
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json)
Hash identifier: 7KWiNrDEBL60Ml6+fXV+PcPJi0dxCpGayJp8GkUpIW4=
Subject key identifier: 90:48:12:A6:BE:F4:F7:F1:14:CF:FF:22:E4:9D:E3:C4:D5:AB:C9:F5
Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Certificate serial: 05B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
Manifest number: 05A2
Signing time: Sun 01 Mar 2026 23:45:43 +0000
Manifest this update: Sun 01 Mar 2026 23:45:42 +0000
Manifest next update: Sun 08 Mar 2026 23:45:42 +0000
Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: Kp2PhFhssYvCrq6KQrgwYgPA+vF+/ZGdg0rYeCw78a4=)
2: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 9p+9k7Facd+Aj9FTPOqeaWhpizHbwTwIdBQJJ41NhYo=)
3: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: 2ung5ks0wrUO/hDRvjIHZLVeK77dP8EGbpcgDXcJSM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1464 (0x5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Validity
Not Before: Mar 1 23:45:42 2026 GMT
Not After : Mar 8 23:45:42 2026 GMT
Subject: CN=69a4cfa7-3bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:0c:0e:d1:12:9a:49:f2:ea:8d:7c:fd:2a:
7a:38:19:cc:a7:7a:c1:34:69:42:48:17:3d:a0:52:
21:af:0d:42:c0:12:ce:5f:b6:69:f7:3b:8a:9f:99:
37:d2:92:8b:82:34:b6:8f:41:3c:3a:80:3f:52:04:
5b:f0:ca:30:77:a5:d1:53:9c:4b:5a:2c:fd:94:ba:
99:d3:a3:16:71:50:a2:8c:d4:6c:3c:8c:0b:68:75:
20:e1:55:41:e4:6e:c5:0a:1c:e4:f4:ea:8b:82:c7:
6d:14:b8:5f:e6:6a:bf:ae:ff:c1:b1:2a:c0:42:b9:
47:e4:57:c3:23:de:4e:ce:14:9a:b3:de:95:31:69:
c1:7a:77:42:79:8f:ca:4f:34:6f:3a:3c:22:36:f9:
1a:60:f5:3a:cd:e9:13:92:8d:d9:e4:b8:71:62:c6:
64:b1:06:82:18:6a:02:4a:b7:19:65:6a:3f:9a:f2:
ec:8e:90:c5:f0:d4:1b:91:50:48:99:89:17:d1:db:
f5:60:5b:3e:c7:1e:ef:da:29:ba:b3:e8:7a:53:0b:
ea:16:de:cb:59:c7:43:55:dc:01:6a:3a:06:13:c5:
43:50:b4:27:53:b8:d5:86:aa:29:67:2b:46:2e:1f:
61:ce:4b:bb:6b:eb:1e:b7:d1:ef:2b:62:ac:00:da:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:48:12:A6:BE:F4:F7:F1:14:CF:FF:22:E4:9D:E3:C4:D5:AB:C9:F5
X509v3 Authority Key Identifier:
keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:4a:b9:dd:9d:34:64:23:82:49:40:02:7f:da:bc:71:6c:97:
5f:4d:d1:f3:f7:03:6b:49:15:cb:fa:cf:d1:52:63:41:af:6a:
e3:6c:9b:af:a7:d1:b8:9b:31:87:66:bc:12:55:da:4f:a2:0a:
3d:50:12:0e:a9:a7:e0:4b:a9:07:ce:3a:21:38:ed:03:4c:3f:
48:4f:17:33:69:64:18:cb:76:c6:1a:7c:ab:5e:cb:bc:d1:16:
f9:ba:28:0d:20:5e:80:94:ba:41:da:0d:90:bc:78:c7:18:f2:
59:32:39:72:24:bb:6f:9d:1d:86:45:60:79:f1:a8:f4:ae:fa:
61:24:ed:48:1c:25:ee:32:c7:78:85:12:cb:5e:da:d8:ed:19:
0d:dc:7c:b9:51:87:97:f5:37:6f:d6:57:bb:e5:89:52:06:83:
2c:c3:f5:01:ae:bd:ef:89:a2:25:a3:c7:9d:51:f8:f9:c0:90:
63:ad:b3:aa:a6:64:c3:e5:f3:62:02:92:14:3e:ce:9a:e7:d3:
f9:da:27:f3:d9:89:2b:e7:2f:f0:76:87:e6:80:05:10:28:db:
cc:17:98:68:f6:78:b3:1f:71:b8:1d:44:90:95:3e:f5:55:47:
84:8b:05:dd:7a:a9:72:1c:ed:3b:dc:18:86:3b:86:85:6e:71:
df:4a:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:25 2026 by rpki-client