
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json)
Hash identifier: 22MV3PBk/xVL9uUzrJg75/ePQQVnGD5NeCxXxQgms+M=
Subject key identifier: 1E:CB:B1:DC:57:B2:18:F7:80:55:93:CB:C4:9D:AE:C5:D7:7B:8B:EE
Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
Manifest number: 0131
Signing time: Sun 01 Mar 2026 06:30:17 +0000
Manifest this update: Sun 01 Mar 2026 06:30:16 +0000
Manifest next update: Sun 08 Mar 2026 06:30:16 +0000
Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: HyffPO2oF6Off96fWKnZNtHOUtr+WXZXMIVc708FBmI=)
2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Validity
Not Before: Mar 1 06:30:16 2026 GMT
Not After : Mar 8 06:30:16 2026 GMT
Subject: CN=69a3dcf9-7375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:54:a9:71:0e:a9:49:36:61:33:1a:3f:03:
cb:80:40:cf:fa:f1:f9:b5:d2:3e:5c:e8:64:8a:4f:
49:8b:9f:11:8c:9a:b4:19:b3:51:41:f0:e5:cc:17:
14:64:2c:99:2e:61:43:07:79:0e:36:08:13:5d:61:
a3:fe:97:10:c8:a1:81:e3:9e:74:28:e4:e6:93:37:
71:19:74:ab:2a:a2:2a:51:fa:f5:63:df:a8:f3:c8:
bc:d3:5a:be:39:c7:5e:0b:2f:af:67:f4:89:6c:5d:
93:f3:73:71:7d:e8:8c:87:76:b4:fe:49:e9:42:c7:
d0:7d:fa:25:34:a7:56:d5:b0:6c:7d:f0:3a:41:9a:
1e:d0:df:de:a9:cf:c4:d1:03:c1:12:31:00:22:f8:
94:42:95:bb:f3:c1:13:04:f7:2e:7d:b9:71:a8:7e:
ca:42:f6:03:9d:d5:fa:02:09:c8:5c:c2:fc:6a:62:
22:ef:5a:23:62:c4:24:e0:27:12:3f:20:98:fe:dc:
45:53:e8:c7:ae:78:64:db:38:61:19:67:82:03:e5:
b7:a3:5d:be:ab:b0:2e:e0:67:8b:d6:97:d4:f2:16:
6e:9e:4b:af:c4:50:78:48:23:1b:90:a2:91:45:13:
ba:d3:7e:b6:66:67:df:be:57:0c:19:bc:ca:b2:0c:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CB:B1:DC:57:B2:18:F7:80:55:93:CB:C4:9D:AE:C5:D7:7B:8B:EE
X509v3 Authority Key Identifier:
keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:7e:04:38:49:d0:62:4e:0c:9b:cc:38:77:ed:a6:0b:ec:5d:
95:a5:88:6a:99:98:e7:ce:fe:f6:7d:50:09:5d:d7:a0:2f:eb:
a1:27:75:75:f0:a7:66:9e:34:71:7f:43:16:5e:18:f0:26:f1:
1a:77:a6:ae:df:92:a5:7a:99:4d:75:72:af:1b:60:d5:3a:fe:
ee:37:0f:fd:a5:97:c1:08:9a:6e:8c:1c:c8:8c:79:c3:ed:2e:
e8:66:be:02:97:57:d2:5f:ce:19:2e:42:6b:46:64:c1:86:72:
75:74:16:7e:de:35:72:5b:c2:1c:4d:95:16:2c:cf:ea:65:30:
c9:3b:48:89:c9:17:cb:df:2e:fe:56:37:de:b7:a8:3c:36:8a:
45:6e:01:f8:e2:3a:57:01:d3:3f:cd:7c:f1:cc:33:20:01:7c:
6d:af:77:88:c2:09:e6:10:93:75:4f:8c:eb:5e:1d:17:01:ed:
a8:4c:b7:52:0f:fe:61:92:7c:aa:94:75:59:6a:6b:68:69:41:
b6:45:ba:d9:27:03:d0:b6:75:5b:ce:4e:b8:84:6c:ff:d4:16:
1d:4d:65:33:35:f5:5a:d4:60:45:fc:52:db:5a:16:ab:4b:92:
22:03:b4:b8:fc:18:86:fd:26:6c:de:39:34:6a:08:95:5d:50:
34:d0:ea:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2
NEI5RDYyNjEwHhcNMjYwMzAxMDYzMDE2WhcNMjYwMzA4MDYzMDE2WjAYMRYwFAYD
VQQDEw02OWEzZGNmOS03Mzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7VUqXEOqUk2YTMaPwPLgEDP+vH5tdI+XOhkik9Ji58RjJq0GbNRQfDlzBcU
ZCyZLmFDB3kONggTXWGj/pcQyKGB4550KOTmkzdxGXSrKqIqUfr1Y9+o88i801q+
OcdeCy+vZ/SJbF2T83NxfeiMh3a0/knpQsfQffolNKdW1bBsffA6QZoe0N/eqc/E
0QPBEjEAIviUQpW788ETBPcufblxqH7KQvYDndX6AgnIXML8amIi71ojYsQk4CcS
PyCY/txFU+jHrnhk2zhhGWeCA+W3o12+q7Au4GeL1pfU8hZunkuvxFB4SCMbkKKR
RRO60362ZmffvlcMGbzKsgznrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB7LsdxX
shj3gFWTy8SdrsXXe4vuMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz
MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2
NU1idm1Pall6ek5rdWRZbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1n4EOEnQYk4Mm8w4d+2mC+xdlaWIapmY587+9n1QCV3XoC/roSd1dfCnZp40
cX9DFl4Y8CbxGnemrt+SpXqZTXVyrxtg1Tr+7jcP/aWXwQiabowcyIx5w+0u6Ga+
ApdX0l/OGS5Ca0ZkwYZydXQWft41clvCHE2VFizP6mUwyTtIickXy98u/lY33reo
PDaKRW4B+OI6VwHTP8188cwzIAF8ba93iMIJ5hCTdU+M614dFwHtqEy3Ug/+YZJ8
qpR1WWpraGlBtkW62ScD0LZ1W85OuIRs/9QWHU1lMzX1WtRgRfxS21oWq0uSIgO0
uPwYhv0mbN45NGoIlV1QNNDq6Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:10 2026 by rpki-client