
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
File: eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json)
Hash identifier: AeiwoDhiK336Zx1SdP6cNIczSW0g0xdjSHsH7oD5Q+I=
Subject key identifier: 93:88:CD:5E:AD:DB:15:52:C6:C1:D3:1C:E0:37:AA:83:40:11:56:12
Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
Certificate serial: 1148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
Manifest number: 113D
Signing time: Sat 28 Feb 2026 17:20:06 +0000
Manifest this update: Sat 28 Feb 2026 17:20:06 +0000
Manifest next update: Sat 07 Mar 2026 17:20:06 +0000
Files and hashes: 1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: NR7pROLuyFWHOTsQS5QvUq/7L8MfjimNT96fj8tDXbg=)
2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl
rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4424 (0x1148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
Validity
Not Before: Feb 28 17:20:06 2026 GMT
Not After : Mar 7 17:20:06 2026 GMT
Subject: CN=69a323c6-04aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:79:1d:7c:ac:9b:62:e7:cd:02:89:fa:50:
92:c7:1a:af:74:f9:4f:2e:18:ac:ed:9a:a7:89:69:
8f:e9:a9:35:14:c2:36:5d:13:fc:32:94:d4:d8:1d:
93:23:7a:26:fc:49:c7:33:f1:30:c2:94:e9:ea:dc:
f3:c7:d5:75:61:02:b0:ab:51:91:0a:10:b1:42:40:
5b:a5:e8:0d:21:c0:2a:44:cf:c4:97:d3:be:ef:91:
8a:8f:60:52:2a:c3:24:93:b8:7b:2c:2e:5c:ca:b6:
00:c4:47:43:c9:7e:45:f3:b6:d5:4a:cc:b4:90:f2:
02:d8:f7:26:17:8f:53:4f:71:fe:85:da:a4:20:44:
32:ec:b8:da:9d:f5:8c:5c:f0:13:13:3f:d1:c9:49:
3f:f6:6b:0a:79:3d:e2:9f:11:63:8b:db:6a:50:e4:
4f:69:7f:d7:fb:bd:a7:a9:fd:a8:04:bd:d0:fb:33:
09:a7:25:9e:21:ee:43:9a:56:81:e8:05:75:aa:74:
af:bc:7d:d5:f5:06:33:f6:cf:f1:c1:ea:ec:bd:a6:
a2:2e:5f:ad:5b:6d:1a:0e:01:8d:62:ca:93:54:c7:
f4:ce:7a:ab:a2:be:8c:8a:0d:76:5b:67:61:e9:d7:
94:43:5a:1a:5f:67:2a:b1:7e:34:19:ae:a6:61:6c:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:CD:5E:AD:DB:15:52:C6:C1:D3:1C:E0:37:AA:83:40:11:56:12
X509v3 Authority Key Identifier:
keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:e7:e3:fe:7c:38:ca:cf:69:97:28:c7:7e:2a:46:f6:21:13:
52:d6:65:22:ed:1a:33:ae:1b:6b:60:11:7c:a5:e9:c2:b2:f9:
c0:5b:89:06:2f:f7:63:9b:37:7d:00:de:8d:8a:c6:87:74:c1:
87:a6:3a:30:94:95:0d:e9:42:10:ff:93:07:27:67:2a:a2:10:
d6:36:dd:bf:c5:57:20:db:04:26:ef:8f:48:8c:cc:75:46:14:
c7:a9:4d:71:45:eb:c6:81:df:99:9f:e8:9f:2d:9f:33:a8:d5:
4c:4d:4e:8a:55:95:e7:ff:31:87:ff:44:7e:7b:bd:4e:07:2d:
5d:a1:94:2e:77:8b:78:0f:94:77:a2:cb:6c:c3:bd:83:31:c5:
b8:e8:18:4c:c5:ce:ff:1b:a9:be:19:5b:f8:1a:30:81:10:bb:
67:9a:22:66:33:0d:d6:02:43:72:d2:09:37:36:4f:f8:18:0c:
e4:0a:20:d8:c2:92:28:d1:8b:d6:ec:bb:54:ff:d6:e6:c8:96:
b6:4e:23:be:cc:97:d8:5c:b4:94:e9:9f:7b:08:47:3b:fd:48:
4b:89:a1:18:7d:e4:16:ef:5b:0c:02:ef:2d:c9:1e:df:41:da:
dc:ba:13:1b:3f:cf:3e:72:23:14:8c:16:91:7a:6e:9b:86:1c:
02:aa:b1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:40 2026 by rpki-client