
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json)
Hash identifier: rQQCwXn2S4Tt/QUNtG4pdj5PTcapC7R4tRreC9Owri4=
Subject key identifier: 85:ED:F1:FA:04:6A:2B:3C:1B:99:DC:88:A5:54:09:C6:EE:DC:22:23
Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Certificate serial: 0ABA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
Manifest number: 0AAF
Signing time: Mon 02 Mar 2026 01:04:24 +0000
Manifest this update: Mon 02 Mar 2026 01:04:20 +0000
Manifest next update: Mon 09 Mar 2026 01:04:20 +0000
Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: L5e23HBJ+2HiQLifWuwdTynOxMyXTm95dMx0eGkvXQ0=)
2: 631E45669D2511F092B08685C4F9AE02.roa (hash: 1Rw9i7rb41bC8teZOhnIM2irj9ZN6lPefYHAKfVyVtA=)
3: 62B22A709D2511F092B08685C4F9AE02.roa (hash: ErQTXPCIzakeWcJuA9lBP6QkWK++bQEbr4xrlufhJWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2746 (0xaba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Validity
Not Before: Mar 2 01:04:20 2026 GMT
Not After : Mar 9 01:04:20 2026 GMT
Subject: CN=69a4e217-3339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:2c:bd:73:f7:c0:6b:54:e3:5b:06:0c:96:
15:08:9c:a5:d5:23:bc:2c:3b:f8:2a:12:2e:38:c3:
02:61:6f:c6:c2:cc:be:95:51:ee:09:a5:56:16:a1:
03:89:7a:22:1f:90:35:5c:4c:28:d8:3b:7c:f3:9f:
f1:aa:26:f6:6a:83:1b:ed:c3:53:40:c6:d3:bc:23:
0c:2c:2b:c6:c7:70:ea:5c:68:c6:d4:7d:43:70:34:
0f:5d:2f:93:df:04:d8:d7:a2:e3:8f:49:eb:78:4d:
f7:bc:f7:0c:e9:68:fc:7f:de:2d:a3:e6:9a:ad:5a:
20:79:6e:03:86:25:90:16:d9:2c:1a:87:da:3d:c6:
f4:00:55:e6:d5:5d:0b:11:ba:c6:6c:0f:ad:0c:12:
5b:a4:a5:d7:ba:31:b6:72:76:6f:b0:62:62:f6:50:
fa:66:b9:53:17:b0:29:67:f8:e9:42:3c:ba:84:67:
57:92:04:3e:b5:a7:9c:21:e2:2d:87:65:17:56:c9:
65:21:f4:11:37:c3:0d:d2:29:c6:9f:9c:c1:c7:3e:
31:b0:99:9e:29:6b:72:9b:88:23:5d:c1:79:4b:fd:
d9:4d:cc:e3:49:d5:c0:24:15:35:87:65:dc:27:2c:
97:2e:47:74:c2:c4:a6:60:9f:49:0c:f4:3f:d4:0d:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:F1:FA:04:6A:2B:3C:1B:99:DC:88:A5:54:09:C6:EE:DC:22:23
X509v3 Authority Key Identifier:
keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:a5:57:1e:74:d3:a7:94:22:e1:f5:dd:86:fc:88:a1:96:8a:
7e:25:d6:61:c4:b5:33:06:70:e3:be:0d:54:63:5e:9e:04:ae:
ac:f7:85:f5:d9:62:62:c5:bf:7e:82:f4:c8:6a:e6:91:f3:70:
30:90:74:8f:ac:de:e8:25:e5:70:33:17:df:25:7d:6a:7e:af:
83:98:1c:44:dc:71:96:c7:ad:b5:d8:03:07:52:85:f3:17:08:
26:18:93:8e:d7:6f:a9:32:b8:4e:bc:9e:3c:f4:95:b5:31:d8:
99:2f:70:93:e2:b1:d1:29:46:f7:80:d6:0a:bd:ab:8e:ad:6b:
5f:e9:09:7a:15:e6:34:10:5f:30:29:3d:3d:31:81:3e:af:ad:
cd:b4:b4:7a:2f:51:85:8b:dd:bd:50:64:ca:99:64:f9:08:35:
f8:b2:32:a2:ae:e8:9a:6e:b0:29:9c:82:6b:03:ee:24:29:2e:
0f:4c:96:4d:b4:3d:73:ca:ca:69:cd:66:99:ee:b8:28:ec:e4:
6f:8e:40:5b:00:94:fd:9b:8e:2c:06:b4:f5:4e:13:a8:0a:44:
06:99:6d:4a:ad:55:d7:b8:b3:ab:0b:0c:8e:48:a6:5c:30:87:
29:13:41:52:0d:9b:64:fe:43:16:c9:ba:df:f7:85:8c:74:5d:
98:ea:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:56 2026 by rpki-client