
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
File: 1f9FyAWBJcJy3wRtwLjgb6owT88.mft (raw, json)
Hash identifier: ojcRiIcgpVQYoxmI/OinSrTjQFtrGdkPGsItJdLZORQ=
Subject key identifier: FC:AA:1D:8E:46:B5:EB:12:52:C1:DC:B9:5B:B2:34:F1:BC:1D:78:94
Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
Certificate issuer: /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Certificate serial: 0473
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
Manifest number: 0466
Signing time: Sun 01 Mar 2026 14:22:49 +0000
Manifest this update: Sun 01 Mar 2026 14:22:49 +0000
Manifest next update: Sun 08 Mar 2026 14:22:49 +0000
Files and hashes: 1: 1f9FyAWBJcJy3wRtwLjgb6owT88.crl (hash: sCUl4NNdz3eY2t1jRXaJJOsKgtwnKm5gXo/7E6b4kSo=)
2: 99F51284A1E911EDAD7CE929C4F9AE02.roa (hash: lf68hMOfZ/T65yk1q4mtj4OSXwkBVD1LwcuwEotYLTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl
rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1139 (0x473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7E29, serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Validity
Not Before: Mar 1 14:22:49 2026 GMT
Not After : Mar 8 14:22:49 2026 GMT
Subject: CN=69a44bb9-3dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:7d:7a:6c:7d:c9:79:f0:c8:d0:cb:3c:a0:
c4:67:7e:47:c5:69:5f:c1:76:15:f4:7d:7b:7d:6b:
66:94:90:ed:77:34:7a:1b:bb:e0:16:d8:e5:ec:16:
29:41:0e:2c:81:b6:17:c9:4b:31:6c:68:70:f1:8a:
a1:bb:ce:89:e3:44:7a:04:50:95:b4:f2:e9:7d:19:
06:e3:75:6c:7a:ce:1c:be:13:51:a3:53:a9:b3:87:
71:d5:b5:3e:9d:c0:a0:94:a2:bf:c3:14:37:6d:b1:
74:b4:10:59:fa:f8:95:cd:33:8c:b8:6a:41:d9:4a:
2c:7c:3f:59:e2:21:0d:7e:75:5c:0d:19:af:b3:ac:
2c:0d:5d:6f:1c:bd:a0:f3:3f:39:7e:12:21:70:e9:
02:ee:3b:63:51:a7:6a:e0:d7:64:f5:7e:a4:d4:aa:
c5:48:3b:cf:ec:60:69:9a:73:c8:fb:9c:d7:30:91:
f5:cd:ac:ae:9b:65:ce:00:9b:2a:a6:7a:a1:51:1a:
9a:b6:cc:08:7d:6f:11:29:21:36:c3:49:de:c6:1f:
0b:0a:38:0b:a2:62:a0:87:19:2c:8f:65:04:a6:c1:
a3:c3:80:1e:17:c3:a4:57:75:91:8e:df:73:35:f4:
b3:17:31:e3:fe:a0:cf:e0:05:ac:63:7a:b6:c7:d7:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AA:1D:8E:46:B5:EB:12:52:C1:DC:B9:5B:B2:34:F1:BC:1D:78:94
X509v3 Authority Key Identifier:
keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:39:82:33:22:f5:f9:82:af:3f:7d:f7:4a:d6:e6:70:2f:c6:
65:56:01:9e:0f:5e:b5:6c:b7:b5:a0:10:47:ad:75:d1:25:32:
22:8a:9c:b7:bf:dd:9a:9a:7a:68:e8:56:7c:46:96:9c:3f:5a:
97:53:fe:a0:ec:d9:d1:a8:66:3d:ac:55:60:d9:1d:e8:74:23:
f3:e2:e5:a7:2c:7d:65:59:4b:fb:5b:99:94:93:f3:49:12:b8:
15:65:ec:1e:83:d7:ab:32:1f:45:76:32:46:b5:ec:e5:1b:3b:
fe:a9:b2:7f:69:0d:af:49:bb:9c:1b:a3:55:ae:9b:d6:b2:a4:
12:42:c5:19:64:39:8b:bc:63:15:ba:9e:1a:2a:03:ef:f5:a0:
5f:f2:a6:60:a2:e4:40:50:ee:84:03:a5:88:34:a1:26:b5:39:
45:4a:3a:4b:38:24:6b:93:78:e2:44:19:91:ed:e1:11:41:de:
d8:11:25:fe:e2:bd:d7:76:3b:37:ab:e5:9d:62:d8:b3:c1:12:
0f:93:42:6c:e0:bc:ae:59:64:ae:3f:f9:0b:34:0e:71:3d:9f:
fe:e1:49:52:85:be:47:7e:d9:7e:44:d6:4d:a0:c7:e5:40:e2:
bb:ff:57:42:9e:8b:81:33:7e:ca:2c:51:84:64:7b:70:a4:f6:
b6:ce:a5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:19 2026 by rpki-client