
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
File: XRhbcS2TBWvydLi3qJjGklTruYM.mft (raw, json)
Hash identifier: AJQjOf8tBGPBEP8DboI7BwxwfpTMbw8Kp/bWAENibkE=
Subject key identifier: 5A:6B:13:6C:CD:BC:A2:D3:99:3A:60:56:93:EF:82:E8:00:FF:9B:95
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Certificate issuer: /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
Manifest number: 01B1
Signing time: Sun 01 Mar 2026 05:24:19 +0000
Manifest this update: Sun 01 Mar 2026 05:24:18 +0000
Manifest next update: Sun 08 Mar 2026 05:24:18 +0000
Files and hashes: 1: XRhbcS2TBWvydLi3qJjGklTruYM.crl (hash: z3lnBcs8igH3l36D6v4F0zzwiMC/rsGQpg9yLQub0mE=)
2: 749BAA209BC911F0B2979527C4F9AE02.roa (hash: C9Jv/Uq2OB5j76pUfpVUgNkJDsXVeicuF4bcmmtVO0Y=)
3: DCCEA912A3EB11EE8049E335C4F9AE02.roa (hash: y+HCWWMgID9/86zt/KUjxdKSJOKDq2B9HJoVNSYH0wM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE972, serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Validity
Not Before: Mar 1 05:24:18 2026 GMT
Not After : Mar 8 05:24:18 2026 GMT
Subject: CN=69a3cd83-297e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:fb:3d:d7:bd:b7:7e:4f:48:40:1f:85:e2:
ad:d6:ce:26:fc:02:54:2e:df:6a:52:ad:54:e4:d9:
24:d7:be:ca:0e:51:44:96:0d:2b:72:90:a2:b2:67:
97:ea:74:38:81:78:96:0a:30:c6:78:7b:69:53:b3:
8c:a4:83:14:81:66:72:2c:b5:3b:dc:f1:d3:4a:62:
c4:ba:08:23:0c:77:cc:ec:1f:67:55:39:e6:70:6d:
f5:fc:9f:87:91:53:18:6b:99:ce:bf:a6:ef:d5:51:
b6:7b:97:96:a8:a6:0a:08:06:3a:b3:5c:47:7f:16:
cf:17:62:7e:6d:d8:54:0c:49:c2:fe:f1:ce:5e:87:
aa:1d:d5:cd:af:b5:17:91:12:1d:30:1e:ff:56:3f:
18:4b:7b:2c:0f:cd:85:5c:d1:28:9d:7a:65:52:21:
d9:3c:b9:86:c4:95:e3:bb:0c:93:8c:0e:fb:4f:9a:
04:51:43:67:6b:cc:50:b4:b4:f5:6b:e8:cf:71:70:
00:b7:13:6e:b5:01:9e:71:5a:90:01:6a:22:8f:69:
01:63:d1:2c:00:9a:01:80:9f:d9:8e:57:14:6d:c4:
dd:79:4e:c7:e3:17:bc:66:9e:ec:75:29:d4:a4:b8:
83:f2:2b:db:f6:33:02:dd:ca:6e:74:bf:09:97:57:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:13:6C:CD:BC:A2:D3:99:3A:60:56:93:EF:82:E8:00:FF:9B:95
X509v3 Authority Key Identifier:
keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2c:3b:ad:f1:66:c1:f3:c4:5f:f4:97:fd:bb:aa:f8:5f:ad:
84:6f:17:02:3b:a2:4f:73:3b:ce:55:d9:04:07:d0:9f:d7:60:
18:b9:93:3b:f9:b8:75:11:a8:63:10:f3:c4:50:47:90:65:74:
07:22:63:a7:4f:c9:fd:6e:3c:02:b9:9d:af:2d:f3:c3:8e:f6:
ae:c7:be:45:0b:3f:84:b5:63:d0:c3:19:f6:39:83:5f:2c:ec:
28:26:99:cc:d9:1e:f6:d6:6e:a6:04:b7:d0:b5:8d:97:0a:04:
c0:65:5d:fb:2e:da:70:2a:e2:bb:b3:ab:8e:fe:7b:e2:f8:7f:
07:9f:ff:49:6a:46:99:ec:5c:8a:25:13:07:5f:03:fd:77:82:
e5:ac:34:9a:ea:24:6a:5b:e7:16:05:a6:a7:32:97:94:a0:53:
92:3c:03:f2:b3:4e:88:e5:42:f5:c4:8f:34:30:ad:61:25:ff:
1b:1f:54:38:e7:99:0a:7d:51:12:e4:dc:1d:06:5d:13:ac:c7:
c2:4a:cc:b1:a6:a8:ff:c9:28:b7:66:2b:75:c5:14:f2:e0:0c:
df:5e:04:9f:54:1b:89:8e:c8:32:84:f3:d8:2f:56:e3:93:2a:
73:5c:ab:0f:c0:19:80:3a:52:a7:d1:9f:a0:71:ba:2a:58:b5:
59:f9:35:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU5NzIxMTAvBgNVBAUTKDVEMTg1QjcxMkQ5MzA1NkJGMjc0QjhCN0E4OThDNjky
NTRFQkI5ODMwHhcNMjYwMzAxMDUyNDE4WhcNMjYwMzA4MDUyNDE4WjAYMRYwFAYD
VQQDEw02OWEzY2Q4My0yOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2hv7Pde9t35PSEAfheKt1s4m/AJULt9qUq1U5Nkk177KDlFElg0rcpCismeX
6nQ4gXiWCjDGeHtpU7OMpIMUgWZyLLU73PHTSmLEuggjDHfM7B9nVTnmcG31/J+H
kVMYa5nOv6bv1VG2e5eWqKYKCAY6s1xHfxbPF2J+bdhUDEnC/vHOXoeqHdXNr7UX
kRIdMB7/Vj8YS3ssD82FXNEonXplUiHZPLmGxJXjuwyTjA77T5oEUUNna8xQtLT1
a+jPcXAAtxNutQGecVqQAWoij2kBY9EsAJoBgJ/ZjlcUbcTdeU7H4xe8Zp7sdSnU
pLiD8ivb9jMC3cpudL8Jl1fDnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFprE2zN
vKLTmTpgVpPvgugA/5uVMB8GA1UdIwQYMBaAFF0YW3EtkwVr8nS4t6iYxpJU67mD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk3Mi8yNDVCM0REQ0Ez
RTYxMUVFQURGOTQ4NTVDNEY5QUUwMi9YUmhiY1MyVEJXdnlkTGkzcUpqR2tsVHJ1
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hSaGJjUzJUQld2eWRMaTNxSmpHa2xUcnVZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTk3Mi8yNDVCM0REQ0EzRTYxMUVFQURGOTQ4NTVDNEY5QUUwMi9YUmhiY1MyVEJX
dnlkTGkzcUpqR2tsVHJ1WU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtCw7rfFmwfPEX/SX/buq+F+thG8XAjuiT3M7zlXZBAfQn9dgGLmTO/m4dRGo
YxDzxFBHkGV0ByJjp0/J/W48Armdry3zw472rse+RQs/hLVj0MMZ9jmDXyzsKCaZ
zNke9tZupgS30LWNlwoEwGVd+y7acCriu7Orjv574vh/B5//SWpGmexciiUTB18D
/XeC5aw0muokalvnFgWmpzKXlKBTkjwD8rNOiOVC9cSPNDCtYSX/Gx9UOOeZCn1R
EuTcHQZdE6zHwkrMsaao/8kot2YrdcUU8uAM314En1QbiY7IMoTz2C9W45Mqc1yr
D8AZgDpSp9GfoHG6Kli1Wfk1xw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:00 2026 by rpki-client