
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json)
Hash identifier: +o/0kxSdK3NKKUTW9x0oqqdg9LgUzkEOmQvGcTKGbs0=
Subject key identifier: A2:AD:5F:78:7D:CC:73:B8:83:04:D4:7D:EB:59:11:F0:F5:01:83:C7
Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0
Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0
Certificate serial: 0B45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
Manifest number: 0B38
Signing time: Sun 01 Mar 2026 23:58:00 +0000
Manifest this update: Sun 01 Mar 2026 23:57:59 +0000
Manifest next update: Sun 08 Mar 2026 23:57:59 +0000
Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: b4cGCwHA8rMzBiax4Og00NStOkecwUZGYjac2CU/J8c=)
2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: +st27elALIXiojhiC9FHNHsNEPCBH2UpM0yqSGe64g4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl
rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2885 (0xb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0
Validity
Not Before: Mar 1 23:57:59 2026 GMT
Not After : Mar 8 23:57:59 2026 GMT
Subject: CN=69a4d288-b9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:26:59:28:55:17:d2:23:49:f2:f9:1a:40:
d5:81:2b:e2:8d:76:7c:fa:8c:7f:53:95:e7:50:e4:
78:a5:66:19:68:74:c8:90:78:4a:06:4a:1a:05:53:
3b:dd:40:a0:81:e1:2d:6c:ab:2a:b0:ff:29:cb:5c:
dd:25:3e:d9:d1:60:f4:de:92:4d:93:c8:76:48:ce:
ba:04:38:c5:46:36:67:3b:af:c4:ea:42:53:92:e1:
d5:45:bc:db:3b:af:39:79:04:20:16:fb:ad:d8:62:
5c:bf:36:70:d7:77:7b:3a:f0:30:07:5f:b3:71:0f:
e0:07:05:1e:f9:21:33:d1:72:f1:f3:28:2e:cd:d0:
8c:3a:e6:5c:74:47:60:2d:e3:d8:76:a9:af:61:6f:
f9:8c:62:67:7b:e8:b7:c8:ca:c3:cb:8f:ae:2d:3f:
8d:42:24:f9:16:19:3e:e2:1f:08:73:a2:56:d9:65:
ca:39:4c:98:e3:17:cc:81:24:ca:7d:04:d0:99:8b:
45:3e:81:da:4a:54:5f:40:d2:2d:c8:99:43:0a:92:
9e:d3:c5:9c:4e:84:57:29:27:86:95:0d:25:b5:d6:
65:b4:aa:7e:e7:9f:56:86:6b:bf:48:1d:39:d8:16:
c2:44:2e:20:f5:13:4a:a6:81:c6:48:0f:4e:57:1c:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AD:5F:78:7D:CC:73:B8:83:04:D4:7D:EB:59:11:F0:F5:01:83:C7
X509v3 Authority Key Identifier:
keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:ff:da:8c:e6:89:85:34:a1:12:fe:8f:5b:c9:dd:f8:b0:57:
01:9d:a5:d5:ca:96:81:51:49:72:f2:92:31:2e:66:b8:06:0f:
af:e7:e1:e5:ba:96:3f:2a:61:40:29:e0:0d:87:09:3a:1b:54:
80:b7:de:f7:4b:09:cd:ce:2a:19:5a:b9:33:f2:55:ee:1c:1d:
63:9d:2f:f0:71:46:f0:c4:14:2f:ac:9c:72:c3:04:4a:2d:f0:
a3:0d:7c:cc:67:b0:85:db:2a:d5:a9:a2:ea:ac:5e:85:ff:84:
bf:63:71:26:fa:bd:c4:4c:85:9c:ae:37:9c:02:fb:1a:f5:db:
5b:46:93:ca:36:27:56:7d:94:57:74:69:33:13:d7:7f:b0:5a:
9c:5b:82:26:98:14:5d:ba:59:36:29:46:c1:26:1d:bb:86:94:
00:44:50:65:16:78:62:94:9f:7f:16:87:f4:88:1e:41:43:88:
a8:54:fe:e1:ab:d8:be:59:b3:1e:f3:11:ea:38:18:6a:4e:0c:
3d:8a:5b:fc:f8:3c:a5:60:17:30:bc:41:f2:16:7a:8a:ef:5d:
15:d6:7a:8d:72:8b:78:dd:7b:07:e7:12:83:6c:8c:1d:45:d9:
74:f3:6a:8e:2f:4c:7c:5a:52:d8:e1:e7:30:8f:b5:c4:65:26:
05:24:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:06 2026 by rpki-client