
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json)
Hash identifier: zzP4zkZq9SbZgSey74lKv9q5sQGnKGJA2l7c8/KKf/o=
Subject key identifier: FA:03:43:DA:E7:50:FB:44:95:C8:9F:6E:3C:D0:DF:C5:1D:74:3B:4F
Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Certificate serial: 0675
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
Manifest number: 066C
Signing time: Sat 28 Feb 2026 23:05:16 +0000
Manifest this update: Sat 28 Feb 2026 23:05:16 +0000
Manifest next update: Sat 07 Mar 2026 23:05:16 +0000
Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: dMIoLFxXYOykv/CoepD4zTdEYafkcz5LKlCV1kKF5os=)
2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: ClA7TsoBf9is9kiaEyUF4SSCiNxpgXXELAtT3dKemLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Validity
Not Before: Feb 28 23:05:16 2026 GMT
Not After : Mar 7 23:05:16 2026 GMT
Subject: CN=69a374ac-a021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:95:44:ab:a9:dd:ff:51:b3:a2:4f:f3:5d:
cf:c3:ac:22:46:03:bf:09:ea:ba:fd:d0:25:5a:99:
bf:5f:3a:67:e0:87:3a:5c:be:82:57:32:e1:13:c9:
20:64:29:55:64:5f:0e:70:a7:28:08:e0:db:b3:4f:
7e:35:b5:5d:70:f0:53:66:23:b1:b5:b8:c3:6c:56:
b2:51:04:c3:60:47:94:79:8d:1f:d9:d1:50:63:d8:
62:8d:e9:d9:40:0e:dd:ae:75:64:ce:db:36:b2:65:
a8:5f:12:13:4b:dd:4e:aa:0e:7a:cd:be:6a:c6:e1:
ad:e4:b6:cd:9d:85:33:77:0d:8d:d6:0b:14:e6:da:
55:69:ec:32:11:80:89:e8:74:6c:f5:fd:f0:1b:cc:
7c:02:1f:03:ec:48:8a:39:90:cd:95:c5:8f:07:99:
12:6d:4b:f5:38:1c:75:be:45:bd:bf:f2:e9:03:9d:
ee:e8:21:88:e5:89:4d:d2:ee:aa:7e:32:5e:54:8b:
0d:f9:39:9b:ff:02:b6:11:37:77:6f:f2:ef:4b:ef:
bd:8c:1f:d6:87:3a:3a:88:4e:8d:56:79:35:86:0a:
9c:40:d2:5d:7d:0e:ac:5f:e4:6f:a7:82:6c:a9:1a:
27:53:82:34:2e:ec:7d:04:76:4f:a2:06:ef:d6:d5:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:03:43:DA:E7:50:FB:44:95:C8:9F:6E:3C:D0:DF:C5:1D:74:3B:4F
X509v3 Authority Key Identifier:
keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:af:99:f5:0d:97:51:d7:36:70:5f:6e:d4:43:ca:0b:a0:e1:
9a:b2:b0:56:81:98:6b:d7:19:74:a4:ff:e1:58:71:36:9d:e5:
62:d1:4c:c6:cc:bf:ca:63:bb:b3:2b:78:8f:1f:22:05:2b:dd:
1f:33:92:0f:c1:d4:1c:1b:23:47:2f:24:aa:4d:4f:7a:3f:f9:
f5:fa:8c:db:f0:a1:75:d2:0c:49:68:48:e1:47:1a:13:9b:13:
a8:fd:4a:3d:0d:60:a3:23:a2:1b:dd:92:bf:92:18:94:24:35:
4e:e4:af:8c:4f:47:14:f9:3a:05:3a:6a:13:67:51:a6:f3:19:
26:2b:cc:99:81:ed:21:ec:07:8b:83:4b:a0:94:5d:ff:08:c1:
fd:47:3b:88:b7:c6:37:50:0b:b7:f5:83:64:ee:18:e6:99:95:
1a:88:cf:2b:1d:22:1e:84:d3:f9:f3:55:6f:38:b8:ba:83:1e:
72:ae:2e:08:7f:19:13:cb:e6:9d:c5:67:27:11:4d:fa:c1:70:
53:54:36:88:c1:0c:a2:20:df:42:da:d2:c3:16:01:2a:1e:b5:
23:8d:49:2f:ea:dc:a3:8e:55:6e:04:68:66:03:4c:52:d6:6c:
f0:3a:7a:6b:dd:5f:4a:8f:65:42:b8:3b:54:d4:15:43:6e:6b:
81:13:c2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:41 2026 by rpki-client