
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
File: 0TPfZxvFk0ayGhHuzAit0MCiCQo.mft (raw, json)
Hash identifier: xZ1MDLgpqFAwOcSE+XHqjmVtvwM/Jy9Crr1iHBu+FfE=
Subject key identifier: B5:50:9C:6D:22:3F:CF:4D:4E:53:36:36:22:39:5F:84:C6:76:CD:01
Authority key identifier: D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
Certificate issuer: /CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Certificate serial: 0839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
Manifest number: 0839
Signing time: Sat 28 Feb 2026 21:12:15 +0000
Manifest this update: Sat 28 Feb 2026 21:12:14 +0000
Manifest next update: Sat 07 Mar 2026 21:12:14 +0000
Files and hashes: 1: 0TPfZxvFk0ayGhHuzAit0MCiCQo.crl (hash: ui+no7C6obv/waJliyCrQZdmqOF+rZn4RQAORvGlJLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl
rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8276, serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Validity
Not Before: Feb 28 21:12:14 2026 GMT
Not After : Mar 7 21:12:14 2026 GMT
Subject: CN=69a35a2f-0b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:c8:e0:60:e6:26:39:b9:2a:ac:81:65:cd:
e5:5f:8a:ae:1f:58:ae:5a:a5:a1:7b:ce:30:0b:46:
86:11:ae:ef:8c:91:78:ec:41:6b:b5:d7:56:b7:ab:
92:c5:00:78:6b:aa:f7:e3:3a:4f:11:bf:fd:8c:18:
f2:17:e8:c6:e3:28:b9:8e:9b:21:0d:11:0c:49:74:
4a:e6:99:69:c9:9d:f1:8b:65:81:d7:83:e1:52:17:
38:51:0d:9c:6d:b3:81:a7:e4:7b:b1:71:ca:6f:17:
21:d5:0b:87:c6:54:8d:7b:1c:29:7f:c4:16:51:16:
37:d7:9a:ee:0f:7d:6e:fc:75:43:c5:d7:5c:e3:87:
99:0e:43:75:9b:dc:da:87:09:4e:0d:8b:11:5f:10:
c5:36:dd:9a:4c:d1:b3:95:58:57:3b:1e:6b:3c:48:
d9:e5:48:73:f9:20:35:92:b6:a2:58:10:cd:6c:e8:
22:a2:40:18:85:b3:c7:98:e4:c5:fc:8c:47:e9:ca:
87:5c:a3:a3:04:1b:ab:80:79:d4:a2:78:09:48:43:
46:49:fa:2d:b3:0f:ee:c3:f8:a1:4d:f4:0e:b7:00:
8d:a3:e2:54:7d:56:ea:46:73:a1:2a:50:f0:08:ba:
02:ff:cd:60:67:63:b4:12:bd:27:46:61:c6:59:c2:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:50:9C:6D:22:3F:CF:4D:4E:53:36:36:22:39:5F:84:C6:76:CD:01
X509v3 Authority Key Identifier:
keyid:D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:65:51:b2:0a:8f:ad:0a:b8:dc:74:41:30:6a:fa:c3:7d:27:
72:c4:55:81:df:11:4e:40:f9:60:d4:b7:8f:8f:bc:01:56:55:
5f:f6:8e:0b:3e:c9:4c:b5:e8:ca:0e:f4:7c:81:63:0b:0e:3a:
35:8a:4d:c3:1b:05:e3:0b:15:22:3a:d4:01:d3:58:62:66:63:
57:b2:ea:28:d5:c8:8d:d8:7d:af:9f:9b:2f:c1:04:6a:bc:7c:
11:88:79:ac:cc:ea:61:cb:3e:a4:a7:14:38:fb:e0:11:92:dd:
0f:3f:61:e7:fb:d0:24:fa:96:43:f8:38:67:38:51:a6:92:d2:
45:59:26:1c:d5:53:69:9f:fd:5d:13:b9:3f:1f:1e:3e:d0:84:
77:ff:aa:b1:01:08:2c:ba:55:99:7d:26:d0:41:75:4e:df:fa:
5b:a2:39:de:01:37:78:9a:2e:da:75:48:69:d4:86:0a:9b:c5:
b0:16:bc:8a:ba:0d:c0:3f:36:e7:a4:63:60:1c:b9:ae:9a:c1:
29:b6:65:ba:48:74:7a:0d:4e:a7:77:c6:6b:b1:50:c3:61:53:
71:37:77:92:93:f5:bf:de:48:ee:d5:6d:70:f7:2e:ab:f5:05:
79:fb:4b:3b:b3:41:61:49:a4:7b:ca:2e:88:3f:51:6b:b4:d5:
cf:bf:25:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgyNzYxMTAvBgNVBAUTKEQxMzNERjY3MUJDNTkzNDZCMjFBMTFFRUNDMDhBREQw
QzBBMjA5MEEwHhcNMjYwMjI4MjExMjE0WhcNMjYwMzA3MjExMjE0WjAYMRYwFAYD
VQQDEw02OWEzNWEyZi0wYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudXI4GDmJjm5KqyBZc3lX4quH1iuWqWhe84wC0aGEa7vjJF47EFrtddWt6uS
xQB4a6r34zpPEb/9jBjyF+jG4yi5jpshDREMSXRK5plpyZ3xi2WB14PhUhc4UQ2c
bbOBp+R7sXHKbxch1QuHxlSNexwpf8QWURY315ruD31u/HVDxddc44eZDkN1m9za
hwlODYsRXxDFNt2aTNGzlVhXOx5rPEjZ5Uhz+SA1kraiWBDNbOgiokAYhbPHmOTF
/IxH6cqHXKOjBBurgHnUongJSENGSfotsw/uw/ihTfQOtwCNo+JUfVbqRnOhKlDw
CLoC/81gZ2O0Er0nRmHGWcKnFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVQnG0i
P89NTlM2NiI5X4TGds0BMB8GA1UdIwQYMBaAFNEz32cbxZNGshoR7swIrdDAogkK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI3Ni84MTM4NzkzRUZF
RjgxMUVBOUQ2NTJBNzRDNEY5QUUwMi8wVFBmWnh2RmswYXlHaEh1ekFpdDBNQ2lD
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBUUGZaeHZGazBheUdoSHV6QWl0ME1DaUNRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODI3Ni84MTM4NzkzRUZFRjgxMUVBOUQ2NTJBNzRDNEY5QUUwMi8wVFBmWnh2Rmsw
YXlHaEh1ekFpdDBNQ2lDUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFWVRsgqPrQq43HRBMGr6w30ncsRVgd8RTkD5YNS3j4+8AVZVX/aOCz7JTLXo
yg70fIFjCw46NYpNwxsF4wsVIjrUAdNYYmZjV7LqKNXIjdh9r5+bL8EEarx8EYh5
rMzqYcs+pKcUOPvgEZLdDz9h5/vQJPqWQ/g4ZzhRppLSRVkmHNVTaZ/9XRO5Px8e
PtCEd/+qsQEILLpVmX0m0EF1Tt/6W6I53gE3eJou2nVIadSGCpvFsBa8iroNwD82
56RjYBy5rprBKbZlukh0eg1Op3fGa7FQw2FTcTd3kpP1v95I7tVtcPcuq/UFeftL
O7NBYUmke8ouiD9Ra7TVz78lEg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:16 2026 by rpki-client