
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
File: PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json)
Hash identifier: rimIkYw6++XNOncb/1suNgGwBjPyeuWZdHJAdXqe8T8=
Subject key identifier: 05:9D:27:A3:30:FE:BA:64:7A:AA:BC:BB:8F:45:47:A9:C8:7F:98:41
Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Certificate serial: 0C8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
Manifest number: 0C85
Signing time: Sat 28 Feb 2026 18:44:01 +0000
Manifest this update: Sat 28 Feb 2026 18:44:01 +0000
Manifest next update: Sat 07 Mar 2026 18:44:01 +0000
Files and hashes: 1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: t3kASpbpMlfi0xHBcwr0tIjsaVoN6Nlm0beUqawkCRs=)
2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: vvKMpwTeyHLp3KookAGl2dqqkQVnCPsxuoWP/y9TOdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3214 (0xc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Validity
Not Before: Feb 28 18:44:01 2026 GMT
Not After : Mar 7 18:44:01 2026 GMT
Subject: CN=69a33771-dda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:8e:db:1c:7e:fd:07:9b:6d:a2:b3:77:28:
dd:b1:12:09:15:2e:b9:b7:1e:c3:2b:b9:ff:4f:c4:
b5:a7:25:09:78:9e:39:8b:76:1c:d2:fc:a8:a0:7d:
ce:1a:c3:2a:72:9a:39:d7:16:82:06:90:e5:09:76:
b2:4b:10:cc:7d:b2:bc:31:59:9d:9f:1d:84:92:c2:
5a:15:da:5d:6d:97:1b:a4:e4:57:81:33:1e:37:ae:
c5:dd:c9:05:26:41:f4:05:0f:3c:a4:aa:e1:50:97:
a2:d9:9b:ba:f5:1e:7d:06:e4:08:e8:47:ba:16:2f:
c4:c5:c0:8e:95:a9:53:2b:ab:57:03:d7:11:9a:24:
94:01:a8:9a:e7:16:3d:2a:fe:49:3a:a6:49:d2:19:
02:41:8f:7d:00:6f:df:67:0c:2b:fe:49:18:b8:91:
3c:5c:72:ab:74:db:ba:ea:f4:a6:22:85:14:83:7f:
a7:f7:f3:ce:78:dc:a0:5e:08:21:14:ee:22:f3:24:
bc:f3:25:8e:d1:e5:2c:01:98:7b:2d:ff:0b:f0:d2:
89:fd:e0:3c:6e:57:e2:34:a7:ac:d2:7e:72:86:31:
a8:67:fa:9e:a2:eb:75:28:93:92:cf:fe:ba:25:e3:
b5:4c:e5:df:a0:b7:87:58:94:b7:97:e4:ed:71:04:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9D:27:A3:30:FE:BA:64:7A:AA:BC:BB:8F:45:47:A9:C8:7F:98:41
X509v3 Authority Key Identifier:
keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:60:c8:1a:e2:df:1b:34:f2:17:70:38:e0:3e:54:01:97:
5f:16:0f:13:4e:bf:c9:50:8b:70:c2:b4:d7:12:7b:e4:32:d5:
68:d1:2c:2d:7d:8e:04:4e:9f:fe:9b:87:bf:71:aa:d7:d4:cb:
27:34:8e:07:3e:db:89:37:0e:bf:f5:9d:fe:af:b0:3a:61:a4:
82:ce:87:4e:d2:36:48:cb:37:d1:7a:c9:b1:4a:3f:77:c3:4a:
79:a0:ed:ee:55:05:80:7d:96:33:ca:0a:ca:50:98:04:de:1a:
71:bf:d2:ff:8c:9a:4d:fe:07:1a:cb:97:01:d6:81:0e:eb:58:
1b:55:62:5f:00:c0:7b:b8:bb:0a:fe:c2:99:30:de:e1:87:b6:
58:16:38:1e:cc:16:5a:a8:49:e1:83:44:98:7d:84:6b:49:06:
0c:a1:71:5f:0f:a0:e3:ae:b9:de:81:b3:da:03:d7:38:22:82:
a9:0b:6c:20:8c:3e:f4:13:58:d0:27:2d:98:7a:18:82:29:f2:
eb:e2:2f:96:9b:5f:63:83:8e:aa:f2:11:4b:21:62:8c:a3:9a:
44:5b:61:c2:2a:22:32:80:bb:53:3d:ef:cb:f8:27:67:0d:d5:
e8:2d:74:9d:7a:4b:10:14:8e:b4:da:ba:3f:ef:f5:d9:10:6a:
e0:17:7e:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5
OEExMjExM0YwHhcNMjYwMjI4MTg0NDAxWhcNMjYwMzA3MTg0NDAxWjAYMRYwFAYD
VQQDDA02OWEzMzc3MS1kZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvAiO2xx+/QebbaKzdyjdsRIJFS65tx7DK7n/T8S1pyUJeJ45i3Yc0vyooH3O
GsMqcpo51xaCBpDlCXaySxDMfbK8MVmdnx2EksJaFdpdbZcbpORXgTMeN67F3ckF
JkH0BQ88pKrhUJei2Zu69R59BuQI6Ee6Fi/ExcCOlalTK6tXA9cRmiSUAaia5xY9
Kv5JOqZJ0hkCQY99AG/fZwwr/kkYuJE8XHKrdNu66vSmIoUUg3+n9/POeNygXggh
FO4i8yS88yWO0eUsAZh7Lf8L8NKJ/eA8blfiNKes0n5yhjGoZ/qeout1KJOSz/66
JeO1TOXfoLeHWJS3l+TtcQRoiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWdJ6Mw
/rpkeqq8u49FR6nIf5hBMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz
RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkJGNS85RDBCNDIyMjEzRjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3
dkNvUVlUQ0plZmVZb1NFVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMmlgyBri3xs08hdwOOA+VAGXXxYPE06/yVCLcMK01xJ75DLVaNEsLX2OBE6f
/puHv3Gq19TLJzSOBz7biTcOv/Wd/q+wOmGkgs6HTtI2SMs30XrJsUo/d8NKeaDt
7lUFgH2WM8oKylCYBN4acb/S/4yaTf4HGsuXAdaBDutYG1ViXwDAe7i7Cv7CmTDe
4Ye2WBY4HswWWqhJ4YNEmH2Ea0kGDKFxXw+g46653oGz2gPXOCKCqQtsIIw+9BNY
0CctmHoYginy6+IvlptfY4OOqvIRSyFijKOaRFthwioiMoC7Uz3vy/gnZw3V6C10
nXpLEBSOtNq6P+/12RBq4Bd+LA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:04 2026 by rpki-client