
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
File: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft (raw, json)
Hash identifier: c7i+Rmv3Ff18xXplX1G8fCv99lIH3ScCHy1u15bcOo8=
Subject key identifier: 5E:E3:CD:8C:E4:4F:9A:35:3B:95:0D:73:5C:26:C3:3D:51:74:3C:F9
Authority key identifier: A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56
Certificate issuer: /CN=A91B65AC/serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
Manifest number: 0175
Signing time: Mon 02 Mar 2026 14:03:50 +0000
Manifest this update: Mon 02 Mar 2026 14:03:49 +0000
Manifest next update: Mon 09 Mar 2026 14:03:49 +0000
Files and hashes: 1: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl (hash: rZi5RqzF0NRqD/pxiP5Z0es+0SBB/Q2rQaGev8vIXVw=)
2: 48005D9EE5AE11EE9ECE4023C4F9AE02.roa (hash: MHs0B8I4CuKc8GF3uupBZqS6i8jGoDZnRz2FF9G3jmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl
rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65AC, serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
Validity
Not Before: Mar 2 14:03:49 2026 GMT
Not After : Mar 9 14:03:49 2026 GMT
Subject: CN=69a598c6-47af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:f0:c5:45:9c:1f:b6:1a:a3:34:fc:d6:ca:
c2:25:80:d6:96:b8:a2:52:61:a5:ec:f2:0e:79:8f:
ee:9e:3b:5f:06:70:b4:f8:8c:96:bd:4d:f6:18:1b:
ae:cf:61:52:34:75:f2:ff:c2:c0:b6:4a:b4:8d:53:
a6:6f:4f:73:df:f3:41:08:11:bd:98:ea:40:37:26:
1f:14:31:15:2d:b4:a2:ee:60:f9:d4:1b:d5:35:2a:
15:5f:60:ce:07:bd:58:a6:4b:96:51:47:39:d3:e6:
c8:68:67:28:24:cb:3e:94:ca:dd:f4:63:6b:fc:39:
dc:d5:f0:5f:45:f2:d6:46:84:77:2d:63:55:4f:19:
d6:54:8f:e0:0f:88:f6:02:5c:2e:6c:62:2c:0d:cb:
14:7b:e0:19:72:1c:13:3b:4f:48:94:7d:8d:b7:95:
a9:0b:af:5b:07:de:ad:b7:80:03:3e:48:b1:8c:f0:
eb:88:60:ae:20:70:c8:da:1c:0f:fb:eb:74:4e:cc:
70:cb:39:a8:1b:d9:31:be:91:67:ee:40:71:e7:e4:
d2:71:f4:29:8e:5d:3e:af:d1:e0:ab:ec:f5:26:64:
1b:b7:20:8e:3d:a6:84:e8:54:71:f2:7b:6a:98:21:
da:c5:ec:17:83:fd:f9:38:05:fb:df:47:b5:6a:6a:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E3:CD:8C:E4:4F:9A:35:3B:95:0D:73:5C:26:C3:3D:51:74:3C:F9
X509v3 Authority Key Identifier:
keyid:A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:14:af:31:3e:e0:75:3f:51:bc:2b:22:da:a1:a5:ef:c6:39:
4f:0d:72:22:ea:e4:b3:4d:3a:e8:a6:f3:87:4e:5f:a5:b9:ec:
4c:43:72:3d:1b:38:ae:5c:59:4a:16:10:64:af:38:07:54:a9:
83:6c:08:2d:64:3a:68:02:b8:9d:71:00:ae:13:96:17:6c:35:
9a:a5:f9:14:af:5d:fb:fc:1c:29:bd:38:85:fc:bc:40:2b:da:
f7:ac:47:62:04:00:f9:3b:51:4b:bd:26:48:ea:fb:02:2b:60:
ad:10:45:3b:33:a1:13:ba:d6:b6:23:1f:5a:2d:86:a9:26:7d:
73:9f:02:d5:4b:da:29:36:04:e4:77:9b:c6:9b:1d:fd:48:72:
83:6c:f4:c2:47:c1:2f:ea:86:a2:f1:f4:37:81:94:db:1a:a8:
eb:93:5e:3f:15:d8:3c:8f:4e:d8:76:cd:ca:e1:e2:40:43:19:
02:5d:26:dd:42:73:ff:2d:54:7f:7e:54:01:31:c5:5c:a6:38:
78:ed:9c:f1:61:b9:6c:6e:2c:4b:ec:63:9f:78:7a:c1:66:29:
83:fe:62:82:e5:8c:02:b9:06:1f:d0:61:10:2c:40:04:b6:53:
07:6d:96:8c:2a:dd:eb:c1:d5:06:54:42:fb:f4:4a:c5:36:35:
ce:25:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:34 2026 by rpki-client