
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json)
Hash identifier: XGaPpGZmfGGOnoP45gZLT4b7jr4HkJbDmNwbSUQVccU=
Subject key identifier: 3D:74:76:AD:8B:EC:70:AB:83:CD:E2:CD:26:B1:29:5A:08:5B:42:89
Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Certificate serial: 0929
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
Manifest number: 091C
Signing time: Mon 02 Mar 2026 01:12:50 +0000
Manifest this update: Mon 02 Mar 2026 01:12:49 +0000
Manifest next update: Mon 09 Mar 2026 01:12:49 +0000
Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: yuLK+naztrVgfYPe42irH8HAd7fn6445NGtO/ZbrNWE=)
2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: zpylNEe89CbqVMFt1Qej/SgQec1Qy8+/AmkFsaHZ4JI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Validity
Not Before: Mar 2 01:12:49 2026 GMT
Not After : Mar 9 01:12:49 2026 GMT
Subject: CN=69a4e412-3a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:40:ec:cf:74:a2:99:a5:93:70:ac:e4:2c:
77:ed:76:10:14:d7:5f:7b:fc:c9:2f:20:0b:69:9c:
76:e4:db:32:31:34:9b:07:80:2c:cf:c7:6c:60:5f:
6b:28:7a:09:9b:75:cb:7c:09:a1:74:72:be:b6:a5:
bb:2a:a1:e1:b5:57:df:79:c5:51:37:72:9e:6b:92:
bb:0a:84:04:c4:76:d5:82:b4:27:09:2c:e4:18:96:
1c:9f:8b:41:85:c3:02:c7:95:53:5d:37:1e:db:5d:
2d:f4:78:a1:7a:9f:dc:c1:55:5a:97:09:92:ed:24:
94:9f:cc:f1:f6:14:04:95:94:1b:95:27:e5:dc:e5:
37:4a:8e:c8:52:15:a5:44:63:46:a2:a3:87:16:76:
5f:06:00:3e:4b:48:6f:c2:88:14:3e:65:46:81:9f:
a4:dd:42:47:89:2d:4f:7f:8b:81:5f:68:88:f3:27:
e8:03:52:4d:20:c3:e2:4e:74:d7:54:f1:8f:ac:ee:
e2:88:91:ff:74:2b:40:74:28:93:2d:e0:38:74:f3:
c0:c5:dc:7e:21:3e:d5:1f:03:4b:27:41:d8:3f:ac:
56:71:26:08:60:1a:0f:b4:34:64:f3:db:3b:04:59:
85:1a:b5:a8:b6:21:5e:2d:e5:0f:d6:f6:99:4a:1c:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:74:76:AD:8B:EC:70:AB:83:CD:E2:CD:26:B1:29:5A:08:5B:42:89
X509v3 Authority Key Identifier:
keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:05:51:24:f7:43:45:fe:12:2a:43:b9:ec:d2:fd:66:ff:e9:
51:a6:42:5f:94:ac:9c:e6:f4:63:74:76:82:55:98:2f:88:05:
93:06:0f:84:6a:f3:f1:87:54:d5:e9:7a:37:56:85:32:d0:84:
f1:e5:88:fd:88:c7:64:76:a3:fe:5c:a1:10:1e:8f:8f:98:ef:
68:51:71:e2:8f:cf:ba:68:f7:cb:3b:16:0a:65:df:5f:cd:50:
7c:e8:d7:8d:c5:c6:6e:fa:96:58:f9:70:9a:d8:e7:3a:82:9c:
d1:79:83:32:88:3e:0f:61:87:3a:f3:c9:da:64:79:53:d8:99:
43:a2:ca:7b:c1:06:0b:aa:e8:ab:0f:9e:5d:3a:27:41:66:08:
a6:52:10:ab:ac:92:e2:89:0f:f8:0c:62:8c:ca:34:2e:9a:64:
f3:f0:04:f5:92:c2:52:b4:44:e3:06:77:c5:24:3c:25:cb:81:
97:d5:9b:e5:ef:04:26:57:b4:1c:89:16:b2:b1:90:17:2b:24:
8e:12:70:59:05:48:5a:b8:89:4b:6c:68:69:c0:c2:4e:f6:04:
4e:04:7e:4d:da:3c:1f:71:ae:ca:64:25:da:0f:c9:40:56:48:
d1:61:2c:d4:68:db:d2:5c:da:fc:73:d1:b9:e6:44:ed:b3:88:
41:84:a9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:37 2026 by rpki-client