
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
File: MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json)
Hash identifier: lH7Fz1LL8B8Vvq7BDpnyHGztIlo9pEeRCI0nBJFc4qA=
Subject key identifier: 53:8D:08:F0:1E:6E:E8:A9:FD:0D:B5:6C:A4:D8:5C:7F:5B:4B:CD:CE
Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E
Certificate issuer: /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
Manifest number: A9
Signing time: Sun 01 Mar 2026 08:29:44 +0000
Manifest this update: Sun 01 Mar 2026 08:29:43 +0000
Manifest next update: Sun 08 Mar 2026 08:29:43 +0000
Files and hashes: 1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: iFEfXNUdlLq/zlL7039046060HbNo2fOsG9PAeM8/W0=)
2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: P/RF+e/kTCNt9toH481dQN7PWKlOv+T95WYaGwk6ors=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl
rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
Validity
Not Before: Mar 1 08:29:43 2026 GMT
Not After : Mar 8 08:29:43 2026 GMT
Subject: CN=69a3f8f8-94ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:62:31:07:b7:fd:69:7b:d3:de:e3:f5:86:
6b:45:83:ce:44:93:d0:47:4d:34:b7:07:cc:af:5b:
27:2b:1c:61:3d:31:63:01:8a:27:93:0d:86:48:fe:
a9:ab:d3:58:91:36:ab:c1:df:7b:ad:55:10:52:21:
c3:a4:ea:52:e0:61:87:55:b3:52:89:b3:98:08:dc:
81:eb:d1:be:ec:1d:1e:09:f8:c2:89:91:24:3f:f3:
d6:34:d5:c2:12:6e:94:ab:87:f8:be:c5:1d:9c:72:
48:3e:b6:ad:f9:79:e1:23:be:94:59:31:b7:01:87:
2c:43:18:f9:6c:e0:51:ca:7c:bf:92:6c:d5:ba:7c:
57:84:72:76:d4:4d:ca:e6:67:20:6e:86:a4:53:a2:
89:9d:3b:fb:38:66:29:46:d4:61:4e:69:01:71:6d:
78:82:07:2c:94:60:3b:06:9d:92:9d:15:ab:b4:0b:
e9:f1:de:50:8b:3a:f9:a2:36:15:7e:7f:66:e2:d8:
0b:53:3c:bf:a3:1a:19:46:87:91:aa:7f:e9:c9:17:
0a:8d:ed:e0:d1:0c:21:b4:3f:1f:25:e2:cc:03:25:
e8:7a:c2:b8:bd:23:b7:6b:ee:1e:ba:af:20:f3:9c:
4e:22:69:f9:fe:2b:6b:0e:ae:f8:3b:4f:19:20:71:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8D:08:F0:1E:6E:E8:A9:FD:0D:B5:6C:A4:D8:5C:7F:5B:4B:CD:CE
X509v3 Authority Key Identifier:
keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:25:4f:47:2b:da:c2:3e:7c:ec:93:12:76:6b:b1:43:b6:b8:
53:55:24:64:06:ae:10:cf:ed:94:e3:03:13:7b:3e:dd:72:48:
b4:f0:f3:8f:4f:7f:9a:04:00:41:ba:0a:61:f3:17:b7:3e:1b:
f6:be:eb:4b:ec:56:15:ec:46:13:82:9b:b6:a4:62:6f:07:99:
0f:f2:41:34:9b:5e:4b:be:d5:fc:ae:b0:a7:7c:07:bf:60:d9:
ba:15:68:61:24:66:34:20:39:a9:a3:ff:3c:fc:36:5d:8c:15:
f7:91:2c:2c:ea:f2:95:9e:66:51:63:31:5a:88:ee:52:ea:88:
e7:74:dd:d2:90:4a:f9:89:e1:33:e7:94:f6:3a:3f:04:af:b3:
dd:44:b0:0f:46:92:21:fc:fd:74:34:f0:af:e2:b0:95:40:0e:
0a:f7:3c:75:ed:5c:7f:00:16:7d:25:97:b0:77:74:79:b4:c2:
a4:5d:2c:e0:41:96:75:41:51:85:e8:90:67:49:1b:c4:5e:42:
4c:5c:3d:c1:5f:c8:4e:59:26:8c:a6:80:85:0d:62:e3:10:a5:
3c:cb:3f:f5:ba:00:a3:cf:a9:16:a8:13:3d:25:ce:26:3c:e5:
68:a7:8b:16:ae:00:b5:e3:a8:be:96:82:5e:98:80:69:5a:7c:
4d:99:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:19 2026 by rpki-client