
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
File: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft (raw, json)
Hash identifier: asqseJgWFJGUd+IvgYKA9lI1/FMwOSeYX6Fq/XpeSi0=
Subject key identifier: B8:A6:6A:7B:92:28:4E:D3:62:70:AD:07:79:7A:B0:DE:31:66:49:4F
Authority key identifier: AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F
Certificate issuer: /CN=A91BFD87/serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
Certificate serial: 07E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
Manifest number: 07E0
Signing time: Sat 28 Feb 2026 21:40:42 +0000
Manifest this update: Sat 28 Feb 2026 21:40:42 +0000
Manifest next update: Sat 07 Mar 2026 21:40:42 +0000
Files and hashes: 1: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl (hash: BrQA7ppKvNbyBTnKqPRyC9a0iDclmeU/kXW/RYtTpEE=)
2: 304D6C7E24C211EBAC07F90DC4F9AE02.roa (hash: RopP9bCjnaxwbQMfD3uls170c24lrepvVAUEUJQ1Ffk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl
rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFD87, serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
Validity
Not Before: Feb 28 21:40:42 2026 GMT
Not After : Mar 7 21:40:42 2026 GMT
Subject: CN=69a360da-9f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:52:9a:72:eb:54:06:92:b8:1e:e3:ef:58:
55:08:a7:b9:1b:0a:23:16:56:23:f3:76:4a:bd:70:
e2:b1:bb:5e:30:7b:8c:8b:fd:7d:66:8b:a4:e9:f0:
19:2b:1a:f1:e4:8d:0f:b4:90:44:1d:46:bf:cd:62:
91:01:d1:6d:f9:b0:b7:e2:8d:a6:40:2b:ea:a6:37:
ef:71:74:4b:10:c8:27:cd:3f:a7:de:6a:ad:60:ce:
36:e0:de:b4:80:94:3e:cd:3c:4d:84:20:d5:54:38:
b0:ec:2a:fd:bc:e0:6d:48:68:17:ab:01:a5:ff:7a:
7b:65:cc:a9:b6:b8:f9:3c:4d:ee:f5:9d:2a:85:1d:
75:88:50:9b:85:87:7d:e3:5c:ce:ca:0d:0a:5c:a2:
c6:a5:9c:af:00:b5:7f:9f:96:d8:ee:1f:75:70:b3:
74:fe:b9:8f:c7:a3:de:9c:35:bc:f6:bf:89:ef:82:
35:3d:2e:13:5e:0e:c1:ca:ce:09:ff:f2:c7:9f:02:
8e:8d:40:e0:f7:c3:b5:b2:81:7f:6f:81:3a:c7:ca:
14:ad:d6:dc:1c:c2:2c:c2:b6:93:8c:ea:71:e1:31:
59:17:20:15:fb:cc:ad:3f:d2:6f:3b:91:39:b6:a7:
ff:60:4a:0c:6c:fd:9d:46:30:75:ca:11:74:4f:c4:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A6:6A:7B:92:28:4E:D3:62:70:AD:07:79:7A:B0:DE:31:66:49:4F
X509v3 Authority Key Identifier:
keyid:AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:17:e5:1d:14:d4:eb:77:ba:70:d7:f0:fb:25:18:81:fd:42:
e6:1c:86:41:53:af:bb:ec:b3:83:59:75:de:84:b9:1a:d7:41:
e5:3d:b9:44:37:75:ca:cb:06:5d:77:fc:a5:0a:6e:9f:ac:f5:
b4:ff:26:8a:0c:a6:79:1e:7e:af:f0:cd:b6:c9:c8:a6:b3:85:
b0:4a:ff:cd:3e:ef:96:03:2a:59:14:47:b2:67:80:79:27:f7:
6d:55:ae:db:3a:33:6a:ae:84:bc:4e:d5:76:31:17:67:c5:35:
f6:53:18:11:e4:30:ce:cf:98:f8:29:9c:8e:31:d1:0f:e1:e0:
f8:ed:ec:ca:69:7e:01:18:35:57:b1:1f:34:89:c6:b4:e5:d2:
b7:97:60:e2:36:aa:46:31:40:c3:bf:23:45:6d:7b:da:61:41:
2e:66:34:92:ad:fb:03:f8:f3:84:de:1b:a5:c5:f5:27:17:92:
00:57:29:91:cf:2c:bb:29:0c:82:04:87:35:dc:7e:df:c4:82:
a5:8d:f6:76:08:38:69:97:60:bd:88:0c:20:92:7a:36:13:fd:
c1:7e:03:53:e3:d1:07:0f:92:f5:03:e7:6e:71:4c:e4:7f:9c:
0c:24:18:f0:2d:c1:60:84:48:18:50:d9:c1:70:e6:8f:9c:63:
56:29:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:14 2026 by rpki-client