
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json)
Hash identifier: ZkR/Q2rGVsyAN7haKUgTgnxIrrqihsCXwcc4lBE4kuI=
Subject key identifier: EE:7F:C3:CD:A7:84:65:8A:9F:A2:74:10:28:34:45:BC:88:09:F8:EF
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial: 0DE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
Manifest number: 0DD6
Signing time: Sat 28 Feb 2026 18:00:27 +0000
Manifest this update: Sat 28 Feb 2026 18:00:26 +0000
Manifest next update: Sat 07 Mar 2026 18:00:26 +0000
Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: Vooh4OIrjdyYb9c1+szaTpcVvOjFS7hzgnW2cBocgUc=)
2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: SkBXJ2Cg15YTINlEK8cWxPkVEnzJM9DWZ0n7aJtqwN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3555 (0xde3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Validity
Not Before: Feb 28 18:00:26 2026 GMT
Not After : Mar 7 18:00:26 2026 GMT
Subject: CN=69a32d3b-8bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:e2:c1:12:4c:bf:70:22:27:4d:7e:5c:33:
ef:7f:a7:e3:cb:4b:e8:23:98:0d:44:ba:7e:68:11:
99:04:c9:b8:04:6c:f4:8d:84:49:15:03:d9:ba:ac:
bb:b9:81:02:b3:3a:02:09:01:86:45:f4:d7:5c:ab:
b5:c9:64:5d:86:41:01:0d:e0:b8:af:74:b0:75:be:
cf:46:ac:a6:02:ad:69:17:28:48:37:9e:14:5f:77:
38:f2:35:a2:fd:a1:68:8b:d2:47:b8:27:6a:38:6b:
e0:04:e5:b9:02:af:d7:eb:83:ca:67:45:a6:b9:2e:
49:f4:6e:27:3a:51:2e:9b:45:a0:30:72:b9:5d:cf:
9a:d5:cc:31:99:ba:8f:6b:92:94:06:a6:eb:55:97:
50:76:f0:b8:9d:b3:d3:bf:f5:1f:b8:04:80:9b:1c:
6b:f7:be:44:28:6c:4d:32:3f:e0:90:41:6c:cc:d6:
d7:02:60:98:61:f4:89:a5:0c:9a:2c:0d:79:c0:f9:
30:b4:3c:8c:af:ec:68:8b:73:25:3f:3d:50:8c:b0:
92:f7:7a:a2:73:0d:cc:02:97:3e:21:97:b3:47:29:
c0:82:a5:7c:4c:ab:31:0d:8c:6e:91:09:e5:aa:24:
26:7e:8d:a4:8a:e9:19:97:8d:f4:ac:e8:8d:91:6d:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:C3:CD:A7:84:65:8A:9F:A2:74:10:28:34:45:BC:88:09:F8:EF
X509v3 Authority Key Identifier:
keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:80:29:b5:77:e4:1c:0b:24:28:d6:91:1c:96:0f:03:79:f7:
74:a0:4a:51:7d:ca:48:95:34:e0:d8:f1:dc:6b:36:06:83:92:
8c:c2:54:aa:d5:ce:cb:86:51:02:02:40:1b:c4:39:b2:66:b1:
27:cd:46:bc:61:37:1a:04:6a:23:7d:9d:d7:39:80:e6:b8:5a:
7b:c5:e8:e9:c9:35:86:72:06:ec:e0:00:f6:8c:d1:c4:8e:8c:
7c:1f:a0:8e:a2:a2:61:25:03:c5:48:68:bb:a8:fa:33:82:3b:
1f:1d:aa:7d:f3:da:8b:9e:44:cc:d0:52:d0:33:a4:ba:17:01:
b0:b7:ad:66:09:21:89:bd:45:3c:26:8e:e9:92:1b:80:45:a2:
ea:6a:ae:03:4f:0b:4b:6d:0a:da:b3:38:47:14:3f:15:3f:ea:
51:8f:1d:7a:5f:97:ef:91:29:78:77:2e:35:f6:a8:14:55:0b:
12:a3:e7:3e:a8:7b:f7:7c:4b:2c:4d:d7:e0:55:7f:8c:48:fe:
5b:6d:45:ba:cc:e2:19:97:3e:01:15:dc:5f:6a:6e:8f:35:e5:
7d:54:a2:34:8c:2f:91:8f:93:04:2d:d8:7d:d4:46:2f:1f:33:
eb:90:82:4f:d2:3f:47:9f:6e:b3:29:fe:f1:e7:6c:91:55:ed:
74:4f:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:51 2026 by rpki-client