
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier: VAyL7qluVbNjzIjezE3TV4RjT1CrsgRn2cYpmS82r+w=
Subject key identifier: 51:6B:62:12:39:58:23:16:3C:B1:53:38:72:8E:69:DE:61:10:C1:86
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number: F1
Signing time: Sun 01 Mar 2026 23:53:32 +0000
Manifest this update: Sun 01 Mar 2026 23:53:30 +0000
Manifest next update: Sun 08 Mar 2026 23:53:30 +0000
Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: 8Qm9SHIprEH+2w+5wwgV+rzfZGYC/m+iP0wlT6RBr6I=)
2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: ASL8/2HCWAJCmthowgFWIUdkitcmGIEB/XyIsZpt42w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Validity
Not Before: Mar 1 23:53:30 2026 GMT
Not After : Mar 8 23:53:30 2026 GMT
Subject: CN=69a4d17b-f27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:5e:33:1f:c6:8a:6c:e0:70:d3:7f:40:17:
e5:1f:f7:e5:50:d4:71:07:e3:80:c8:78:bf:d6:ca:
f0:3a:a6:a2:e1:34:1e:5e:a1:35:54:f4:5f:12:1a:
67:66:2a:b6:61:56:a1:8f:5b:c7:91:55:da:ad:e8:
e7:27:72:ee:60:e6:28:59:6b:e4:a9:7d:9f:13:6f:
1e:5a:eb:14:d4:fa:c0:2e:bd:21:ff:74:63:08:02:
ed:7a:82:5d:e3:6a:87:c3:46:5b:f8:00:8e:51:75:
1a:5b:86:2a:ac:d4:f5:51:ea:5d:46:75:9c:35:c0:
7c:af:19:32:24:7e:e7:66:c6:87:73:e0:aa:e5:2c:
af:aa:f6:54:d9:f4:71:54:00:ac:4a:a4:e8:f5:35:
18:7e:f0:40:27:38:8f:32:ee:f8:9a:18:61:b9:ec:
ff:21:76:6b:18:10:1d:b8:1b:f3:ea:4a:a1:ab:d0:
4c:85:fb:6b:cf:ce:f4:f1:16:5e:cd:3c:70:97:88:
1b:b8:69:a6:65:eb:9c:8e:31:a1:85:ab:5d:03:9c:
72:06:f6:df:76:73:4d:98:d1:7e:34:1f:91:8a:c5:
19:4d:bb:fc:99:c9:4b:57:7f:65:aa:5e:f9:c5:e2:
4c:05:cc:95:0e:af:56:3c:8d:98:cb:a7:2c:c0:d5:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6B:62:12:39:58:23:16:3C:B1:53:38:72:8E:69:DE:61:10:C1:86
X509v3 Authority Key Identifier:
keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:68:46:e0:5a:ad:ed:02:33:2f:75:53:cf:2e:de:13:38:b4:
b1:ad:b7:21:c2:f2:34:84:ce:60:7a:fc:71:15:97:8e:50:90:
27:92:90:5a:d8:6a:1c:4a:eb:a8:29:ac:1b:1e:c5:f7:ed:4c:
95:f1:e3:4d:5e:d8:fb:97:28:36:d1:71:72:28:40:de:b7:a2:
d7:c3:83:dc:b8:38:51:be:f5:c0:54:60:6c:e4:ca:b8:1e:e0:
a3:20:b4:92:7b:fe:65:92:86:3f:2d:47:f9:22:5a:4e:86:22:
f0:2c:57:7a:81:83:73:21:22:a4:53:d1:d1:ff:09:d5:4d:52:
d9:bd:7a:a6:77:09:ea:a2:ed:af:e5:e0:51:7b:8a:65:96:c9:
b2:31:6a:64:ba:5f:46:1e:94:60:c6:08:0b:ca:50:ac:78:15:
3a:5b:97:ad:7c:c6:93:d0:db:61:3e:5a:0c:29:34:ff:97:79:
52:11:30:0b:34:5d:2a:e7:15:72:91:fb:10:64:28:c0:1c:bf:
3b:73:d4:e5:ff:82:94:d3:2a:39:b4:66:52:b1:83:5f:79:1e:
8e:6d:75:dc:20:c3:2f:0c:f8:3a:48:a0:e0:40:2f:47:51:75:
39:0a:df:cb:f8:14:5d:28:87:f9:15:cd:2e:dc:86:6e:df:b6:
2f:6b:b5:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZGMkQxMTAvBgNVBAUTKEFGNjcyREE4QzVEMUQ2QzgwRDUwNjE3OEM5RTdDQjc0
NEY2RTM4RTYwHhcNMjYwMzAxMjM1MzMwWhcNMjYwMzA4MjM1MzMwWjAYMRYwFAYD
VQQDEw02OWE0ZDE3Yi1mMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbNeMx/GimzgcNN/QBflH/flUNRxB+OAyHi/1srwOqai4TQeXqE1VPRfEhpn
Ziq2YVahj1vHkVXarejnJ3LuYOYoWWvkqX2fE28eWusU1PrALr0h/3RjCALteoJd
42qHw0Zb+ACOUXUaW4YqrNT1UepdRnWcNcB8rxkyJH7nZsaHc+Cq5SyvqvZU2fRx
VACsSqTo9TUYfvBAJziPMu74mhhhuez/IXZrGBAduBvz6kqhq9BMhftrz8708RZe
zTxwl4gbuGmmZeucjjGhhatdA5xyBvbfdnNNmNF+NB+RisUZTbv8mclLV39lql75
xeJMBcyVDq9WPI2Yy6cswNUYAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFFrYhI5
WCMWPLFTOHKOad5hEMGGMB8GA1UdIwQYMBaAFK9nLajF0dbIDVBheMnny3RPbjjm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC82RjgyMTE3OEFC
ODgxMUVGODBDNzVBNzRDNEY5QUUwMi9yMmN0cU1YUjFzZ05VR0Y0eWVmTGRFOXVP
T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3IyY3RxTVhSMXNnTlVHRjR5ZWZMZEU5dU9PWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkYyRC82RjgyMTE3OEFCODgxMUVGODBDNzVBNzRDNEY5QUUwMi9yMmN0cU1YUjFz
Z05VR0Y0eWVmTGRFOXVPT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEmhG4Fqt7QIzL3VTzy7eEzi0sa23IcLyNITOYHr8cRWXjlCQJ5KQWthqHErr
qCmsGx7F9+1MlfHjTV7Y+5coNtFxcihA3rei18OD3Lg4Ub71wFRgbOTKuB7goyC0
knv+ZZKGPy1H+SJaToYi8CxXeoGDcyEipFPR0f8J1U1S2b16pncJ6qLtr+XgUXuK
ZZbJsjFqZLpfRh6UYMYIC8pQrHgVOluXrXzGk9DbYT5aDCk0/5d5UhEwCzRdKucV
cpH7EGQowBy/O3PU5f+ClNMqObRmUrGDX3kejm113CDDLwz4Okig4EAvR1F1OQrf
y/gUXSiH+RXNLtyGbt+2L2u1sg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:16 2026 by rpki-client