
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json)
Hash identifier: 2Uzl37RgofVt/3GBWu6YAr15N2t5HPgel6O6ck7npfU=
Subject key identifier: 7C:33:7F:A7:12:98:36:7A:4A:BB:14:C1:B8:33:4E:FE:34:64:85:27
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
Manifest number: 01F9
Signing time: Sun 01 Mar 2026 03:56:48 +0000
Manifest this update: Sun 01 Mar 2026 03:56:48 +0000
Manifest next update: Sun 08 Mar 2026 03:56:48 +0000
Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: W5QE/DJcMmof6tr42mqepKvWwCwmNkHf5wh/reehotg=)
2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: uBYO+C6UlAsgzho2C/yzZOLuZD7LLvHBHa19TIwL+RU=)
3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: 4bQshwbLuuIizTEi1i8kAXXdNltaobrkapRT1VY6dw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Validity
Not Before: Mar 1 03:56:48 2026 GMT
Not After : Mar 8 03:56:48 2026 GMT
Subject: CN=69a3b900-8d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2c:7d:67:1f:8f:5a:48:55:81:e6:25:60:d8:
6f:0a:30:38:ad:7f:15:65:55:56:d5:cd:f6:86:f6:
90:63:62:98:da:b1:9c:71:8f:a1:df:b5:a8:2e:5f:
89:11:96:42:5f:f4:88:59:44:bb:51:71:eb:35:b1:
56:8a:ab:e1:d7:a8:0c:73:7c:f8:dd:36:7d:ca:e4:
fb:5e:d8:8b:24:8d:1d:a9:49:a4:08:6e:50:f1:15:
ae:48:8a:6f:42:80:c8:b2:c0:f3:a1:ee:5d:1d:85:
a3:38:0a:99:a6:de:b3:02:38:b4:75:02:69:2d:5a:
9d:95:6c:46:da:81:d1:26:9c:b8:ca:de:43:7a:f0:
f4:4e:f0:d4:d7:96:8c:df:b7:63:96:b4:d2:6f:ba:
ee:fc:37:e6:11:a7:83:4c:a4:49:26:12:5a:c4:ae:
da:17:c8:ee:94:7a:88:6d:e0:8e:19:44:8f:38:12:
a8:28:3e:b5:86:6a:a7:8b:88:f5:3c:8a:fa:07:f3:
99:8c:4f:a4:e0:b6:94:93:b7:57:b4:1d:ff:ad:f6:
1a:aa:2f:f3:fe:7f:96:f3:19:a4:a0:7c:ae:c7:1f:
fa:67:88:70:8a:ab:aa:63:6e:b9:a0:28:e5:0c:64:
7b:ac:aa:53:64:6c:7d:b6:ff:3f:03:38:75:90:ed:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:33:7F:A7:12:98:36:7A:4A:BB:14:C1:B8:33:4E:FE:34:64:85:27
X509v3 Authority Key Identifier:
keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:a9:b1:8a:2a:89:f0:c1:d1:ec:ef:71:bf:54:3b:6b:27:98:
82:0d:39:7f:67:e6:82:16:f8:79:b0:85:ce:b2:2c:e5:82:9e:
a8:a7:e7:28:84:ae:4d:0c:37:ab:8a:14:29:34:ec:e2:67:00:
93:a0:9e:b4:64:37:51:5e:3d:b8:31:4a:58:42:17:43:d2:d4:
68:15:7d:3f:0f:43:97:28:90:ad:0a:bb:ae:33:74:f3:29:e5:
a3:dc:3b:c5:9c:c2:83:00:78:1b:78:98:d1:b9:7a:c1:c0:49:
37:fe:52:d7:fe:23:9b:bc:50:c1:2f:15:c2:19:e8:a0:a1:12:
89:d4:45:69:ba:9f:20:02:ef:b3:cf:0d:df:ec:6b:61:37:af:
9d:ca:f1:00:7c:c3:6d:8d:e4:59:9b:23:03:ad:a9:88:48:c8:
f8:5e:15:ec:c3:ee:2e:b3:b1:3c:24:a5:1c:bf:69:dd:7f:41:
7d:0a:f0:00:c8:e0:bd:dd:e7:76:fd:9a:8d:23:78:2a:c5:6c:
1a:0d:5c:07:4c:25:5d:1b:97:47:0f:4f:55:83:24:1b:3c:50:
3c:48:ac:b3:47:7a:36:aa:fd:b6:f8:3c:fd:11:93:aa:7b:1b:
28:50:35:68:70:26:1d:ce:d5:9a:c2:98:a1:5d:c5:66:ea:28:
40:b0:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:40 2026 by rpki-client