
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft
File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json)
Hash identifier: eRqo1x6VHG2xSFYBBz89tvfkhhpyxjKtkcfDc3xUSRU=
Subject key identifier: 1D:26:B8:0B:CE:1F:06:52:E0:77:C9:14:1F:34:04:1D:E7:DC:05:3A
Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8
Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8
Certificate serial: 0DA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft
Manifest number: 0D9A
Signing time: Sat 28 Feb 2026 18:04:40 +0000
Manifest this update: Sat 28 Feb 2026 18:04:40 +0000
Manifest next update: Sat 07 Mar 2026 18:04:40 +0000
Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: 9nmf+omUdNBxeK8AAqSQIRjCUYrgkycr3xMx/h1DGd0=)
2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: BSAvl2a+qU3ElNPvDphfnCyZJ7WfZOIWkfyio3AfY2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl
rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3493 (0xda5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8
Validity
Not Before: Feb 28 18:04:40 2026 GMT
Not After : Mar 7 18:04:40 2026 GMT
Subject: CN=69a32e38-4e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:6b:98:f0:45:e0:e4:82:2b:0c:d8:70:1a:
81:f9:bb:78:67:6d:ba:ff:ea:b8:cb:65:6c:89:b6:
72:7f:56:13:53:a0:06:30:a1:7e:35:a6:34:a0:70:
82:a0:81:b2:bf:34:1d:53:77:e1:e2:22:cf:7f:29:
0b:7e:8c:55:e6:79:93:50:23:24:60:f7:5e:9e:9b:
7d:3c:b6:ec:df:2a:00:e8:3d:66:69:30:53:90:a6:
56:36:fb:a4:82:e3:91:df:62:0d:c4:3e:81:71:c6:
21:8e:6f:61:4e:0c:4a:f8:d3:71:4f:da:3a:01:d4:
e7:6c:dd:a7:fa:41:ee:5a:a6:bc:1d:4e:03:a9:36:
e2:a6:a0:3f:fb:1c:de:8a:b2:0c:67:8e:ab:bd:4e:
a2:ae:31:36:03:49:12:27:80:2a:d9:d4:f2:b7:18:
da:f3:20:d3:4d:2b:2d:ef:1f:8f:12:19:38:8d:66:
16:86:7c:30:bf:50:d3:59:8d:a9:fc:ae:94:04:5e:
e6:81:8f:90:4d:ed:89:59:10:e6:ce:88:d5:85:39:
cb:86:92:d6:b0:63:ff:e5:a4:a5:83:25:5c:60:ac:
0e:74:6e:98:98:df:21:95:04:2f:2e:bd:f9:6b:5a:
e8:b8:f4:df:e7:ab:e7:ce:57:c3:f4:92:d9:af:b0:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:B8:0B:CE:1F:06:52:E0:77:C9:14:1F:34:04:1D:E7:DC:05:3A
X509v3 Authority Key Identifier:
keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:ec:33:bc:2c:a5:35:36:4e:0c:88:c0:24:1b:8c:e6:da:81:
16:49:b6:88:30:9d:3c:91:bb:26:7c:a9:8d:ba:80:e9:a9:da:
9c:5f:0a:b7:48:21:5b:f1:97:c6:3c:7f:9d:41:1f:cb:82:a2:
c3:bf:a6:b6:4b:02:a3:50:84:88:cf:19:59:ce:78:1c:06:0e:
90:fb:07:b9:7f:60:6f:bc:c3:0c:7d:52:61:78:f3:c8:63:ff:
84:61:4d:52:13:8a:83:2d:74:5f:b4:cf:32:aa:36:52:22:31:
9d:98:4c:7f:69:fc:82:f6:e2:7c:56:c9:b4:65:98:fe:cc:3f:
cb:2c:bd:01:3d:ce:d0:b5:e8:05:8b:1d:85:fd:ff:92:e2:11:
d6:f6:2b:99:3b:62:9e:59:66:cb:26:fb:d0:38:f3:bc:26:e7:
0c:bb:ad:97:4b:e3:8c:23:af:d3:71:f5:ef:2e:1f:a5:07:18:
87:56:28:d8:f9:f0:4d:69:e4:25:41:1a:87:7a:1d:87:3e:ac:
69:5a:68:e4:79:ac:86:88:3a:c7:55:3b:74:6d:df:87:52:9a:
5a:d9:67:d3:77:6f:f1:64:96:26:d6:6f:e6:ba:e0:51:42:68:
02:3f:92:32:46:f4:ef:c4:ef:30:9a:0b:76:fa:7c:d0:bc:b0:
a3:8f:06:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:06 2026 by rpki-client