
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
File: _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json)
Hash identifier: GLU154G9gyi7unr5j52+SnNKVWR94TmcutjkeCJQ16Y=
Subject key identifier: 72:C7:2E:B4:D0:A7:4F:7E:0D:8C:F7:EA:9D:A3:CC:D5:A1:17:D1:42
Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
Certificate issuer: /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
Manifest number: 0276
Signing time: Sun 01 Mar 2026 02:31:03 +0000
Manifest this update: Sun 01 Mar 2026 02:31:02 +0000
Manifest next update: Sun 08 Mar 2026 02:31:02 +0000
Files and hashes: 1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: IncUGlZMoNNtzDWIHR2L8Cun9BiAPre/FejG6lLE/ew=)
2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: ih5APdD+Nurby0NtdsRTrQ51xACa7dPtth9SlQyC+ow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Validity
Not Before: Mar 1 02:31:02 2026 GMT
Not After : Mar 8 02:31:02 2026 GMT
Subject: CN=69a3a4e7-17ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:aa:02:8d:12:b7:26:a1:2a:2c:3a:91:2f:
e1:18:67:28:b8:19:75:03:51:c1:9f:72:85:6e:a6:
52:7e:b8:d6:7d:f8:e1:ff:02:de:09:e0:75:c8:e1:
be:b5:53:5a:54:75:e9:0f:9d:33:4c:1d:bf:57:69:
ad:62:b6:f7:67:7e:c2:e5:de:52:73:bb:74:15:3e:
c8:73:ff:e3:16:4b:37:fc:eb:9e:08:48:fb:a2:bd:
7c:de:e7:ea:8e:41:54:30:5a:41:a5:44:5b:7f:15:
12:2e:59:70:50:2a:ec:24:25:80:5c:63:ff:b4:69:
cc:8c:c9:3b:29:f3:92:a4:10:29:59:9d:b9:6c:3d:
12:82:70:60:09:13:91:a7:f0:4e:1c:00:f5:22:ed:
a1:2e:3f:ce:9e:b1:4e:63:f4:59:c3:80:dd:6c:32:
a4:33:0a:60:5e:37:a1:70:8e:53:d5:7f:d8:c3:e5:
d3:6a:65:41:bc:f2:72:8c:ef:ed:37:d5:54:39:60:
fb:fc:18:8b:56:6b:6d:40:db:b3:0b:66:74:b7:04:
94:5b:5f:c8:d3:79:97:3e:de:4d:06:f1:9d:9f:a7:
b3:8a:e7:c2:e7:6c:1e:1e:ee:26:8f:18:43:1d:55:
f5:79:69:f7:03:8c:bf:df:e6:9c:2d:d5:01:f4:85:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C7:2E:B4:D0:A7:4F:7E:0D:8C:F7:EA:9D:A3:CC:D5:A1:17:D1:42
X509v3 Authority Key Identifier:
keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a9:c0:0b:a3:26:40:ad:a7:43:73:38:0f:fc:82:4d:fa:f7:
99:fb:cf:16:d5:95:09:eb:f6:fb:f2:5e:ac:75:e1:ce:75:d1:
b9:d3:71:45:9b:e6:e9:61:f3:57:11:ef:dc:7b:6a:f2:61:de:
f9:19:e4:95:61:04:48:3b:e0:fe:01:98:c3:4b:9b:3a:83:2b:
9e:c0:c0:6a:a8:0e:54:8f:ed:42:7b:99:67:4d:6e:bf:a5:c2:
11:0f:16:7c:5d:f0:98:85:70:8e:f6:87:93:76:b6:1d:c9:33:
9e:99:f9:98:30:31:2d:4b:d8:f8:98:7c:50:4a:00:7d:73:92:
f3:e1:7e:95:a8:f9:1e:7c:bf:06:04:4a:a8:6a:1f:59:88:9f:
f6:4a:c0:14:c3:e5:56:db:10:70:a9:25:95:77:e8:98:19:d3:
cd:a4:43:d4:14:04:ee:44:92:5e:c3:8a:6a:6e:34:69:e5:eb:
3e:b7:5f:68:e1:3f:c2:29:ce:d8:82:65:eb:a5:f4:48:84:89:
ae:0f:72:21:03:a0:5d:58:67:70:d9:ae:92:ec:13:32:38:e8:
f0:7d:3d:f8:bb:94:cd:74:7e:b2:bc:e5:86:b0:72:d7:5a:ed:
d8:a1:99:ab:8f:65:d8:2d:7f:90:b5:0f:ef:5c:a1:37:31:95:
6e:a3:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:12 2026 by rpki-client