORVRIyq01C6G5pN73VR5jJK
AVDzsrkWt9eLcZGlYi7TmjpmU+iQDt+II5ndqSSq0de9qQ4GyeZQk9sOf093w0pJ
jISnwFk5Wc4nJiCmSYJOEaucL2kE9hPECKHGvi1TlTn+Obz6KJfwCJyXs/W2nUw4
sZKavlB9bFe196hjPpXiv+W7UQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:04 2026 by rpki-client