
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json)
Hash identifier: E4yzIU/l+Gne/UIpiLjCHTNEBcGE1QMDVdRWMGQ5M7k=
Subject key identifier: 5A:55:EA:0A:C2:86:AC:A7:4B:D0:99:12:0C:20:21:CC:43:99:8B:B0
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 0453
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
Manifest number: 0436
Signing time: Sun 01 Mar 2026 01:06:35 +0000
Manifest this update: Sun 01 Mar 2026 01:06:34 +0000
Manifest next update: Sun 08 Mar 2026 01:06:34 +0000
Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: UihO+5ajWyv2pBTFgf9uJV6z5nP1V0qoPqpbP8Vi2BM=)
2: 0CC86DF4FB5311F09CD98C1F476F56BC.roa (hash: n6okdB7Amh9InKJG9LAML0335Z1cEsL4heAtpHhAlQw=)
3: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=)
4: 0DB56636FB5311F09CD98C1F476F56BC.roa (hash: YT+7iAbsSSxAHHwhwVG6HPldJ9NvjcRPIx2KpjiUpCw=)
5: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=)
6: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1107 (0x453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Validity
Not Before: Mar 1 01:06:34 2026 GMT
Not After : Mar 8 01:06:34 2026 GMT
Subject: CN=69a3911b-5872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:3f:4e:37:64:bb:14:62:17:33:08:24:e6:
81:d0:43:89:e0:26:30:4f:19:8d:4d:e8:9c:d9:52:
41:23:9d:9f:7e:4d:b4:d1:19:6a:10:39:50:fa:11:
73:33:c5:f5:b8:50:91:36:23:a8:fb:aa:71:55:ad:
4e:1f:74:c6:19:9f:7d:99:fe:c9:98:db:51:7d:a5:
04:52:ad:bd:a5:a4:a1:84:bc:28:13:af:64:d4:16:
94:f4:eb:6b:fa:ef:48:7b:27:8a:8e:d1:bd:36:98:
2f:dd:05:71:76:dd:47:5f:58:58:c4:6e:a8:fa:13:
02:34:45:35:8e:52:cf:d4:d5:ea:e2:f2:30:6b:af:
fb:b7:ed:89:f6:d7:9f:95:61:bc:2a:6b:1d:1c:32:
6c:bb:e9:60:88:7a:b5:e4:1c:36:20:21:2d:0e:f4:
c9:8e:25:bd:d5:df:aa:49:33:7f:13:88:1f:47:95:
d4:53:68:34:74:2b:23:50:6a:c4:90:83:8d:71:d8:
a0:2f:a2:64:e7:be:f1:30:96:b8:3d:a4:f5:9c:93:
e2:aa:61:e5:a5:9c:63:e8:bc:e4:e6:9d:39:92:61:
2e:18:ad:23:97:84:4b:f2:f1:b0:49:d3:c6:76:13:
b7:ba:85:a9:ee:27:e4:80:6e:b1:f6:ee:67:f4:fe:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:55:EA:0A:C2:86:AC:A7:4B:D0:99:12:0C:20:21:CC:43:99:8B:B0
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:43:64:2a:3a:b7:9d:40:d6:e0:13:2d:4d:c8:90:b4:0a:30:
0a:06:39:84:f3:97:7e:5e:f0:45:45:9e:23:2b:1c:52:55:6b:
93:93:bc:45:c9:43:d3:d2:c8:36:87:08:a5:df:3f:d7:53:e7:
6d:8e:67:e8:bf:b3:54:45:e7:08:08:a6:62:98:08:d5:09:65:
4c:cb:d7:cc:ef:44:78:71:72:40:2c:23:54:64:b2:31:c0:cd:
e2:a3:0a:67:51:23:dd:a6:9c:09:5a:bf:e6:11:56:59:ae:16:
31:7e:a7:9d:35:8c:89:fc:1c:99:ad:18:cb:82:6b:2f:06:e8:
e4:6d:39:fc:c4:d8:18:04:ac:ca:b9:c9:f5:83:f5:9a:1e:5d:
b3:e0:fc:bc:42:59:56:b4:b3:f3:e0:34:78:8a:1f:8e:f1:2f:
70:3e:33:e6:bc:a3:ae:83:04:68:44:c5:e9:cd:75:18:f1:97:
c7:42:65:36:78:4c:23:e1:a0:5a:9b:2e:c0:45:35:dc:ed:aa:
5e:fc:c2:b1:cd:6a:95:83:fe:a9:d9:a3:41:18:42:16:ba:22:
dd:4a:28:7c:b1:11:32:94:84:ce:ed:8c:17:c5:92:85:aa:ba:
89:6f:85:ad:49:b1:51:f7:0d:c6:0f:00:b3:5c:71:1f:f4:55:
79:95:99:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0
NjQ4Q0RFMzcwHhcNMjYwMzAxMDEwNjM0WhcNMjYwMzA4MDEwNjM0WjAYMRYwFAYD
VQQDDA02OWEzOTExYi01ODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp7U/TjdkuxRiFzMIJOaB0EOJ4CYwTxmNTeic2VJBI52ffk200RlqEDlQ+hFz
M8X1uFCRNiOo+6pxVa1OH3TGGZ99mf7JmNtRfaUEUq29paShhLwoE69k1BaU9Otr
+u9IeyeKjtG9Npgv3QVxdt1HX1hYxG6o+hMCNEU1jlLP1NXq4vIwa6/7t+2J9tef
lWG8KmsdHDJsu+lgiHq15Bw2ICEtDvTJjiW91d+qSTN/E4gfR5XUU2g0dCsjUGrE
kIONcdigL6Jk577xMJa4PaT1nJPiqmHlpZxj6Lzk5p05kmEuGK0jl4RL8vGwSdPG
dhO3uoWp7ifkgG6x9u5n9P4bMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpV6grC
hqynS9CZEgwgIcxDmYuwMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB
OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1
OWwwMDBBUE53WkpHU00zamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm0NkKjq3nUDW4BMtTciQtAowCgY5hPOXfl7wRUWeIyscUlVrk5O8RclD09LI
NocIpd8/11PnbY5n6L+zVEXnCAimYpgI1QllTMvXzO9EeHFyQCwjVGSyMcDN4qMK
Z1Ej3aacCVq/5hFWWa4WMX6nnTWMifwcma0Yy4JrLwbo5G05/MTYGASsyrnJ9YP1
mh5ds+D8vEJZVrSz8+A0eIofjvEvcD4z5ryjroMEaETF6c11GPGXx0JlNnhMI+Gg
WpsuwEU13O2qXvzCsc1qlYP+qdmjQRhCFroi3UoofLERMpSEzu2MF8WShaq6iW+F
rUmxUfcNxg8As1xxH/RVeZWZwg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:43:36 2026 by rpki-client