
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier: p1Jz87tsVTngzWtkCTOr+pqshqZD0hpkyLr4ZyVZ6BU=
Subject key identifier: 2E:D8:C6:81:3F:68:10:02:9A:0A:CD:C0:C0:DC:20:E7:9A:AC:8D:AD
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number: A7
Signing time: Sun 01 Mar 2026 23:52:41 +0000
Manifest this update: Sun 01 Mar 2026 23:52:39 +0000
Manifest next update: Sun 08 Mar 2026 23:52:39 +0000
Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: Hl5u9cUgKAU7kWDf9AFPzkt2VynbiDhJnTh+WP8Z+Gg=)
2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: Wv3Hw56ZpmiR46v0hXlQur/T4NvoJ9rmr1BmJ2RxWtU=)
3: 7020A3F6FB6411F0B417A8544B6F56BC.roa (hash: 0uJQxDpAOHaABeJ25wfn3VTH/VdzhDmcRhWseG4IhVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Validity
Not Before: Mar 1 23:52:39 2026 GMT
Not After : Mar 8 23:52:39 2026 GMT
Subject: CN=69a4d148-1fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:2e:1a:91:57:44:19:63:92:0c:85:e2:37:
02:b8:73:b3:39:d8:ea:40:65:cc:36:bf:13:9f:78:
f3:70:1d:cb:33:38:55:60:68:f1:79:05:f6:4a:91:
47:6b:64:94:ec:07:98:00:23:c5:c3:b5:14:a7:cf:
91:bb:49:78:99:cf:cf:20:01:62:29:15:a1:85:03:
15:37:fd:91:68:98:3d:4e:18:83:ea:8d:66:74:8f:
d7:85:e0:18:d1:65:e4:92:1e:68:95:b4:ef:83:84:
e8:9e:35:55:b5:f2:80:f0:ac:4c:ec:d6:13:24:5a:
fc:df:bf:8f:0f:9f:08:31:18:ef:bc:f9:37:45:ff:
35:44:3e:d0:bb:1d:d7:e9:48:71:1c:85:51:d2:c8:
b9:0f:28:a8:a0:29:5d:40:af:e5:29:e4:ad:ec:b0:
48:ed:74:36:da:76:14:c6:49:49:09:78:54:a9:24:
e8:7c:cc:b7:70:a1:59:5d:a4:a2:8c:05:8a:7e:46:
ad:a8:6a:d6:3e:5e:ec:3c:eb:a8:04:55:66:0c:30:
7c:66:1a:8c:63:a1:0e:93:1a:cb:08:6b:71:f7:c1:
ab:bb:3f:6a:a7:70:74:6e:8f:f6:8e:21:fe:fc:71:
71:ea:80:2b:ea:cf:32:a3:05:10:3c:f7:a0:0d:2d:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D8:C6:81:3F:68:10:02:9A:0A:CD:C0:C0:DC:20:E7:9A:AC:8D:AD
X509v3 Authority Key Identifier:
keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3f:95:8a:97:c4:7d:bb:fb:0a:79:28:e2:76:35:45:5a:45:
d7:37:b7:06:ee:35:36:65:14:74:a3:33:ec:d1:49:27:a5:ab:
6d:87:5d:28:ed:ee:26:3f:da:b1:2c:bc:c7:4c:86:e4:bc:ae:
0e:98:93:6e:48:18:cf:82:b0:eb:64:39:33:b3:93:e9:d9:92:
e2:6a:79:60:35:2d:52:d1:41:73:a7:6e:c8:ea:41:0d:c8:ab:
cb:9d:7a:62:33:fe:e0:af:71:fd:4e:f5:f0:7e:d2:ef:88:c8:
a8:9e:e6:f3:27:fc:81:13:61:0d:f1:e2:01:e0:af:eb:17:5c:
02:00:b2:ac:32:2c:f1:de:a9:ed:a5:39:c0:d5:e4:22:67:0a:
2a:65:47:28:88:8c:9b:fd:e8:42:19:72:45:60:db:66:fc:1a:
6b:1a:45:bf:94:45:85:95:18:d5:4c:fd:08:85:a6:80:fc:62:
21:89:a4:34:e1:89:05:e5:83:90:29:3c:ad:f5:b1:65:de:f3:
56:77:4e:da:5f:08:a6:c4:3c:c4:c7:50:ac:86:26:98:c2:88:
99:ff:3c:b2:ad:b6:8e:a7:f6:b9:04:88:41:ab:4a:32:9d:02:
56:07:14:0f:dc:67:0e:b9:c5:9b:cf:d9:f6:20:96:a0:80:ce:
96:67:1f:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIyMjExMTAvBgNVBAUTKEFFRTE3RERCOEM2QjM1OTk2NDYxODdEMDgxRTdDOEY3
OTg4M0UxOUQwHhcNMjYwMzAxMjM1MjM5WhcNMjYwMzA4MjM1MjM5WjAYMRYwFAYD
VQQDEw02OWE0ZDE0OC0xZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApcouGpFXRBljkgyF4jcCuHOzOdjqQGXMNr8Tn3jzcB3LMzhVYGjxeQX2SpFH
a2SU7AeYACPFw7UUp8+Ru0l4mc/PIAFiKRWhhQMVN/2RaJg9ThiD6o1mdI/XheAY
0WXkkh5olbTvg4TonjVVtfKA8KxM7NYTJFr837+PD58IMRjvvPk3Rf81RD7Qux3X
6UhxHIVR0si5DyiooCldQK/lKeSt7LBI7XQ22nYUxklJCXhUqSTofMy3cKFZXaSi
jAWKfkatqGrWPl7sPOuoBFVmDDB8ZhqMY6EOkxrLCGtx98Gruz9qp3B0bo/2jiH+
/HFx6oAr6s8yowUQPPegDS1dTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7YxoE/
aBACmgrNwMDcIOearI2tMB8GA1UdIwQYMBaAFK7hfduMazWZZGGH0IHnyPeYg+Gd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyMS8zM0VBQUM2ODJE
MDMxMUYwODNFQkIzN0FDNEY5QUUwMi9ydUY5MjR4ck5abGtZWWZRZ2VmSTk1aUQ0
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjIyMS8zM0VBQUM2ODJEMDMxMUYwODNFQkIzN0FDNEY5QUUwMi9ydUY5MjR4ck5a
bGtZWWZRZ2VmSTk1aUQ0WjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALz+VipfEfbv7Cnko4nY1RVpF1ze3Bu41NmUUdKMz7NFJJ6WrbYddKO3uJj/a
sSy8x0yG5LyuDpiTbkgYz4Kw62Q5M7OT6dmS4mp5YDUtUtFBc6duyOpBDciry516
YjP+4K9x/U718H7S74jIqJ7m8yf8gRNhDfHiAeCv6xdcAgCyrDIs8d6p7aU5wNXk
ImcKKmVHKIiMm/3oQhlyRWDbZvwaaxpFv5RFhZUY1Uz9CIWmgPxiIYmkNOGJBeWD
kCk8rfWxZd7zVndO2l8IpsQ8xMdQrIYmmMKImf88sq22jqf2uQSIQatKMp0CVgcU
D9xnDrnFm8/Z9iCWoIDOlmcfbQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:52 2026 by rpki-client