
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
File: ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json)
Hash identifier: RarJJEeetM6EnpeJ+nIyXdr0BJCo3HNyClX0VrmSP3c=
Subject key identifier: 9B:E3:3D:73:DC:72:E6:91:9F:54:EC:3D:C0:7C:69:CD:39:4C:3F:30
Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
Certificate issuer: /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
Manifest number: 6D
Signing time: Sun 01 Mar 2026 09:17:34 +0000
Manifest this update: Sun 01 Mar 2026 09:17:33 +0000
Manifest next update: Sun 08 Mar 2026 09:17:33 +0000
Files and hashes: 1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: mvAWG3A2xblkkuMohDq/GJBHKHtSF9Pxz91fBh5j/Yo=)
2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: mhTd4sXqZQkM0yZzJxLZu/7dsOvN9ird2NK8A1L8tLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Validity
Not Before: Mar 1 09:17:33 2026 GMT
Not After : Mar 8 09:17:33 2026 GMT
Subject: CN=69a4042d-d227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:03:13:50:57:66:f0:c1:79:e4:7b:63:ae:
c8:30:13:fd:04:f9:bf:8f:0d:b0:30:de:9e:d6:ff:
b1:e5:fb:3b:a9:b1:f7:fc:54:e1:d3:d3:fd:ca:7c:
1e:f9:26:a5:cc:56:a9:dd:29:56:84:ca:02:10:e6:
4e:d8:84:1d:85:d9:32:aa:44:17:ea:b9:51:c3:c8:
81:ae:4b:43:75:78:b4:76:04:c0:81:ac:b1:45:ee:
b5:22:9f:f7:ff:52:5c:86:36:8c:c5:21:87:2b:c9:
e9:11:5c:e9:06:b5:48:c8:2a:42:7d:78:59:98:d1:
69:01:fe:9a:7a:e6:4d:0b:a0:74:6a:f0:4f:95:06:
44:df:87:ae:43:aa:28:29:cb:80:5f:8d:b2:db:ca:
86:eb:15:ec:8c:be:a5:63:33:d8:f1:b7:5b:dd:90:
09:10:bd:c4:40:64:66:5b:db:39:37:93:10:23:4d:
08:f1:6f:12:7a:09:37:71:f7:d2:cd:b6:2f:1d:b6:
6d:c8:ac:25:38:cf:b4:27:13:a8:e9:b5:ca:75:8b:
67:79:b9:ad:6d:a5:18:ca:5e:c4:46:f6:75:72:0c:
c1:b3:9f:1a:50:c6:e8:22:f1:1e:ad:9e:5c:b4:49:
06:cb:72:49:88:15:1d:e7:90:47:96:59:62:60:72:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E3:3D:73:DC:72:E6:91:9F:54:EC:3D:C0:7C:69:CD:39:4C:3F:30
X509v3 Authority Key Identifier:
keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:71:46:92:32:c5:89:6b:5e:38:5b:7f:23:8c:bf:c6:d5:af:
9b:a5:03:61:1e:6b:02:e8:b8:2a:06:42:3d:79:a1:06:31:f7:
11:d4:be:ef:e6:aa:cf:db:cc:07:2c:8b:7c:2f:0f:97:da:58:
8f:96:4a:29:0b:92:bb:6b:5d:56:61:42:93:bf:a7:d8:87:48:
f9:67:6b:55:91:21:52:94:eb:84:f4:10:0e:d6:75:0f:1f:2c:
cf:22:c2:8c:dc:a6:64:4c:05:59:03:a2:61:0a:69:9e:55:8f:
5d:f1:d5:28:6e:0a:c5:29:8d:42:40:66:02:b2:4d:59:cb:34:
62:6d:56:a7:f2:fe:30:37:9e:91:c9:9f:7a:ee:c3:06:a9:85:
1e:b4:eb:c7:c9:5f:73:21:94:5c:a4:b3:33:ef:0a:bf:fc:e5:
0b:68:84:bb:41:b1:61:25:14:cf:9e:53:3c:3b:16:5f:da:04:
f5:80:04:d3:a3:ae:2f:23:57:e6:a9:d3:5d:f2:6c:f4:ae:65:
d2:06:c2:7f:dd:a3:30:f3:cc:7f:94:21:96:58:9b:ae:d5:f0:
11:dc:05:71:5a:1c:c2:86:c4:f1:a3:53:4f:66:39:3d:15:12:
95:88:2f:0c:a4:cd:e8:9a:86:04:f7:18:4b:4d:b3:e9:cc:cc:
55:7a:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:59 2026 by rpki-client