
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
File: o222tflxI3VeVEH6xWqmu6BbCAo.mft (raw, json)
Hash identifier: Ffr26tHu/5GBofXIRmuD33MM+Xw1TmyPJCZuWd23jTk=
Subject key identifier: 64:4F:45:78:E3:07:45:B3:88:10:91:12:51:A3:E7:2F:37:50:A4:3F
Authority key identifier: A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A
Certificate issuer: /CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
Manifest number: 013E
Signing time: Sun 01 Mar 2026 23:59:01 +0000
Manifest this update: Sun 01 Mar 2026 23:58:59 +0000
Manifest next update: Sun 08 Mar 2026 23:58:59 +0000
Files and hashes: 1: o222tflxI3VeVEH6xWqmu6BbCAo.crl (hash: jwaRiIus177KP8TQ5ykv2rYNFa44lJEg1+S8SmnR9/k=)
2: 4136642C39AA11EF933F9583C4F9AE02.roa (hash: DyACrMkOfJlPNhHPts7x+Wbv5pZAYUHiquFq75vV6IQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl
rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:58:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD4DF, serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A
Validity
Not Before: Mar 1 23:58:59 2026 GMT
Not After : Mar 8 23:58:59 2026 GMT
Subject: CN=69a4d2c4-4a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:49:4c:95:56:fe:b8:68:fc:76:04:04:20:
4f:6f:5f:8a:fd:bd:4f:3c:78:35:b0:92:11:19:a8:
a8:03:8c:e6:b9:aa:06:e3:3e:79:00:a6:c2:64:bf:
15:33:90:ac:a8:80:80:25:80:9d:3d:ae:43:8b:47:
14:b6:50:a1:b4:a2:0c:03:8f:29:51:2a:d7:55:d3:
11:fb:14:27:85:ac:0b:01:c4:f1:e1:be:26:36:cb:
72:23:d5:cf:91:e9:48:6d:ff:a4:d0:36:88:f7:0c:
32:47:e6:03:a8:1d:a6:7f:2d:76:59:c3:57:f9:29:
fd:0b:d5:6b:3d:ce:5d:50:63:98:d5:9c:56:39:3b:
1e:a6:e5:06:0a:d5:69:9e:76:12:19:9f:78:74:4c:
a9:8b:5d:24:d6:d6:bd:35:fe:38:be:1b:3f:e5:11:
af:c2:90:b8:b6:c0:7b:1d:fc:e6:cc:0a:4e:80:93:
30:63:8a:9d:38:90:a0:8d:45:18:0e:80:e3:b1:90:
c2:0e:19:65:3e:8f:f3:16:ff:10:dd:02:4a:44:ac:
e6:0a:6a:04:07:e1:94:bc:eb:a1:a2:2b:90:4c:e1:
ff:f1:16:69:38:1b:95:f9:f4:84:ab:87:e0:50:6e:
85:ac:62:ed:df:07:df:44:42:07:65:c6:9a:f8:8f:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:45:78:E3:07:45:B3:88:10:91:12:51:A3:E7:2F:37:50:A4:3F
X509v3 Authority Key Identifier:
keyid:A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ce:ab:68:f2:b8:75:0b:76:91:35:e2:99:75:5f:77:95:28:
1a:d4:2c:73:e0:be:1e:ca:6d:05:89:87:60:a6:1d:09:aa:34:
b0:ea:f0:e5:b9:66:d9:9b:dd:b6:fb:41:fc:40:bd:78:0a:c6:
5c:52:b2:5f:63:88:32:9e:ac:14:e6:cf:cf:a5:38:d5:90:11:
58:28:3b:78:41:74:3a:69:68:10:cb:f7:fc:a5:50:79:e3:46:
05:e2:50:90:0e:73:61:0e:e4:43:b0:a4:e3:1d:a6:22:3d:3f:
c9:e1:10:81:b8:7f:cd:cc:53:e1:c5:1d:f8:ad:7f:c8:e0:06:
28:64:30:cf:80:c5:a2:c0:14:78:fa:ff:93:dc:2a:26:c5:a9:
5f:a4:2b:58:14:d2:fe:47:42:a5:24:7c:ac:71:05:ef:a7:a9:
8d:4d:33:0a:1c:f4:e7:15:4d:70:ab:43:a4:96:03:0f:41:6e:
ba:ed:c0:44:f7:7a:c5:4a:dd:09:fd:47:f6:46:bb:f3:0a:d3:
fe:34:28:52:0e:62:6f:5b:6d:44:83:3f:61:70:36:18:e7:2b:
e8:10:1c:5c:e2:d0:aa:56:17:7c:e5:97:e7:54:e8:06:82:4c:
11:59:00:8d:b0:4e:cf:00:b4:0e:58:81:8a:e3:f4:2e:d7:50:
d0:05:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:43:14 2026 by rpki-client