
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json)
Hash identifier: GEbptKlnmoCtG8WNvF9HhBr57nnesAm7K8UloSTJTeA=
Subject key identifier: 5B:5A:55:D0:D2:75:20:90:C1:91:28:56:28:01:CE:E6:36:B3:B4:EA
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
Manifest number: 021F
Signing time: Sun 01 Mar 2026 03:42:30 +0000
Manifest this update: Sun 01 Mar 2026 03:42:29 +0000
Manifest next update: Sun 08 Mar 2026 03:42:29 +0000
Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: OVOxspIz40g4s50NVpl1u8f9Fq1WsZXF7gHdTUo4NaY=)
2: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: Ep4tMNglyyPmI0EPqOc5eqDEfoOyX4EBSgiHBPPncPI=)
3: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: 8rBUwbtE3S6Gz0jPVay1806U5PMcvDdlIlWwh5f4Yow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Validity
Not Before: Mar 1 03:42:29 2026 GMT
Not After : Mar 8 03:42:29 2026 GMT
Subject: CN=69a3b5a6-bfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:55:c4:cc:07:ce:14:e9:4f:99:00:bd:91:
f9:f4:ed:d2:25:ee:c6:f4:25:7c:0c:43:1f:e0:8c:
80:57:19:fa:15:55:1a:e9:e1:cc:5c:43:fe:ed:86:
cd:97:96:b1:0f:dc:13:53:0d:e6:a2:45:42:92:45:
5c:83:5a:4b:6d:f3:75:64:0a:2f:d6:5e:2b:dc:a1:
15:d6:df:af:c9:91:dc:c9:4a:0e:d1:4f:d5:ef:8d:
a8:5f:1f:d6:33:bc:91:b6:f0:eb:83:14:68:c5:59:
f7:35:d0:a3:23:c6:d9:4d:69:e2:e2:d2:94:57:f7:
53:4e:b5:8e:f0:fe:57:96:c4:41:ed:7f:ad:27:5b:
c8:14:49:19:99:e6:b7:9f:6b:a6:52:27:08:a4:1c:
f6:12:be:fe:8e:e5:d3:b9:ac:07:b7:4c:5a:ce:b4:
a9:e1:dc:04:a7:bb:ad:d7:28:e9:5f:e6:d8:86:22:
2f:f8:7c:17:40:01:ee:33:eb:bd:da:1e:51:07:f8:
33:b7:3b:76:e2:65:0f:b0:c8:64:9e:d6:64:de:ee:
b5:4e:5c:69:38:70:74:79:9e:f0:c8:35:4d:f8:17:
78:e0:bf:ca:61:0b:c0:73:54:22:eb:48:84:83:44:
79:77:e0:0f:30:0d:31:eb:a4:1c:7a:d0:c6:e8:5a:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5A:55:D0:D2:75:20:90:C1:91:28:56:28:01:CE:E6:36:B3:B4:EA
X509v3 Authority Key Identifier:
keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:09:1f:cb:1e:31:67:64:28:d4:06:9b:1c:2c:df:2f:99:7a:
74:db:7b:0e:07:06:2b:12:45:81:8a:29:c5:90:dc:66:a3:7f:
ed:5b:ca:06:d7:11:bd:01:24:f7:25:b1:eb:cc:e0:14:c8:c7:
87:04:d6:a2:2c:43:df:69:f0:13:fd:41:d4:1e:30:a9:0b:2e:
fa:c7:61:51:66:b8:50:9c:ef:83:48:44:b8:55:e2:6f:d5:be:
2a:b9:c8:b3:48:ed:fd:12:0d:83:19:17:e4:a6:87:82:58:4a:
6e:29:54:92:6e:7c:dc:8c:59:0a:50:4a:a0:e9:f1:e6:74:80:
91:1d:23:d2:2b:d1:8c:d0:47:0b:33:10:35:d5:01:89:d1:45:
af:14:12:93:27:19:d7:1b:a4:6c:29:96:8e:cb:a5:85:9b:1e:
70:aa:4e:61:0d:1a:9f:df:6f:dd:90:24:55:0b:9f:0c:9a:69:
ac:2d:26:bc:61:27:d5:5a:96:45:47:38:23:c6:d6:4a:4a:b0:
7e:8a:96:94:b6:49:b0:44:fe:4f:91:06:e5:7c:82:5f:4d:3a:
47:41:64:2b:08:25:57:b8:d9:70:da:15:36:79:c3:0e:e2:b4:
18:f6:2d:3f:49:79:a5:11:46:79:db:59:10:2e:09:79:4c:7f:
e8:8e:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:20 2026 by rpki-client