
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json)
Hash identifier: IBzRhIvGmCaSV5Tf0eIps59Hvcz/TjlGrH/weOv9TOo=
Subject key identifier: DB:FB:F1:E4:FE:3D:F4:1A:9B:1A:99:13:A4:90:C8:C0:1A:93:08:72
Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49
Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
Certificate serial: 0D37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
Manifest number: 0D2C
Signing time: Mon 02 Mar 2026 01:04:38 +0000
Manifest this update: Mon 02 Mar 2026 01:04:37 +0000
Manifest next update: Mon 09 Mar 2026 01:04:37 +0000
Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: g9wutYkenYDkXwxSETDnMGuy42Hz5orZ5OdJ+wrKjzA=)
2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: Ffz0/550gPeWO1uoSNPGxqvr0nsdzbXHysPRag2LkXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl
rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3383 (0xd37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
Validity
Not Before: Mar 2 01:04:37 2026 GMT
Not After : Mar 9 01:04:37 2026 GMT
Subject: CN=69a4e226-c585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:80:f2:f5:d0:ca:28:94:ae:ff:1e:1f:4c:
2a:79:21:20:11:b4:ae:05:ae:53:c3:15:65:b2:a8:
a2:b5:f8:d2:98:39:db:77:c2:70:6b:f8:5a:25:87:
34:44:16:4c:82:13:4b:70:88:18:db:bf:a6:40:b3:
fc:04:c7:4b:63:a6:e6:71:c9:13:89:c3:0f:b3:6a:
89:35:8d:b1:a2:7e:49:b2:69:f7:ef:3a:80:e5:08:
2c:df:6a:1b:72:ac:1d:e4:61:da:17:92:19:41:a9:
89:3e:06:25:63:68:26:e8:da:33:e0:fc:fe:c1:8a:
d5:6d:b4:98:b2:d0:29:ae:84:93:d6:d2:fa:50:4b:
2b:4a:db:94:a7:30:fd:00:b0:6e:88:f6:f9:84:2a:
ed:53:a0:bc:83:e4:9f:a4:d8:a1:f8:fd:66:83:61:
c5:53:53:37:96:c2:91:ee:d6:fa:9e:ef:b1:72:ca:
9c:99:10:ac:01:93:94:5d:03:9b:a5:8a:04:ad:77:
f4:99:c9:4e:64:08:8c:4f:fd:34:66:1b:27:fc:85:
09:21:ad:7b:15:77:0a:ec:dc:67:16:2f:24:44:07:
67:55:39:04:21:13:b7:6d:b0:3e:0c:75:9a:28:0f:
20:49:5f:5c:e2:32:86:22:0b:fb:31:34:e3:2c:7f:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FB:F1:E4:FE:3D:F4:1A:9B:1A:99:13:A4:90:C8:C0:1A:93:08:72
X509v3 Authority Key Identifier:
keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:49:c1:04:bf:b8:ff:a9:07:53:1a:ce:38:ed:d0:67:bc:01:
b4:a6:0c:9f:88:73:26:17:79:d1:4c:ad:b1:3f:df:d7:5a:e0:
7d:58:1d:fc:ef:85:82:ec:a2:34:30:42:22:bc:87:97:11:b4:
83:10:99:a7:52:8e:c5:6e:92:f1:2c:7e:d9:fa:4d:d9:cf:5f:
73:87:81:68:73:75:92:63:73:5b:3d:ac:26:c5:28:b1:d5:6f:
be:c3:2a:1c:97:36:c0:96:13:c6:2b:86:ff:08:36:7d:18:e6:
19:77:55:a2:42:3d:9f:c6:ff:ee:f9:38:03:bf:81:2c:10:74:
46:1c:f8:e8:15:e0:1e:f2:fd:b8:8a:c3:90:a7:e0:9d:f1:3a:
03:f8:28:3f:42:5d:4f:ce:ed:f2:98:b4:30:9c:7d:32:59:10:
bb:a1:8d:91:cf:e7:85:5c:bb:e3:a1:c9:72:58:92:06:dc:d4:
62:df:65:62:d3:f8:5d:5c:00:11:c9:1e:0b:18:fe:43:d1:60:
22:da:e1:0a:8b:dd:2c:2b:ff:6e:73:95:e7:7b:0d:ce:ac:cc:
89:ea:18:03:5f:36:9f:f3:32:84:77:8d:30:2d:15:fe:d5:5b:
9b:8e:0c:27:79:30:9d:fb:36:1a:50:b9:32:09:4a:98:2e:34:
67:4d:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:36 2026 by rpki-client