
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier: GqHwLGvrU9tSsaoLgynLZMfuEdkSlenl48CpSJ97fmc=
Subject key identifier: D8:51:33:E1:9A:B6:A1:62:F1:5E:00:1A:AB:34:5C:74:2A:A9:93:F0
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial: 351A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number: 3516
Signing time: Sat 28 Feb 2026 15:17:05 +0000
Manifest this update: Sat 28 Feb 2026 15:17:04 +0000
Manifest next update: Sat 07 Mar 2026 15:17:04 +0000
Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: WroyR4MOnH4eCzrsb6rvsX6KYaunTYlk2fpRLsw72No=)
2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: u0SIiLxxmi81N8BSICKYYu8IJ84iSOv3GERY4hpV5jk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13594 (0x351a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Validity
Not Before: Feb 28 15:17:04 2026 GMT
Not After : Mar 7 15:17:04 2026 GMT
Subject: CN=69a306f1-a95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:9f:04:e4:86:16:c1:98:2f:86:30:ca:2f:
08:78:45:8f:c7:85:9b:0a:e9:80:51:ea:ee:0b:cd:
9e:e1:12:fa:fe:5a:a9:57:04:b2:66:3d:c1:e3:29:
63:ec:90:35:32:86:4a:90:fc:ab:d1:86:a7:04:b6:
13:06:d7:3c:5e:2d:9a:bf:20:8e:f4:c0:09:18:d4:
c0:57:1f:b5:71:ab:76:7b:dd:26:fa:ab:38:6f:e8:
a1:59:33:c5:f0:53:91:38:cc:ee:b1:b8:f9:41:6a:
32:1a:18:f8:bf:1d:70:1a:3f:90:fe:31:7f:7a:42:
33:33:93:0d:b6:ac:e8:d0:17:a9:b4:45:37:48:b3:
b9:71:bb:fe:7b:13:a3:86:96:dd:bf:5d:6d:17:83:
56:0d:fd:7a:51:2f:51:90:b8:03:db:e5:a4:82:46:
e4:c2:76:92:f5:ed:71:ee:07:13:59:53:0d:bb:03:
cf:2b:f5:53:f4:f1:91:c0:e8:a3:46:e6:34:c0:be:
a5:ab:f9:08:85:a5:cc:b9:68:da:8a:23:38:f1:6c:
ba:89:51:2d:35:2f:52:82:42:89:37:af:00:8e:45:
f8:8e:bb:f5:37:07:74:53:a0:c0:41:eb:ec:f3:9a:
86:77:38:14:01:e0:49:b5:d2:1d:3a:0c:47:21:8e:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:51:33:E1:9A:B6:A1:62:F1:5E:00:1A:AB:34:5C:74:2A:A9:93:F0
X509v3 Authority Key Identifier:
keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ba:27:a2:f6:df:85:0a:38:c0:6b:64:91:38:fd:10:00:6d:
5e:92:18:6e:b6:70:1d:89:26:ab:94:3f:47:5e:1c:70:81:88:
f3:86:70:5c:39:e0:c0:c3:27:5a:d5:ee:8b:79:07:45:02:fb:
91:2c:50:e5:10:53:88:0e:6f:4c:b2:46:8c:6f:99:d2:70:b7:
48:e7:f7:12:d3:65:e1:8b:30:df:0a:a1:0e:80:3a:9e:82:2b:
87:77:e4:13:d3:ac:f4:d2:ab:2e:7b:b9:e2:10:fb:99:28:43:
a0:1c:78:c5:ad:c7:2e:05:b4:dd:96:64:5e:c5:52:7b:85:b5:
c7:41:13:bb:32:9f:51:92:43:a6:c4:af:40:05:14:17:f7:c3:
2c:d8:9b:54:32:71:4e:91:a0:df:4b:c2:b6:82:74:62:4d:bd:
f1:48:37:16:04:1a:6e:75:73:0f:64:1f:85:ef:25:77:eb:50:
b5:79:1f:bc:43:9f:59:70:3d:23:98:6f:e4:7b:f9:7c:94:d7:
b8:c5:9c:25:c9:7e:75:ca:32:a5:08:ce:30:5b:23:ec:13:e1:
c4:bb:b2:56:d1:dc:bf:0f:29:b8:67:cc:1d:bb:6a:c2:ab:24:
2e:22:09:5f:82:d7:93:3b:24:5f:e7:6f:e7:28:3e:f1:19:b3:
13:13:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:53 2026 by rpki-client