
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json)
Hash identifier: bogPIU1NQD9JqXnxdhWJo0CHZ0flQ0qGJsQ79cJyiHs=
Subject key identifier: F0:B4:04:6A:C9:44:26:6F:9A:26:2D:5D:8C:15:08:63:9C:00:45:BD
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial: 0820
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
Manifest number: 0819
Signing time: Mon 02 Mar 2026 01:55:29 +0000
Manifest this update: Mon 02 Mar 2026 01:55:28 +0000
Manifest next update: Mon 09 Mar 2026 01:55:28 +0000
Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: kmxZkcoemWvADK4FBNCA2WmovhZL8PM++z0ycZ9uTzc=)
2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: pDMgUgYjUiG2SoDfLwnr0PNx89pEiUUtvGRDwPeIdng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080 (0x820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Validity
Not Before: Mar 2 01:55:28 2026 GMT
Not After : Mar 9 01:55:28 2026 GMT
Subject: CN=69a4ee11-40f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:60:4e:c4:2b:9f:a1:d3:e2:61:5d:ea:46:
03:6b:cb:14:d2:c0:62:4a:95:93:87:0a:b5:3b:f5:
ab:f7:54:39:16:b9:8b:19:60:53:a8:72:83:b3:eb:
cd:27:17:04:91:7b:b3:dd:00:42:2f:27:71:f1:f6:
0f:b3:9b:8b:53:f6:e4:b5:f2:ec:dd:46:4b:ee:e9:
82:1d:fd:85:68:3f:a3:39:38:03:30:be:85:87:41:
6e:66:1e:eb:20:7a:2c:ca:4a:79:43:46:cf:86:45:
cc:52:07:83:68:7d:cc:b6:68:80:b7:08:6f:97:5c:
ad:ff:92:22:97:09:68:8e:51:4d:5e:ed:56:ec:f9:
8c:c2:b8:cb:ce:06:04:b8:cf:95:cf:1f:1b:67:0a:
ee:17:84:0a:4d:c2:c0:85:ad:50:e3:fe:70:87:ff:
56:f4:1e:86:66:ba:76:07:60:72:51:12:c6:28:38:
9a:45:94:8f:81:85:bb:6b:de:a2:0b:ab:ad:6a:b7:
ee:ec:79:fa:36:5f:76:5e:43:d2:3b:1b:ea:ab:09:
00:00:b9:62:46:92:91:c8:38:27:9a:36:66:4b:4f:
f5:6f:5f:a3:21:2b:a0:9a:5c:a3:94:c5:bd:ca:ce:
8c:56:c6:81:e8:5d:5b:3a:43:b7:dd:b2:a1:b5:e3:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B4:04:6A:C9:44:26:6F:9A:26:2D:5D:8C:15:08:63:9C:00:45:BD
X509v3 Authority Key Identifier:
keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5e:3a:83:a9:48:6c:c8:ed:25:d8:0d:82:3f:5d:2c:5b:9e:
35:a8:ee:7f:16:cf:8a:31:ca:a3:b9:04:ef:de:4b:3c:65:59:
27:74:6c:27:d1:d8:8c:45:6f:da:4e:39:78:b4:b6:73:7e:4c:
19:94:1a:ee:64:37:4d:4f:5a:49:64:ac:a7:0f:04:8a:7f:1e:
24:c2:da:30:4b:95:b6:37:af:21:1b:41:33:99:52:cd:c7:e4:
e8:c7:c4:03:1b:b4:61:cc:bb:52:5d:f5:37:f8:a6:72:90:f2:
05:2c:e6:d7:d1:08:c1:9e:e8:6c:72:83:bd:99:01:be:e8:da:
0a:39:1d:ad:86:50:3f:94:a7:0c:63:cb:19:2c:0a:d3:30:d8:
f1:be:ac:0e:0b:31:f3:88:d6:4f:1e:67:0c:6b:f5:72:55:19:
89:53:cd:ec:7a:df:23:e7:ca:23:a4:8a:f1:78:91:dd:06:63:
fc:56:a6:63:9d:0c:fb:74:9a:02:7c:e0:9d:cb:29:b8:f2:f1:
60:e5:17:37:db:c0:82:7b:e5:9e:7c:aa:da:18:b2:ac:5a:ca:
b7:57:9d:08:8c:8b:a7:21:9b:16:a7:49:95:01:4a:60:81:c4:
54:f3:64:c7:10:94:f5:75:9f:48:78:61:2c:28:72:c9:6c:61:
41:4e:8c:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAwNDkxMTAvBgNVBAUTKDE3NzI1RkFERUI0NEEzRkE4QjMxRkZGMEE2M0NCQzUx
NTVBOTA3RDgwHhcNMjYwMzAyMDE1NTI4WhcNMjYwMzA5MDE1NTI4WjAYMRYwFAYD
VQQDEw02OWE0ZWUxMS00MGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxt9gTsQrn6HT4mFd6kYDa8sU0sBiSpWThwq1O/Wr91Q5FrmLGWBTqHKDs+vN
JxcEkXuz3QBCLydx8fYPs5uLU/bktfLs3UZL7umCHf2FaD+jOTgDML6Fh0FuZh7r
IHosykp5Q0bPhkXMUgeDaH3MtmiAtwhvl1yt/5IilwlojlFNXu1W7PmMwrjLzgYE
uM+Vzx8bZwruF4QKTcLAha1Q4/5wh/9W9B6GZrp2B2ByURLGKDiaRZSPgYW7a96i
C6utarfu7Hn6Nl92XkPSOxvqqwkAALliRpKRyDgnmjZmS0/1b1+jISugmlyjlMW9
ys6MVsaB6F1bOkO33bKhtePjCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPC0BGrJ
RCZvmiYtXYwVCGOcAEW9MB8GA1UdIwQYMBaAFBdyX63rRKP6izH/8KY8vFFVqQfY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA0OS83RUM5MDk3NjBE
RkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9fcUxNZl93cGp5OFVWV3BC
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YzSmZyZXRFb19xTE1mX3dwank4VVZXcEI5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDA0OS83RUM5MDk3NjBERkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9f
cUxNZl93cGp5OFVWV3BCOWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAel46g6lIbMjtJdgNgj9dLFueNajufxbPijHKo7kE795LPGVZJ3RsJ9HYjEVv
2k45eLS2c35MGZQa7mQ3TU9aSWSspw8Ein8eJMLaMEuVtjevIRtBM5lSzcfk6MfE
Axu0Ycy7Ul31N/imcpDyBSzm19EIwZ7obHKDvZkBvujaCjkdrYZQP5SnDGPLGSwK
0zDY8b6sDgsx84jWTx5nDGv1clUZiVPN7HrfI+fKI6SK8XiR3QZj/FamY50M+3Sa
AnzgncspuPLxYOUXN9vAgnvlnnyq2hiyrFrKt1edCIyLpyGbFqdJlQFKYIHEVPNk
xxCU9XWfSHhhLChyyWxhQU6MHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:18 2026 by rpki-client