
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json)
Hash identifier: 4uvJW6vC1rn70gWRG9sRD0VtqqgmCGw1mK+4L0B7ERc=
Subject key identifier: 68:04:04:C5:CE:A5:3A:4E:11:45:22:88:FE:D8:7A:7E:64:35:8D:44
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
Manifest number: 01C9
Signing time: Mon 02 Mar 2026 02:13:52 +0000
Manifest this update: Mon 02 Mar 2026 02:13:51 +0000
Manifest next update: Mon 09 Mar 2026 02:13:51 +0000
Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: AM0+6O1AZoF0/gY9mQW6gO1rMuvOLX8NW5ZsXwJebzc=)
2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: fakP4GJLKmnyVMCfkqZinteG0/CZYTZ4JdvjAch5f+A=)
3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: pDlIkunYLeVqqqSF0elUnTy2XYUeAlfMdaUFeXZ9gcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: Mar 2 02:13:51 2026 GMT
Not After : Mar 9 02:13:51 2026 GMT
Subject: CN=69a4f260-bb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:0e:4a:f1:7f:ed:23:96:aa:05:82:c4:c0:
f8:d7:da:58:af:24:6a:ce:81:c2:07:01:d0:6e:06:
62:ac:55:f5:28:d6:85:d3:87:f1:2f:92:90:ea:d8:
1a:e1:34:09:b1:71:88:a8:6e:1a:33:db:3a:43:59:
9a:70:a3:38:c2:5c:82:2a:43:a3:7c:5e:29:fb:0f:
6e:1c:6a:a2:03:89:d9:b2:77:02:48:14:1b:a9:1b:
b7:7d:63:f9:29:8c:31:e9:ce:49:72:72:c8:97:af:
64:2e:2f:4e:e9:34:01:d9:6c:5b:30:dc:37:fa:d0:
17:97:52:c4:ab:c2:1f:40:41:94:09:0d:18:66:48:
11:3d:f9:c6:9c:c7:64:14:44:40:6e:3d:74:8c:bd:
d9:86:07:48:7e:b1:12:f3:fd:d9:ad:c8:1c:b9:6e:
78:2b:da:3c:a2:ff:51:ae:12:86:2d:db:a7:d3:c1:
2a:50:68:9c:0e:88:dc:a9:ca:a0:41:d2:db:d1:21:
ae:a0:d9:b3:0f:6a:45:06:91:31:28:74:a4:7c:d7:
bf:96:8b:ea:e8:1f:56:a1:a7:97:58:34:ce:24:22:
be:9e:ce:48:3d:37:7d:f5:5a:21:e5:18:99:02:1a:
68:7c:46:57:8a:fe:a7:9a:62:cd:f9:36:54:fa:ee:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:04:C5:CE:A5:3A:4E:11:45:22:88:FE:D8:7A:7E:64:35:8D:44
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:04:1f:9b:bc:bc:28:20:5e:6b:bb:e3:0a:78:3b:a4:3d:9a:
c2:7a:63:42:44:73:e0:a7:ea:dc:95:86:52:42:70:15:bc:ca:
71:f3:d4:9e:2b:5a:80:eb:cc:18:9e:4e:7a:c9:0e:c8:18:9a:
70:80:1d:6c:a1:e2:29:d3:77:b5:2b:31:e4:0f:a5:d4:0d:78:
ad:83:c9:dd:59:13:b2:3b:7c:ec:58:1f:79:b3:6e:40:3c:d7:
d1:17:a3:d1:a2:93:d4:89:e5:db:e8:94:42:76:cc:cc:dd:c0:
59:0a:e5:3f:55:bd:eb:9b:8b:8b:f7:a7:7d:84:66:c7:fd:7b:
cf:9a:00:ae:6e:46:39:8b:5a:36:31:92:46:13:37:47:bc:3b:
1d:13:75:7c:af:ca:5c:02:08:79:5a:f2:b3:37:6a:74:51:5a:
fc:12:5c:b0:59:07:d6:9c:d3:17:2f:f2:79:35:18:f7:b9:4a:
21:43:64:59:70:ac:54:a2:be:17:c0:67:4d:d8:82:e3:e9:41:
d9:c2:8d:c0:1d:ac:8d:d8:cd:ad:98:b1:c3:65:f7:3d:39:4f:
08:49:20:8b:04:94:70:9c:52:08:b0:ca:36:5f:5f:94:ad:ed:
51:c2:6a:f4:24:d4:ca:3b:3e:31:c0:47:51:b9:f7:8b:d2:94:
02:4d:83:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE
Q0IyQThBNEIwHhcNMjYwMzAyMDIxMzUxWhcNMjYwMzA5MDIxMzUxWjAYMRYwFAYD
VQQDEw02OWE0ZjI2MC1iYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvwIOSvF/7SOWqgWCxMD419pYryRqzoHCBwHQbgZirFX1KNaF04fxL5KQ6tga
4TQJsXGIqG4aM9s6Q1macKM4wlyCKkOjfF4p+w9uHGqiA4nZsncCSBQbqRu3fWP5
KYwx6c5JcnLIl69kLi9O6TQB2WxbMNw3+tAXl1LEq8IfQEGUCQ0YZkgRPfnGnMdk
FERAbj10jL3ZhgdIfrES8/3ZrcgcuW54K9o8ov9RrhKGLdun08EqUGicDojcqcqg
QdLb0SGuoNmzD2pFBpExKHSkfNe/lovq6B9WoaeXWDTOJCK+ns5IPTd99Voh5RiZ
AhpofEZXiv6nmmLN+TZU+u5LtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgEBMXO
pTpOEUUiiP7Yen5kNY1EMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE
MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv
RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlwQfm7y8KCBea7vjCng7pD2awnpjQkRz4Kfq3JWGUkJwFbzKcfPUnitagOvM
GJ5OeskOyBiacIAdbKHiKdN3tSsx5A+l1A14rYPJ3VkTsjt87FgfebNuQDzX0Rej
0aKT1Inl2+iUQnbMzN3AWQrlP1W965uLi/enfYRmx/17z5oArm5GOYtaNjGSRhM3
R7w7HRN1fK/KXAIIeVryszdqdFFa/BJcsFkH1pzTFy/yeTUY97lKIUNkWXCsVKK+
F8BnTdiC4+lB2cKNwB2sjdjNrZixw2X3PTlPCEkgiwSUcJxSCLDKNl9flK3tUcJq
9CTUyjs+McBHUbn3i9KUAk2D8g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:17 2026 by rpki-client