
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json)
Hash identifier: 8qzH23x5eDaLVKXnKGO8jjzui26PCjzZxwELLktEf3g=
Subject key identifier: D4:86:77:5A:E3:F0:AB:DE:51:E7:02:9C:91:8E:0C:04:43:7E:C5:B9
Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8
Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
Certificate serial: 0667
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
Manifest number: 0660
Signing time: Sun 01 Mar 2026 23:53:43 +0000
Manifest this update: Sun 01 Mar 2026 23:53:39 +0000
Manifest next update: Sun 08 Mar 2026 23:53:39 +0000
Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: IdMKIvTc6lXmNYSGn0OLTeTKdFrWjqjIt0fjhfVh72k=)
2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: y/Z27vWa+YdbKdTa4SvdGhrr8xeEuHl0bs5oHTVC4x0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl
rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
Validity
Not Before: Mar 1 23:53:39 2026 GMT
Not After : Mar 8 23:53:39 2026 GMT
Subject: CN=69a4d186-c78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:60:d2:08:c5:6c:09:66:ef:16:fc:5b:b5:
ae:0f:c2:84:3f:51:9f:e5:f1:4c:72:ca:5a:10:72:
1f:96:54:1a:01:cb:e9:1a:34:30:df:a4:af:ff:58:
84:b6:a1:6c:90:80:0d:f2:1f:90:85:c4:2e:bb:d0:
57:55:37:22:08:2a:27:a4:8b:ad:bb:df:0c:ec:1e:
fe:7e:e3:32:f0:95:a8:cd:3d:3e:c6:6e:d6:a8:64:
0d:2f:14:b6:79:de:05:b0:d1:e5:7c:b3:47:82:bf:
0e:6b:64:9e:d5:3c:2e:05:93:86:39:7a:ad:46:e0:
9f:1a:e2:14:37:30:e4:dc:3d:57:c1:5d:36:ab:6f:
12:95:a5:e3:0f:24:23:5a:5f:60:11:fe:29:37:e6:
a0:01:7c:02:be:2b:56:85:20:05:af:7d:a3:8d:c2:
45:9e:41:17:5e:01:f4:8c:77:3f:e7:d7:05:06:7c:
37:0f:e5:2d:1c:82:58:6e:15:0b:00:69:be:5d:59:
ed:3c:75:6a:03:0c:3e:e5:ae:ba:9c:0c:ab:b2:a6:
5f:00:f5:e2:85:02:03:bb:63:5f:9a:a6:ff:63:5f:
12:13:b0:6d:b2:6e:f8:a4:f3:77:50:49:cd:24:e4:
37:65:38:e5:2c:80:e9:ed:9d:f5:6d:06:2e:4d:94:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:86:77:5A:E3:F0:AB:DE:51:E7:02:9C:91:8E:0C:04:43:7E:C5:B9
X509v3 Authority Key Identifier:
keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:4f:38:38:ff:a2:1a:61:49:a7:7c:9f:eb:f1:71:05:60:f7:
a3:21:15:40:94:fe:c9:d6:8a:64:28:a8:09:27:b8:03:f3:40:
4c:6e:87:97:21:a8:39:e4:15:cc:d7:46:13:b2:a5:93:e3:f7:
d0:e2:98:ca:57:b7:75:fc:58:69:04:a3:7b:20:13:63:ab:3b:
3e:91:57:b4:46:cd:b3:45:80:b6:76:24:36:fb:9a:d5:61:53:
a3:68:2b:d6:89:05:8d:53:92:5c:92:37:98:8a:85:86:8d:04:
1f:61:ef:8f:91:91:5b:25:d9:3b:7b:2a:ec:77:8c:81:f6:1b:
9d:f3:d7:c2:75:1a:57:b6:ce:27:98:30:ac:ca:91:52:6d:d6:
11:c8:77:77:e9:f7:63:e8:03:9d:87:66:b9:a8:c0:12:4c:4e:
cf:63:e9:2c:9f:76:1e:48:3e:d1:de:71:86:aa:52:aa:95:5d:
0f:57:f3:b3:2a:ed:0b:f3:22:22:37:0d:07:61:e9:45:d7:cd:
0f:6d:93:de:ff:cf:9b:2c:88:4f:05:ac:43:a5:1a:b5:15:87:
a3:94:fb:a0:d2:a2:fb:44:3c:e4:80:fd:42:63:05:fa:0d:04:
64:be:cf:ea:f9:8a:df:a6:ff:57:ab:69:a7:55:ce:c4:bd:4d:
fd:5a:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:41 2026 by rpki-client