
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
File: 07yEKALa0i1cMMKCZffRCL1HjnA.mft (raw, json)
Hash identifier: bCQ5p41Zy6Ckh6BvuoxzjDgGIogSx5oi19GBICZQX7s=
Subject key identifier: D4:3F:F1:1D:53:58:68:B2:F3:28:11:F3:63:3D:8B:02:1E:38:B5:87
Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70
Certificate issuer: /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
Manifest number: 017B
Signing time: Sun 01 Mar 2026 05:39:11 +0000
Manifest this update: Sun 01 Mar 2026 05:39:11 +0000
Manifest next update: Sun 08 Mar 2026 05:39:11 +0000
Files and hashes: 1: 07yEKALa0i1cMMKCZffRCL1HjnA.crl (hash: w+W2iQdx8IclRX3bv7hVk4nUW7tBWxvOG+RhPjW2HnM=)
2: 675CAE1C097B11F089FAE77FC4F9AE02.roa (hash: g8goRa5uN0098PK1vnqVTndrxAdY1S5JKnq752ZsLOQ=)
3: C63D0814097B11F0B1329480C4F9AE02.roa (hash: BxZpcifR3l7qhnt+56VpPmZ3hTQmgPYYxX/h3b9rorE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl
rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70
Validity
Not Before: Mar 1 05:39:11 2026 GMT
Not After : Mar 8 05:39:11 2026 GMT
Subject: CN=69a3d0ff-ab6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:8d:23:48:fc:68:28:a2:bb:d8:61:53:b3:
73:3d:e5:07:ac:de:dc:e5:92:66:62:15:87:96:a7:
27:fa:f1:d5:1c:45:c3:b6:bb:53:4d:d9:47:95:55:
e7:6a:ae:5f:96:f8:cc:f3:68:0b:67:7c:5a:a1:d9:
c7:ba:64:9b:54:dc:95:02:4c:48:0f:07:58:e0:9e:
89:7c:ae:c9:a6:e6:12:c5:ce:aa:8b:c4:e6:eb:2d:
51:88:fe:d5:2c:0c:f9:07:7f:a0:a8:1e:60:c8:b3:
81:41:6c:83:ec:ba:39:cd:e6:b2:24:41:a4:5c:9d:
18:97:86:ac:c0:d8:65:ad:35:ce:31:8f:53:9b:fe:
95:ee:9b:78:4b:d5:65:99:f2:7e:ec:3c:42:0f:65:
5b:7f:9e:58:cc:fa:83:0b:90:d7:c4:eb:b0:25:b0:
ce:f3:66:b5:ed:ec:91:b3:19:be:c0:3c:7e:40:e5:
69:9f:65:b7:8a:1f:a3:5e:43:94:80:21:03:ba:d9:
f5:1f:e3:43:60:16:11:3f:41:dc:1a:a3:84:74:cf:
51:82:c3:93:6c:78:a1:87:bb:7b:9f:f7:89:86:96:
91:a9:b5:a5:85:78:f3:f6:15:76:0e:25:f7:6f:03:
ce:fe:bc:4b:7e:99:c2:12:3e:07:93:90:cb:fc:2c:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3F:F1:1D:53:58:68:B2:F3:28:11:F3:63:3D:8B:02:1E:38:B5:87
X509v3 Authority Key Identifier:
keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:b9:2f:e1:e9:12:88:f5:ec:7a:05:c2:e4:81:c6:45:12:72:
72:e4:91:3e:45:b8:63:0e:6b:ac:28:36:5a:8c:73:9c:ad:fd:
3b:61:25:81:29:7e:68:cc:8e:18:62:1d:90:46:67:2c:59:42:
25:9b:9f:a0:dd:4e:ac:72:22:c7:e8:fb:dd:81:80:65:87:59:
70:21:b8:ef:45:d6:e6:4b:01:37:81:a0:09:2f:00:d9:c5:51:
53:d1:11:5d:33:fd:d9:9c:58:54:e9:ff:b4:a9:3a:43:96:d0:
45:a1:48:83:c2:29:e4:35:31:7e:34:b3:cc:95:4a:75:ca:8a:
e4:94:4d:cb:cb:91:02:47:0c:07:c1:18:f5:e5:d8:68:54:b7:
66:20:86:28:6f:6a:2e:00:91:70:aa:b5:43:bf:d4:66:c9:b4:
44:dd:0a:af:b9:32:d4:f5:2d:3d:9e:18:e2:26:f6:c2:4c:ca:
36:29:b6:65:eb:f0:5f:f6:45:65:e1:8f:86:e0:94:bf:43:1f:
22:2c:c4:76:b2:de:17:7e:4f:79:77:54:1b:e8:dc:ea:25:3c:
ef:f4:0e:9f:e1:e5:d6:b2:d8:d9:0a:a3:78:57:eb:81:ad:c0:
a9:fb:a1:21:3f:3c:6e:25:00:4f:75:1f:c9:15:b5:90:b3:e7:
1f:78:db:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc1OEUxMTAvBgNVBAUTKEQzQkM4NDI4MDJEQUQyMkQ1QzMwQzI4MjY1RjdEMTA4
QkQ0NzhFNzAwHhcNMjYwMzAxMDUzOTExWhcNMjYwMzA4MDUzOTExWjAYMRYwFAYD
VQQDEw02OWEzZDBmZi1hYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtiCNI0j8aCiiu9hhU7NzPeUHrN7c5ZJmYhWHlqcn+vHVHEXDtrtTTdlHlVXn
aq5flvjM82gLZ3xaodnHumSbVNyVAkxIDwdY4J6JfK7JpuYSxc6qi8Tm6y1RiP7V
LAz5B3+gqB5gyLOBQWyD7Lo5zeayJEGkXJ0Yl4aswNhlrTXOMY9Tm/6V7pt4S9Vl
mfJ+7DxCD2Vbf55YzPqDC5DXxOuwJbDO82a17eyRsxm+wDx+QOVpn2W3ih+jXkOU
gCEDutn1H+NDYBYRP0HcGqOEdM9RgsOTbHihh7t7n/eJhpaRqbWlhXjz9hV2DiX3
bwPO/rxLfpnCEj4Hk5DL/Cy5PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQ/8R1T
WGiy8ygR82M9iwIeOLWHMB8GA1UdIwQYMBaAFNO8hCgC2tItXDDCgmX30Qi9R45w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9EREVDODEyNEQ1
M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBpMWNNTUtDWmZmUkNMMUhq
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzA3eUVLQUxhMGkxY01NS0NaZmZSQ0wxSGpuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzU4RS9EREVDODEyNEQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBp
MWNNTUtDWmZmUkNMMUhqbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcrkv4ekSiPXsegXC5IHGRRJycuSRPkW4Yw5rrCg2WoxznK39O2ElgSl+aMyO
GGIdkEZnLFlCJZufoN1OrHIix+j73YGAZYdZcCG470XW5ksBN4GgCS8A2cVRU9ER
XTP92ZxYVOn/tKk6Q5bQRaFIg8Ip5DUxfjSzzJVKdcqK5JRNy8uRAkcMB8EY9eXY
aFS3ZiCGKG9qLgCRcKq1Q7/UZsm0RN0Kr7ky1PUtPZ4Y4ib2wkzKNim2ZevwX/ZF
ZeGPhuCUv0MfIizEdrLeF35PeXdUG+jc6iU87/QOn+Hl1rLY2QqjeFfrga3Aqfuh
IT88biUAT3UfyRW1kLPnH3jbfQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:56 2026 by rpki-client