
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json)
Hash identifier: dJO0Rmn5+QMHsJEUtoK2erL69nfe1ieNAJBUNFx5V9U=
Subject key identifier: 86:9D:AD:95:77:04:7C:D9:94:E5:87:E4:AE:AD:1B:EF:8A:8C:AE:D1
Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88
Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
Certificate serial: 061D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
Manifest number: 0618
Signing time: Sat 28 Feb 2026 23:21:17 +0000
Manifest this update: Sat 28 Feb 2026 23:21:16 +0000
Manifest next update: Sat 07 Mar 2026 23:21:16 +0000
Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: TkS52TsA3tpYGIgcxHMuYwRBYSmGD47ekSuYVrvpf7A=)
2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: 6nBsIW1FtTa2lY5be/el75WgarvUxw35P+urmn+K7Hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl
rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
Validity
Not Before: Feb 28 23:21:16 2026 GMT
Not After : Mar 7 23:21:16 2026 GMT
Subject: CN=69a3786d-9f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:64:54:a7:58:48:95:bc:90:66:3e:6d:2a:
8f:74:31:a5:b6:f5:6c:f8:ce:bd:f8:88:01:fa:3d:
d2:5e:7f:95:64:20:31:45:93:01:aa:9a:23:d9:a2:
3e:c7:7e:76:14:32:d0:9c:6b:9e:ad:ae:08:5d:60:
b5:c5:24:a3:b4:6e:26:46:9b:5f:99:11:79:de:26:
72:8d:b0:b0:1d:f4:c3:3a:e5:4c:e7:01:49:7c:6e:
19:f5:42:3d:4c:ec:c0:72:49:87:e3:d6:65:5c:51:
60:85:4f:4d:5f:91:91:8a:63:46:bb:9d:85:e4:45:
01:e3:56:ad:e6:0f:80:94:31:b5:b1:c3:50:91:67:
22:20:5d:01:8e:fb:26:53:b4:09:fc:b4:c5:d4:04:
7e:e5:4e:c8:a2:f8:41:5f:dc:d3:07:58:77:d1:ba:
6f:d0:0a:ca:56:67:c8:c3:b3:86:f7:f8:6c:87:6e:
55:1b:0a:38:d8:2a:60:4c:39:52:19:83:29:b1:59:
a2:0d:7f:d4:38:ba:a4:64:c8:7a:44:20:80:66:31:
e4:77:b8:d4:af:58:ba:c8:fa:d3:f2:3f:a9:86:86:
33:86:25:86:05:4e:1f:0a:92:e6:53:85:8b:54:d2:
24:e9:0c:2f:b6:d7:b9:38:d2:52:95:d5:df:33:db:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:AD:95:77:04:7C:D9:94:E5:87:E4:AE:AD:1B:EF:8A:8C:AE:D1
X509v3 Authority Key Identifier:
keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:c4:3f:57:90:0e:d7:23:e8:03:4f:1d:cd:a7:7f:ab:6e:b2:
89:32:57:93:6d:e3:9a:1e:df:43:ae:d9:5d:fc:52:20:0c:89:
8d:5a:50:da:00:b1:ca:72:d4:f8:bc:e8:ff:44:7b:3f:a4:fa:
f3:09:23:04:52:7c:b8:8b:31:d0:74:f3:40:e6:04:09:56:77:
3e:b1:d1:54:a2:2e:4d:be:95:d3:12:7c:ee:8e:3c:22:54:ff:
93:b5:d2:b1:de:f8:af:e0:6b:e2:e4:f8:55:99:e8:98:b1:61:
d3:9f:80:00:fa:3b:a8:49:dc:e4:02:76:62:bd:c8:2f:dd:68:
c5:8d:98:d1:25:0e:2f:58:c5:31:f3:5e:e0:6a:b4:ca:2d:7c:
95:f5:b1:ee:22:92:63:54:c4:b2:78:56:01:79:df:9a:4b:a3:
47:8b:e3:89:73:05:e5:8c:bb:b8:fb:17:1a:28:d2:be:09:9a:
65:58:ac:ff:12:55:48:b0:62:2d:e7:80:e2:97:83:07:8d:f1:
27:18:f6:a7:9d:a4:fc:20:75:40:0c:12:1d:96:76:9a:25:3d:
58:07:f6:29:cb:73:c3:cf:b3:11:7a:24:ae:1c:ff:1b:65:13:
20:51:b0:8b:6e:e9:60:d4:ef:59:89:25:ea:d2:48:eb:5d:84:
b4:74:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:31 2026 by rpki-client