
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json)
Hash identifier: FIk35IEg4KzUJrrgDS6mcdFHSMufS85+Cx7BuH4Q+L8=
Subject key identifier: 9F:8A:2A:00:4B:D7:61:0E:09:AC:33:5C:A8:75:67:F2:5B:61:AE:08
Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
Manifest number: 024F
Signing time: Sun 01 Mar 2026 03:12:56 +0000
Manifest this update: Sun 01 Mar 2026 03:12:55 +0000
Manifest next update: Sun 08 Mar 2026 03:12:55 +0000
Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: cx6UTaxqhiOaQ4NDvXIbhFaanofw601r8g8j4f1vo0Y=)
2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: vsTUw206l1auqFVbmz2vzluecexhQZaC872q8GqZIqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Validity
Not Before: Mar 1 03:12:55 2026 GMT
Not After : Mar 8 03:12:55 2026 GMT
Subject: CN=69a3aeb8-fbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:d6:84:3b:a4:10:13:1a:da:a1:74:58:54:
14:2f:2d:b1:b2:cc:82:6a:c1:4e:ec:6a:d0:cc:59:
e1:cf:61:c4:f0:09:72:00:b3:cb:c3:cf:17:47:a1:
ae:79:ab:ef:7a:39:cc:bc:90:7c:8e:7e:1b:cb:f1:
fd:6a:4d:c0:96:fa:ad:2a:12:19:be:f8:97:02:ef:
e4:88:3a:2f:71:7a:23:ec:b6:92:a9:bb:5c:30:d9:
ce:67:94:2d:33:8c:a8:fc:a7:c6:4a:87:b6:ff:55:
18:f5:a8:02:f2:2f:71:73:55:73:f9:98:3b:40:bc:
cb:02:05:b3:75:9d:f1:37:7b:7b:7e:b7:ad:52:59:
7d:04:8c:7f:15:c3:7f:b5:f8:6c:47:b4:1d:16:fd:
6e:a5:fb:eb:33:0b:75:b3:e7:c6:64:b1:99:4a:4d:
67:53:42:69:be:1c:89:4d:b9:4e:06:c5:79:cd:49:
70:df:36:a5:4f:dc:81:1f:17:24:f1:f5:b2:25:f7:
dd:8f:48:09:67:29:f1:8d:8f:03:95:bb:66:8d:6e:
17:92:ce:c2:ad:08:41:9e:b0:9e:fe:98:69:91:6a:
c1:72:f0:b8:b3:55:55:37:e5:c2:87:3b:3d:64:0f:
f7:87:67:51:d4:f7:d9:ae:d1:da:5d:e8:73:8d:f1:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:2A:00:4B:D7:61:0E:09:AC:33:5C:A8:75:67:F2:5B:61:AE:08
X509v3 Authority Key Identifier:
keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:36:42:03:af:44:19:e1:1f:bd:41:b2:94:5a:9b:0e:5b:29:
45:ad:1c:d4:1c:7e:9c:ac:c6:b9:5d:ce:a7:82:4c:c3:69:e3:
09:37:f0:fe:63:21:ac:1a:8c:d5:eb:91:d8:f6:1e:25:1d:ad:
e7:83:36:1a:f7:de:d9:5f:75:70:c1:98:2b:5e:7f:f0:4c:8c:
5c:55:fb:db:aa:b2:5c:e3:67:dd:7d:25:fb:1c:7e:07:a4:ce:
c1:8c:00:2b:87:b4:39:86:a9:89:70:6f:41:ba:f1:3e:c5:09:
bc:37:15:6f:95:2a:26:7f:ba:f9:bc:3d:83:37:f4:d5:69:85:
9f:47:e7:37:37:a4:eb:23:cd:96:70:5b:81:85:f5:a9:36:6f:
3a:0e:9e:a2:ad:62:c6:f6:57:af:d8:70:9d:3b:73:86:b2:1b:
b2:ff:9f:b1:7a:f4:84:70:e8:a0:4a:13:0f:0b:f3:52:c1:67:
42:01:46:17:20:7e:60:9d:84:b2:4a:58:4b:5d:08:cc:b3:d4:
1b:49:ee:a6:ec:bb:56:68:6c:d6:c8:14:0f:a2:d1:7b:2a:80:
7b:08:b6:f8:12:a5:9e:d1:31:d1:0a:8a:a1:ef:b6:25:05:34:
65:85:63:8a:81:8b:d4:53:1f:84:94:60:aa:be:51:71:4f:11:
36:4b:02:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:59 2026 by rpki-client