
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File: S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier: c8s+LIoAYPK15VRM0XUMoMrSLYoCVseMwPU5Lq8j6ZU=
Subject key identifier: 39:C0:31:7E:BF:87:1B:B4:49:50:6E:EC:EA:3C:FC:8A:A2:8A:90:5C
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial: 0716
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number: 070D
Signing time: Sat 28 Feb 2026 22:27:19 +0000
Manifest this update: Sat 28 Feb 2026 22:27:19 +0000
Manifest next update: Sat 07 Mar 2026 22:27:19 +0000
Files and hashes: 1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: sBNZvSLLrh953vT8wWpu0UrZIDEPdg8GzBoOMtJR9KY=)
2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: iVoQ4DzarwOJUrSELiNWak+s+ohZp/LfOai+uGXnZZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814 (0x716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Validity
Not Before: Feb 28 22:27:19 2026 GMT
Not After : Mar 7 22:27:19 2026 GMT
Subject: CN=69a36bc7-2b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:64:e6:fe:50:93:3c:6a:35:6c:25:42:55:
7d:49:e2:1a:48:40:e0:38:2d:75:ff:14:2a:49:c3:
f2:58:5c:23:e1:d0:48:92:b1:e4:92:51:21:75:c6:
12:d5:74:cf:6c:fe:a2:69:b5:86:85:95:35:eb:b9:
fd:86:1f:2d:f6:45:e2:28:49:ff:44:e8:8d:90:c6:
0d:68:4a:15:e6:59:fa:e9:b7:3e:5c:cd:13:6d:06:
7a:1a:e9:a9:a2:09:24:e9:74:15:53:64:b4:3a:75:
9e:ab:85:1a:21:f9:6e:2f:75:7c:7d:84:b9:af:4d:
b7:bb:05:c5:0f:47:9f:f5:cb:33:e1:a7:d1:ce:b2:
0a:d9:81:60:dc:b9:b4:9b:68:08:5a:61:8e:5e:a6:
17:48:a1:cb:7f:11:97:b2:26:42:87:ef:10:9e:d1:
97:94:38:77:ca:a6:ba:bc:34:85:bf:65:81:10:7e:
0e:8e:bd:55:a5:7e:54:45:6a:cd:78:de:4e:99:59:
30:67:6d:12:24:02:88:61:88:26:e9:15:57:1e:f5:
77:77:b1:c1:99:bf:32:a2:85:ba:98:cc:c0:9f:8a:
74:22:0d:83:42:85:c3:01:3b:5e:f8:46:f9:73:3e:
d1:f1:ef:18:84:7d:14:25:1b:74:2f:ab:a7:97:4b:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C0:31:7E:BF:87:1B:B4:49:50:6E:EC:EA:3C:FC:8A:A2:8A:90:5C
X509v3 Authority Key Identifier:
keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e1:df:b8:43:bd:e7:b1:81:9e:08:bd:2c:c3:3b:e2:26:16:
19:25:af:76:50:fb:d0:37:8c:6a:b5:17:bd:33:90:e6:89:17:
f9:3b:73:cd:a4:10:0e:ad:29:26:4a:2b:e0:53:cf:c2:0e:48:
2f:8f:34:71:ac:5e:14:87:f2:ec:4c:32:a4:04:93:84:a2:a0:
e6:a0:91:bc:cb:35:6b:48:a0:cf:8b:b7:b3:fa:91:b0:ea:49:
59:3e:75:1e:15:5e:32:c2:31:20:2a:9a:5b:49:ee:7e:b0:80:
f5:9e:4b:b5:21:fe:71:18:b8:59:1b:4d:07:83:b3:3f:61:d2:
de:5c:dc:32:23:46:91:d9:62:86:2e:96:f8:87:79:ab:8d:92:
fb:7d:e8:c3:fb:4f:54:f4:c7:03:2f:74:38:56:79:3d:28:6c:
49:55:04:e0:a4:3c:df:5b:6b:37:19:36:4a:f3:8a:b9:1e:b9:
8a:f7:bc:78:9c:b1:87:38:21:96:bd:ea:e6:7e:29:be:38:d2:
bc:1c:bf:7e:c3:9a:0c:38:70:8c:cd:d6:26:1d:1f:15:6b:1f:
06:b8:3d:db:cd:8c:18:6f:cc:c0:26:ac:40:90:a6:03:85:68:
d6:8c:bb:da:03:b9:cc:35:cf:43:a3:e3:19:06:00:96:62:ee:
90:60:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:31 2026 by rpki-client