
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json)
Hash identifier: U9xhUsYsJZOLGLDC3OIR4tK2UqsE9MOSbO/xpfK52tU=
Subject key identifier: A6:78:74:57:61:7F:B7:77:50:51:44:1E:15:78:2B:6C:14:62:4E:09
Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Certificate serial: 0E11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
Manifest number: 0E04
Signing time: Sat 28 Feb 2026 17:58:19 +0000
Manifest this update: Sat 28 Feb 2026 17:58:18 +0000
Manifest next update: Sat 07 Mar 2026 17:58:18 +0000
Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: Q6fAb48XjdXfoHgReqZ825CX9tj+u7qQXSNqvnM0nmk=)
2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: qzPpZiT9U/bUzj4/60Erq/BTG14/8QM1oz2zYozWp6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3601 (0xe11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Validity
Not Before: Feb 28 17:58:18 2026 GMT
Not After : Mar 7 17:58:18 2026 GMT
Subject: CN=69a32cba-32c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:d2:b2:b4:e8:57:7a:bc:38:83:34:4d:cc:
c0:83:12:59:66:7c:c1:c7:11:4a:7e:45:03:89:65:
55:4c:bd:d0:b5:69:92:dc:fe:6d:6f:e1:b9:d8:96:
51:7d:89:bb:52:8e:bf:a8:dd:9f:00:c2:d9:4a:06:
39:f2:2a:ba:1d:81:f1:57:4c:fb:2c:31:19:c2:9f:
7c:48:7d:b6:87:44:af:bd:c5:ad:8f:fa:b8:fb:68:
aa:00:a8:8e:96:03:c6:70:af:63:27:25:3a:d9:b8:
1b:67:7d:b9:07:d1:18:32:43:8c:4b:25:77:e4:2c:
26:59:36:5e:2b:e6:cb:54:62:55:04:80:13:96:72:
84:2c:23:c0:06:c9:b1:cd:5b:7e:1d:05:e4:e1:ae:
b7:35:32:87:27:01:c7:5e:07:52:11:83:b3:f0:1b:
78:aa:d6:62:25:70:8e:47:f6:5e:bd:36:4b:bc:3b:
ca:98:ae:6e:43:eb:08:da:8e:94:5b:33:17:27:3f:
b8:86:b1:17:e5:7b:97:33:2c:17:fd:9b:a5:55:32:
97:a0:24:a9:03:3a:a8:b2:de:85:a8:6b:a9:c1:07:
2a:c1:58:f6:2a:fd:95:4b:83:5a:bd:a4:81:62:43:
cd:a7:f8:14:ad:a2:3c:70:f2:84:3b:15:9d:63:21:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:74:57:61:7F:B7:77:50:51:44:1E:15:78:2B:6C:14:62:4E:09
X509v3 Authority Key Identifier:
keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e3:30:e2:7f:3d:45:19:a1:b8:a8:0a:db:80:9d:91:9a:b6:
17:51:a6:57:3f:00:99:dd:b9:cb:c5:c4:96:5d:7f:74:78:17:
8b:93:dd:b5:17:09:38:4c:15:3e:06:57:50:53:d6:4f:0b:1c:
47:6a:67:2f:71:ff:3f:a4:1e:09:a1:67:a1:df:ee:85:58:25:
14:2e:54:b0:5b:72:ae:32:43:86:3a:d5:f8:16:20:25:f5:30:
18:c7:cd:87:10:34:60:17:ed:97:e3:93:08:b3:10:8a:4b:fc:
b5:2f:16:a1:7b:20:3d:d8:11:2d:39:94:ec:70:4e:ec:ac:79:
1d:67:9d:63:79:38:53:19:35:7c:12:17:5e:36:32:d0:28:31:
df:8b:85:75:6f:71:3c:0e:99:22:95:ce:bd:b1:ba:be:8f:2c:
bc:58:fb:b6:45:57:51:e5:08:a7:ac:9c:25:49:c4:f7:af:a5:
5d:77:f2:08:e6:5a:c2:b5:d6:66:01:d3:be:55:43:63:03:fa:
ff:aa:fc:3f:05:13:36:af:94:b8:50:4a:7a:07:dd:dc:9e:f4:
79:8d:89:50:32:c1:60:d5:c6:c7:41:04:61:f8:c5:08:88:af:
73:da:ad:8f:81:8b:a0:53:61:7f:bc:d3:ab:01:22:74:8f:89:
aa:88:d1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:00 2026 by rpki-client