
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
File: _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json)
Hash identifier: J9Put4Tj6znfdptub5Oiky6xdEHBGE1xPRa8lWkXtAI=
Subject key identifier: 71:C4:3F:8C:86:15:77:DB:07:C8:E2:40:E7:CC:77:E9:F8:43:C3:56
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Certificate issuer: /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial: 07B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
Manifest number: 07AE
Signing time: Mon 02 Mar 2026 01:07:52 +0000
Manifest this update: Mon 02 Mar 2026 01:07:50 +0000
Manifest next update: Mon 09 Mar 2026 01:07:50 +0000
Files and hashes: 1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: kU28Ywtcdhqd517ql3dJB2wqB0esE5SrrqvhlEagJ/o=)
2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: thgZ084FdnfIjYuqblOzz/1teNd07/KOSxYxuCVdQEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974 (0x7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Validity
Not Before: Mar 2 01:07:50 2026 GMT
Not After : Mar 9 01:07:50 2026 GMT
Subject: CN=69a4e2e8-ff8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:02:57:df:b8:0a:67:b4:61:f5:19:2f:f4:
19:3c:fa:30:5f:ba:d8:b5:ea:9b:94:e6:7e:d3:6e:
73:8b:db:2b:bd:f2:a4:9d:58:05:55:af:1b:b3:e2:
1b:b2:c4:f1:12:29:c9:48:ac:a7:b7:28:94:af:68:
c3:c0:36:57:9b:a3:50:83:4f:d0:07:e5:69:52:c3:
ab:e2:e3:6b:b4:34:52:4a:98:82:40:e1:25:8d:5c:
09:c7:a0:1d:7f:a8:78:5e:ab:89:ce:f5:45:48:9f:
54:2c:91:2e:cd:22:c0:45:ed:ca:09:2e:72:a2:87:
cd:31:e9:06:88:7e:bb:46:b3:06:3f:29:d9:40:d1:
a3:26:f0:27:27:7c:9b:fc:42:21:98:74:8e:b5:bd:
94:7d:aa:66:3a:3f:e6:57:37:9e:e5:3a:64:87:53:
8a:08:a7:c5:40:12:87:d1:6c:b0:29:e0:3c:98:a8:
8f:f0:61:6c:01:48:15:ca:9c:1c:cc:35:de:be:2f:
d8:03:0e:69:36:41:20:a1:71:fd:ce:f6:15:1d:d9:
da:4c:2f:f4:4e:5b:ff:c9:9a:18:a3:2e:9b:50:d7:
68:88:cd:8b:7b:01:c8:47:ec:d9:64:63:63:bb:2d:
ac:2b:a7:ac:bd:66:7d:a6:f6:6f:ce:38:71:1b:35:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:3F:8C:86:15:77:DB:07:C8:E2:40:E7:CC:77:E9:F8:43:C3:56
X509v3 Authority Key Identifier:
keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d1:0f:96:48:a7:d6:f4:ea:34:95:d9:1c:09:8e:38:7b:08:
c4:77:05:b6:ed:1f:48:c4:47:99:04:64:16:2e:1e:ff:42:45:
59:80:0a:bb:42:79:1c:b6:8d:a0:eb:82:46:2b:32:e0:62:d9:
ba:78:fe:c2:72:1c:49:d1:d9:f0:ea:81:1b:85:38:a9:fe:d8:
5d:34:06:93:3b:17:5d:dc:46:03:35:82:62:20:04:63:9f:8b:
81:68:b3:de:ea:d1:f4:f7:47:f4:25:18:b8:a4:f5:dc:16:45:
10:89:a0:2a:bd:b2:8b:c6:84:61:8a:1e:7d:51:c1:be:80:84:
c9:ad:ec:30:4a:69:a4:d8:d1:61:18:20:ce:80:23:fb:f8:55:
8a:6b:ff:81:ac:29:24:ca:e6:e5:ad:23:8d:89:98:41:d3:f6:
6f:6e:54:fd:57:12:08:a9:d3:be:4c:dd:41:dc:d1:e3:39:7f:
1f:3e:97:cb:cb:22:50:be:f1:61:25:c8:4c:ef:c1:9d:8f:85:
01:c7:f1:c8:ba:61:6a:b4:16:8a:9f:89:4c:a5:de:f6:d8:9a:
84:4e:7d:c5:b8:e5:a9:12:c7:a2:56:63:af:13:09:a4:d1:71:
bb:41:a2:e3:74:45:67:d0:41:b3:82:fb:05:a5:37:db:36:a1:
60:09:c9:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE4OUIxMTAvBgNVBAUTKEZEMkE5RDVFRkFCOTExMUIwQTVBMzAxM0YzNEMyQ0JE
QUZEMDFGQzIwHhcNMjYwMzAyMDEwNzUwWhcNMjYwMzA5MDEwNzUwWjAYMRYwFAYD
VQQDEw02OWE0ZTJlOC1mZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0KECV9+4Cme0YfUZL/QZPPowX7rYteqblOZ+025zi9srvfKknVgFVa8bs+Ib
ssTxEinJSKyntyiUr2jDwDZXm6NQg0/QB+VpUsOr4uNrtDRSSpiCQOEljVwJx6Ad
f6h4XquJzvVFSJ9ULJEuzSLARe3KCS5yoofNMekGiH67RrMGPynZQNGjJvAnJ3yb
/EIhmHSOtb2UfapmOj/mVzee5Tpkh1OKCKfFQBKH0WywKeA8mKiP8GFsAUgVypwc
zDXevi/YAw5pNkEgoXH9zvYVHdnaTC/0Tlv/yZoYoy6bUNdoiM2LewHIR+zZZGNj
uy2sK6esvWZ9pvZvzjhxGzWf2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHEP4yG
FXfbB8jiQOfMd+n4Q8NWMB8GA1UdIwQYMBaAFP0qnV76uREbClowE/NMLL2v0B/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTg5Qi8zMjhCREQ0MDM4
NzIxMUVCOTk3QUEyM0FDNEY5QUUwMi9fU3FkWHZxNUVSc0tXakFUODB3c3ZhX1FI
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19TcWRYdnE1RVJzS1dqQVQ4MHdzdmFfUUg4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTg5Qi8zMjhCREQ0MDM4NzIxMUVCOTk3QUEyM0FDNEY5QUUwMi9fU3FkWHZxNUVS
c0tXakFUODB3c3ZhX1FIOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAptEPlkin1vTqNJXZHAmOOHsIxHcFtu0fSMRHmQRkFi4e/0JFWYAKu0J5HLaN
oOuCRisy4GLZunj+wnIcSdHZ8OqBG4U4qf7YXTQGkzsXXdxGAzWCYiAEY5+LgWiz
3urR9PdH9CUYuKT13BZFEImgKr2yi8aEYYoefVHBvoCEya3sMEpppNjRYRggzoAj
+/hVimv/gawpJMrm5a0jjYmYQdP2b25U/VcSCKnTvkzdQdzR4zl/Hz6Xy8siUL7x
YSXITO/BnY+FAcfxyLpharQWip+JTKXe9tiahE59xbjlqRLHolZjrxMJpNFxu0Gi
43RFZ9BBs4L7BaU32zahYAnJ6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:15 2026 by rpki-client