
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json)
Hash identifier: W/UMchkN3NcqwkD811Pecze5RwOCQdYn/B9lmv+v8M4=
Subject key identifier: F0:76:42:FD:A2:36:4A:37:70:61:B8:71:9C:15:72:7B:FB:55:9A:6E
Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Certificate serial: 354B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
Manifest number: 3532
Signing time: Sat 28 Feb 2026 14:16:16 +0000
Manifest this update: Sat 28 Feb 2026 14:16:16 +0000
Manifest next update: Sat 07 Mar 2026 14:16:16 +0000
Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: ThJuEr/3WXgiQTva5BEQZAK5VXAU9el/tHj/yVqflgo=)
2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: jPHSUiUkbozR5N6j9xgdL/cbld0Q8j3JedxabqO04KM=)
3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: eRpbjrs7GTwfzhpVzYBrg6AgI/qzL8mQbPqmgl8ihsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl
rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13643 (0x354b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Validity
Not Before: Feb 28 14:16:16 2026 GMT
Not After : Mar 7 14:16:16 2026 GMT
Subject: CN=69a2f8b0-ba5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:de:7a:94:9c:c0:89:19:e0:e6:19:a8:74:
b6:8a:8e:5e:20:f1:b7:b1:c7:39:bf:7b:ea:f4:23:
5a:17:0b:dc:3b:2f:31:01:f2:6d:b7:3c:12:1a:65:
fd:41:c4:96:19:80:c1:b6:42:06:18:d7:e2:b7:dc:
72:a2:cb:5d:44:33:65:1c:3c:44:7d:8e:c5:7e:2c:
08:7e:b8:6b:ec:d3:cd:be:f3:ee:0d:58:25:cc:ea:
03:8f:21:7b:cf:73:6a:8a:87:8f:a5:a1:3e:58:ec:
86:4f:70:3e:e8:5a:0b:f7:65:2c:2c:c6:74:5c:62:
12:2f:2a:3e:3f:c1:b9:8d:f3:3e:e2:0a:ed:7b:d2:
ff:05:12:16:93:ba:50:f9:7b:e6:b8:7f:ca:9a:6f:
53:e0:f3:1f:35:68:09:b7:bc:f4:77:e5:3a:b0:3a:
8b:89:d4:57:d1:79:80:9e:65:96:17:a2:36:1f:dc:
e4:31:d1:fc:1e:be:04:4f:ec:36:61:92:b2:79:26:
7b:76:e1:d4:a2:f8:c9:6b:b0:dc:e6:b6:7c:43:18:
93:54:06:dd:fc:1e:13:26:82:be:fa:61:4f:e4:7f:
e3:d1:18:5a:74:ff:d2:2b:59:70:4d:a9:1c:08:be:
97:ab:98:b3:df:19:c1:13:11:97:07:2b:a3:77:61:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:76:42:FD:A2:36:4A:37:70:61:B8:71:9C:15:72:7B:FB:55:9A:6E
X509v3 Authority Key Identifier:
keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ce:f1:08:ee:e0:6e:d3:2d:89:9e:91:33:ac:85:5f:d3:e0:
19:78:d6:72:e3:0a:25:e7:ed:d2:a7:47:67:32:d5:47:ce:e6:
b1:7f:36:db:20:56:93:d9:ca:f2:14:32:da:6b:75:1f:f1:fb:
4d:13:93:66:90:46:e8:c3:98:6e:05:3f:5f:0a:6e:be:de:75:
87:53:28:26:c1:ba:69:4e:8c:9f:7f:ef:d8:dc:c7:0b:ba:fc:
c0:4d:30:2a:91:46:cd:19:76:b3:17:67:ea:93:47:9e:5b:4e:
8c:44:dc:58:da:49:05:0d:cf:5b:ec:9f:0b:ee:44:ca:9b:54:
2a:18:f7:ce:cb:49:c4:71:4e:ad:98:39:ac:b9:60:89:dc:8d:
76:2f:3c:73:bb:85:96:3d:b8:98:4d:7c:1b:55:0e:66:3d:e7:
76:dd:f2:b1:cf:b7:82:1c:c4:3a:63:2f:bb:70:54:0a:4f:b6:
f0:63:14:f6:d1:d9:60:76:dd:20:ba:7d:d7:55:c0:6f:9f:b1:
9c:c3:ce:61:e0:35:04:8d:62:00:b0:fc:5f:dc:96:88:ae:6b:
a0:95:cf:d0:2b:f2:63:4f:77:23:ea:5f:1e:90:85:ab:22:a5:
0c:1f:76:ba:a7:ae:27:bd:73:b8:ce:23:eb:a4:d5:d3:da:27:
e8:f5:c4:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1
RTBENjkyQzUwHhcNMjYwMjI4MTQxNjE2WhcNMjYwMzA3MTQxNjE2WjAYMRYwFAYD
VQQDDA02OWEyZjhiMC1iYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArkjeepScwIkZ4OYZqHS2io5eIPG3scc5v3vq9CNaFwvcOy8xAfJttzwSGmX9
QcSWGYDBtkIGGNfit9xyostdRDNlHDxEfY7FfiwIfrhr7NPNvvPuDVglzOoDjyF7
z3NqioePpaE+WOyGT3A+6FoL92UsLMZ0XGISLyo+P8G5jfM+4grte9L/BRIWk7pQ
+XvmuH/Kmm9T4PMfNWgJt7z0d+U6sDqLidRX0XmAnmWWF6I2H9zkMdH8Hr4ET+w2
YZKyeSZ7duHUovjJa7Dc5rZ8QxiTVAbd/B4TJoK++mFP5H/j0RhadP/SK1lwTakc
CL6Xq5iz3xnBExGXByujd2Gp4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPB2Qv2i
Nko3cGG4cZwVcnv7VZpuMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE
NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps
bE9WakExT2d0M2hlRFdrc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnM7xCO7gbtMtiZ6RM6yFX9PgGXjWcuMKJeft0qdHZzLVR87msX822yBWk9nK
8hQy2mt1H/H7TROTZpBG6MOYbgU/Xwpuvt51h1MoJsG6aU6Mn3/v2NzHC7r8wE0w
KpFGzRl2sxdn6pNHnltOjETcWNpJBQ3PW+yfC+5EyptUKhj3zstJxHFOrZg5rLlg
idyNdi88c7uFlj24mE18G1UOZj3ndt3ysc+3ghzEOmMvu3BUCk+28GMU9tHZYHbd
ILp911XAb5+xnMPOYeA1BI1iALD8X9yWiK5roJXP0CvyY093I+pfHpCFqyKlDB92
uqeuJ71zuM4j66TV09on6PXEqw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:40 2026 by rpki-client