
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json)
Hash identifier: IbunAeC3OfJwr/bhx/OiO4LK+tcPzG2MkOCfpr9ja+I=
Subject key identifier: 52:34:0F:AF:D7:A1:5D:66:33:EC:B4:42:5F:14:E6:C5:E9:27:A1:B1
Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24
Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
Certificate serial: 14D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
Manifest number: 14CA
Signing time: Sat 28 Feb 2026 16:55:27 +0000
Manifest this update: Sat 28 Feb 2026 16:55:26 +0000
Manifest next update: Sat 07 Mar 2026 16:55:26 +0000
Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: YndAgBDv9jLTt+yKV3YLA3eYUwz6nGcLcpSxf58XeYM=)
2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: +fYcXUUOxqjne/yMdR0BaLunZ8SANdMDHI2Ya9W1pUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl
rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5333 (0x14d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
Validity
Not Before: Feb 28 16:55:26 2026 GMT
Not After : Mar 7 16:55:26 2026 GMT
Subject: CN=69a31dfe-783e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:e2:8a:26:0d:6a:3e:61:e4:b9:f1:23:c5:
3a:e1:6b:0d:cc:b1:5c:b5:8c:3b:9a:35:65:9c:c6:
e7:dd:5e:a2:39:c9:17:8d:6b:a4:56:b0:d4:d1:fc:
76:37:c2:08:ca:61:56:bc:89:8e:d9:00:c2:15:2b:
22:d9:9a:1d:e1:b8:b7:55:17:93:f8:70:a0:ee:e1:
8c:37:27:79:aa:5d:4a:85:0d:48:14:63:2a:6a:d0:
26:52:69:f0:7e:a3:e7:fc:96:a3:f7:d7:51:0a:09:
e3:1e:31:7e:d4:09:af:d1:a8:ca:11:e8:cd:d7:22:
23:68:2c:8e:46:bd:b5:94:24:8e:a1:e6:cb:6b:4f:
9b:fc:14:86:b7:7d:1b:be:e0:6c:35:58:a9:9e:93:
01:cf:47:06:0c:1c:e3:9f:01:12:e2:4b:51:98:67:
f9:29:e5:ff:6d:5d:21:52:9c:a2:a3:df:cb:d7:3f:
0b:c8:48:2f:a7:bf:8b:31:bf:fc:38:94:d8:bb:af:
87:3a:33:81:fa:77:cb:d9:d7:80:81:20:41:b7:41:
7b:0c:4b:5d:42:1a:0b:13:54:2d:10:8e:18:26:a5:
e2:9c:7d:e8:ca:bd:de:0e:d1:39:a4:24:e0:21:75:
cf:bb:f1:34:70:2e:3c:93:4e:5e:1a:8b:f9:d3:1c:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:0F:AF:D7:A1:5D:66:33:EC:B4:42:5F:14:E6:C5:E9:27:A1:B1
X509v3 Authority Key Identifier:
keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:bc:39:6a:19:a1:30:24:f0:85:20:af:74:a8:51:46:14:13:
4c:41:f2:47:a3:ea:67:c3:66:47:7c:27:1b:cd:3b:b6:5b:48:
6d:2a:51:10:51:68:ac:40:23:39:aa:d2:2b:aa:be:e7:4b:94:
9a:65:ff:1e:85:34:10:27:74:3c:49:56:69:81:81:78:dd:14:
28:0d:71:e8:5e:97:f5:1d:bc:66:e4:20:ff:c5:50:37:5f:9d:
5e:b2:51:5a:38:6c:75:cc:b1:4c:87:6a:39:0e:48:db:42:02:
84:1d:19:f7:6e:c3:16:d5:8e:2d:70:d0:2a:4c:0c:6f:80:09:
02:81:a8:c2:34:48:e9:76:6b:d8:a9:eb:0a:b9:3a:ff:7f:c9:
c4:84:fd:46:d9:94:4a:b7:86:dc:d7:af:61:9a:2d:25:ea:be:
3c:67:2d:6b:08:83:bd:76:61:e6:ca:ee:ef:8c:e0:52:51:e0:
ff:73:47:e0:53:ca:b4:5e:57:22:5c:1e:f8:21:68:96:76:8c:
17:d7:91:d5:98:4c:66:af:40:aa:1f:4e:91:93:93:08:c5:b0:
a7:c3:7a:2d:e3:5c:ad:51:90:96:96:bc:73:84:7b:ce:e4:11:
89:ae:dc:c0:9d:e3:a3:c6:09:ad:d7:af:92:cb:f2:ce:1f:ed:
1d:88:6d:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz
QTUzOTcwMjQwHhcNMjYwMjI4MTY1NTI2WhcNMjYwMzA3MTY1NTI2WjAYMRYwFAYD
VQQDDA02OWEzMWRmZS03ODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzr/iiiYNaj5h5LnxI8U64WsNzLFctYw7mjVlnMbn3V6iOckXjWukVrDU0fx2
N8IIymFWvImO2QDCFSsi2Zod4bi3VReT+HCg7uGMNyd5ql1KhQ1IFGMqatAmUmnw
fqPn/Jaj99dRCgnjHjF+1Amv0ajKEejN1yIjaCyORr21lCSOoebLa0+b/BSGt30b
vuBsNVipnpMBz0cGDBzjnwES4ktRmGf5KeX/bV0hUpyio9/L1z8LyEgvp7+LMb/8
OJTYu6+HOjOB+nfL2deAgSBBt0F7DEtdQhoLE1QtEI4YJqXinH3oyr3eDtE5pCTg
IXXPu/E0cC48k05eGov50xwCUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFI0D6/X
oV1mM+y0Ql8U5sXpJ6GxMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0
RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw
czg5NVBRRXZlTjA2VTVjQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAz7w5ahmhMCTwhSCvdKhRRhQTTEHyR6PqZ8NmR3wnG807tltIbSpREFForEAj
OarSK6q+50uUmmX/HoU0ECd0PElWaYGBeN0UKA1x6F6X9R28ZuQg/8VQN1+dXrJR
WjhsdcyxTIdqOQ5I20IChB0Z927DFtWOLXDQKkwMb4AJAoGowjRI6XZr2KnrCrk6
/3/JxIT9RtmUSreG3NevYZotJeq+PGctawiDvXZh5sru74zgUlHg/3NH4FPKtF5X
Ilwe+CFolnaMF9eR1ZhMZq9Aqh9OkZOTCMWwp8N6LeNcrVGQlpa8c4R7zuQRia7c
wJ3jo8YJrdevksvyzh/tHYht7g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:16 2026 by rpki-client