
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json)
Hash identifier: nWzJJSgxD7xqPbVdaq23wl3OWeaJc+E2XeX9hkf08MM=
Subject key identifier: E9:A8:58:46:1C:29:15:62:8D:77:10:34:4E:BE:C5:0F:EE:67:29:6B
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 0666
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
Manifest number: 0653
Signing time: Mon 02 Mar 2026 02:44:06 +0000
Manifest this update: Mon 02 Mar 2026 02:44:05 +0000
Manifest next update: Mon 09 Mar 2026 02:44:05 +0000
Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: O21hW1iWqTns1quagw/8BW/jQ5lpt6v76zrnGzJVlk4=)
2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: nnDH6rvORkwCmJUa2SHMfnPNgo7zw9YFjWX6Zaktv3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1638 (0x666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Mar 2 02:44:05 2026 GMT
Not After : Mar 9 02:44:05 2026 GMT
Subject: CN=69a4f976-bfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:61:2f:1e:49:01:fc:af:40:b4:17:cb:23:
1d:de:1e:12:c2:6e:23:76:b2:b2:f5:7d:75:72:ef:
67:84:d1:06:4c:bf:af:7c:31:f9:32:e2:dc:24:21:
b9:dd:38:a6:3f:cc:e7:ef:49:ea:7d:41:53:86:7a:
c2:f2:fc:5e:37:64:21:41:d7:50:96:5c:28:ee:62:
33:17:be:bd:91:53:3b:34:4d:44:1c:69:31:13:be:
97:1a:aa:f4:96:3e:27:8e:02:a2:0e:f5:1b:d5:89:
2a:ad:b0:e7:51:84:52:fa:f7:b1:91:ed:42:f3:55:
cd:e9:1e:fc:97:92:ef:e4:14:9e:08:c7:84:50:34:
fd:ec:d7:58:06:01:c0:0d:30:a4:20:4b:43:19:86:
3c:b5:40:83:81:ed:50:25:52:d3:9d:3c:93:38:a1:
cb:9c:60:15:4a:7c:36:32:45:5e:89:74:0a:98:bc:
a5:42:c8:52:5e:8d:be:7e:0e:d0:c4:9c:e1:c8:61:
15:1b:01:ef:2c:0c:4d:0e:0e:5c:2d:bf:58:c6:b3:
31:13:5e:3f:aa:b2:3a:2d:a4:b1:2d:c2:f3:d1:7a:
af:f7:19:cb:fa:3c:52:1b:7e:82:6f:1a:fa:42:ae:
7e:ac:5f:33:85:fe:da:ce:0a:ab:d3:2d:1a:87:bc:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:58:46:1C:29:15:62:8D:77:10:34:4E:BE:C5:0F:EE:67:29:6B
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:53:d8:ae:95:39:3f:c9:cf:01:7c:d6:24:76:76:75:45:ca:
36:ca:28:16:36:eb:20:f1:0f:9e:1d:5c:06:a6:86:d5:1e:ba:
1c:a9:6c:6b:b0:98:53:36:90:52:07:93:82:f8:21:c9:b7:5c:
27:87:87:d9:de:c3:90:86:58:16:73:1e:61:40:c8:ab:28:9f:
13:5d:dd:04:91:a9:f2:e9:08:53:d6:40:07:2b:3f:c8:d4:64:
9e:6d:37:81:70:56:14:62:f6:f0:7a:06:b1:13:06:ef:6f:a8:
bc:6d:9c:0f:c1:7b:d9:6b:34:f1:80:65:11:59:51:4d:91:ca:
32:64:9f:a2:c5:18:cc:1f:a3:3a:87:6d:ae:ef:1f:db:0c:b7:
bf:22:6a:19:2f:93:b1:b2:89:04:2b:95:d9:b8:1c:ad:52:7b:
df:ae:13:4e:5f:40:0e:50:98:5d:6d:a8:93:cf:f8:42:58:dc:
c6:49:fb:fb:f4:e1:f4:7e:c0:1c:d8:b1:ad:89:d1:22:bf:9c:
09:ad:8e:f4:da:9d:38:a0:35:a1:8f:00:9b:fe:0b:c2:b6:b2:
e2:e1:0e:da:e1:09:e1:68:cb:73:f1:35:a5:f2:5d:d5:42:3b:
63:6e:b2:ef:a8:7b:5c:e1:4a:08:c8:e8:df:69:9f:d8:94:56:
d8:ba:bd:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz
QzI1OUMxOUYwHhcNMjYwMzAyMDI0NDA1WhcNMjYwMzA5MDI0NDA1WjAYMRYwFAYD
VQQDEw02OWE0Zjk3Ni1iZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA32hhLx5JAfyvQLQXyyMd3h4Swm4jdrKy9X11cu9nhNEGTL+vfDH5MuLcJCG5
3TimP8zn70nqfUFThnrC8vxeN2QhQddQllwo7mIzF769kVM7NE1EHGkxE76XGqr0
lj4njgKiDvUb1YkqrbDnUYRS+vexke1C81XN6R78l5Lv5BSeCMeEUDT97NdYBgHA
DTCkIEtDGYY8tUCDge1QJVLTnTyTOKHLnGAVSnw2MkVeiXQKmLylQshSXo2+fg7Q
xJzhyGEVGwHvLAxNDg5cLb9YxrMxE14/qrI6LaSxLcLz0Xqv9xnL+jxSG36Cbxr6
Qq5+rF8zhf7azgqr0y0ah7xDbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmoWEYc
KRVijXcQNE6+xQ/uZylrMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3
ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjVGNy80NEZDRTU2OEM3ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FD
dUtITlJYZVRYazg4Slp3WjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYlPYrpU5P8nPAXzWJHZ2dUXKNsooFjbrIPEPnh1cBqaG1R66HKlsa7CYUzaQ
UgeTgvghybdcJ4eH2d7DkIZYFnMeYUDIqyifE13dBJGp8ukIU9ZABys/yNRknm03
gXBWFGL28HoGsRMG72+ovG2cD8F72Ws08YBlEVlRTZHKMmSfosUYzB+jOodtru8f
2wy3vyJqGS+TsbKJBCuV2bgcrVJ7364TTl9ADlCYXW2ok8/4Qljcxkn7+/Th9H7A
HNixrYnRIr+cCa2O9NqdOKA1oY8Am/4Lwray4uEO2uEJ4WjLc/E1pfJd1UI7Y26y
76h7XOFKCMjo32mf2JRW2Lq9uA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:14 2026 by rpki-client