
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json)
Hash identifier: oclwKjbh65is6hpo4IeqlSoEaha3owpUwFfhhVKDrZY=
Subject key identifier: A8:EA:1B:52:D2:5D:46:94:E5:86:43:77:B7:B2:00:3F:F7:99:D8:D8
Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89
Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
Manifest number: E6
Signing time: Sun 01 Mar 2026 07:42:20 +0000
Manifest this update: Sun 01 Mar 2026 07:42:20 +0000
Manifest next update: Sun 08 Mar 2026 07:42:20 +0000
Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: oqDECqIiMX3yrL4txGhlMet85k2PuBhLo3hv8BIeAmY=)
2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=)
3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl
rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189
Validity
Not Before: Mar 1 07:42:20 2026 GMT
Not After : Mar 8 07:42:20 2026 GMT
Subject: CN=69a3eddc-cc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:d8:22:36:1b:43:c1:ed:14:f0:6d:5b:34:
09:ef:cf:a7:1b:c9:8b:92:24:92:51:c6:d6:4a:cd:
f8:2b:0a:4e:88:bd:45:a6:c0:73:54:39:5b:3e:14:
f7:96:5d:2a:37:e7:e8:51:52:c8:ec:8e:b2:4b:6d:
be:dd:73:2d:21:b2:79:57:b6:86:9f:22:b7:1e:7f:
41:1a:be:d2:78:2a:3b:80:b9:31:d1:42:9d:78:8e:
98:2d:e4:23:3b:da:04:ef:a4:8f:4c:78:b2:e4:2d:
1b:15:3b:59:e1:a9:16:ba:54:ac:27:00:a9:91:9d:
fd:1d:a0:e8:26:3c:c1:44:b0:eb:d7:fb:68:85:82:
60:ce:ce:72:46:b7:d8:4b:1b:06:a3:88:1b:6c:ae:
d8:a7:18:74:83:ce:af:7b:71:90:36:51:1f:fb:de:
17:32:69:59:5d:b1:3c:cb:03:49:7c:96:3a:0f:4c:
9e:78:73:fa:11:cc:86:ee:78:b8:d3:9f:3c:e9:b8:
d1:14:f6:fb:4c:9d:05:15:e0:44:fb:ae:6c:96:52:
34:b5:35:e5:a8:46:3e:7f:67:08:d4:82:6a:cc:11:
7f:c6:51:66:b8:68:b5:7c:c8:5a:6e:0b:7f:3a:04:
8f:1c:f1:fb:c6:d8:04:03:0d:60:bb:4d:77:c9:51:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EA:1B:52:D2:5D:46:94:E5:86:43:77:B7:B2:00:3F:F7:99:D8:D8
X509v3 Authority Key Identifier:
keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:25:57:bb:e0:44:e5:04:57:c8:17:66:57:a5:80:53:74:c1:
35:34:14:5f:83:46:69:29:b1:9c:f8:43:48:cd:05:8f:ff:89:
60:ce:47:69:52:7f:92:15:da:41:b3:48:41:b6:ae:63:5a:4f:
3e:17:11:f0:cf:86:97:65:3a:ae:19:dc:ba:39:31:9d:f7:6a:
20:e6:70:41:3b:4c:38:96:6a:81:79:34:f1:9e:6a:02:86:f5:
86:de:9d:69:81:e5:f5:88:4c:2a:ff:02:c5:f5:fe:94:22:5c:
c8:f1:1c:60:25:40:a1:da:04:29:36:3b:ff:d0:8b:32:74:b8:
2f:bc:b2:8b:3a:dc:30:d8:1e:df:39:d0:c3:39:d9:46:81:eb:
bc:4b:c8:da:fc:a8:8a:46:9f:82:ed:19:e2:41:80:3b:86:75:
2b:2b:ac:d5:ac:c9:21:40:aa:f2:ce:1c:71:5d:ad:4e:06:2f:
6c:0b:07:7b:b6:fe:89:69:db:5e:f1:d9:43:88:75:8c:0b:8c:
5d:0b:35:fd:0e:44:83:21:5d:78:2a:41:2e:13:53:be:67:ba:
cb:82:6a:7c:40:36:e0:68:88:c0:79:15:55:5a:97:a5:8b:fe:
43:1a:8d:89:80:8e:a9:e8:f9:b2:76:4b:37:3a:b5:a7:3f:cc:
87:e4:cd:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw
MTk0REUxODkwHhcNMjYwMzAxMDc0MjIwWhcNMjYwMzA4MDc0MjIwWjAYMRYwFAYD
VQQDEw02OWEzZWRkYy1jYzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr0jYIjYbQ8HtFPBtWzQJ78+nG8mLkiSSUcbWSs34KwpOiL1FpsBzVDlbPhT3
ll0qN+foUVLI7I6yS22+3XMtIbJ5V7aGnyK3Hn9BGr7SeCo7gLkx0UKdeI6YLeQj
O9oE76SPTHiy5C0bFTtZ4akWulSsJwCpkZ39HaDoJjzBRLDr1/tohYJgzs5yRrfY
SxsGo4gbbK7Ypxh0g86ve3GQNlEf+94XMmlZXbE8ywNJfJY6D0yeeHP6EcyG7ni4
05886bjRFPb7TJ0FFeBE+65sllI0tTXlqEY+f2cI1IJqzBF/xlFmuGi1fMhabgt/
OgSPHPH7xtgEAw1gu013yVEP6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjqG1LS
XUaU5YZDd7eyAD/3mdjYMB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2
QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40
WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L
QlRYc09Oak15SmtCbE40WWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdyVXu+BE5QRXyBdmV6WAU3TBNTQUX4NGaSmxnPhDSM0Fj/+JYM5HaVJ/khXa
QbNIQbauY1pPPhcR8M+Gl2U6rhncujkxnfdqIOZwQTtMOJZqgXk08Z5qAob1ht6d
aYHl9YhMKv8CxfX+lCJcyPEcYCVAodoEKTY7/9CLMnS4L7yyizrcMNge3znQwznZ
RoHrvEvI2vyoikafgu0Z4kGAO4Z1Kyus1azJIUCq8s4ccV2tTgYvbAsHe7b+iWnb
XvHZQ4h1jAuMXQs1/Q5EgyFdeCpBLhNTvme6y4JqfEA24GiIwHkVVVqXpYv+QxqN
iYCOqej5snZLNzq1pz/Mh+TNhA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:36 2026 by rpki-client