
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier: g75vNgTaeKpzlIrfYn3y8L+ECRtt33waplGUVBdeouM=
Subject key identifier: 0F:B6:AB:1C:45:A0:A5:A6:35:B1:2F:22:63:6E:C8:FF:46:A7:27:86
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial: 1ECB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number: 1EA9
Signing time: Sat 28 Feb 2026 16:05:21 +0000
Manifest this update: Sat 28 Feb 2026 16:05:21 +0000
Manifest next update: Sat 07 Mar 2026 16:05:21 +0000
Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: f7mJpLjj9186Hk9pzJLhw1n68bRbBsyGYCEVmz9MO+I=)
2: BD314CEA619711EE81211277C4F9AE02.roa (hash: 16s8rqQL7ZS3OY13WYasSB/OdPD3K/KWoSmSDxk1MUc=)
3: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 4P/xIWjkOZt+s6V/SN3xcWLg6ZfxIlwRFodBInoaJSg=)
4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: XAUpnIWVoo2gP76XF78PGBVOZx+0l56I4zT3vqwFcwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7883 (0x1ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Validity
Not Before: Feb 28 16:05:21 2026 GMT
Not After : Mar 7 16:05:21 2026 GMT
Subject: CN=69a31241-3b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:6a:4a:77:7c:8c:12:dd:51:29:56:ac:33:
1b:85:00:bd:30:83:16:3d:f4:fd:af:43:21:73:e2:
86:7e:7a:de:3e:a7:e8:34:9e:4a:51:32:27:d8:8f:
82:cc:b7:81:76:a4:ff:af:16:59:7a:8d:e4:93:e1:
fe:77:37:b1:b0:10:f6:d5:6e:68:56:53:30:88:f3:
1c:39:bb:43:a0:9b:80:b2:21:16:fb:fc:23:d3:cc:
a2:36:33:66:3f:47:e1:37:37:84:6f:ee:6c:17:fe:
28:08:7b:c8:1d:01:2d:46:49:b5:86:b0:da:32:d7:
ca:bd:d0:81:35:74:64:aa:1d:59:f3:b9:3e:44:6a:
db:db:bc:06:1d:93:4b:93:f9:f6:15:b0:7c:4d:e0:
80:9a:16:9e:59:85:fa:16:27:7f:a1:99:7e:93:ad:
00:0f:20:28:56:0d:6f:fe:ba:6c:0b:e1:62:ca:46:
03:f6:29:1f:02:60:c9:bd:ce:9d:b9:51:8c:e3:54:
7d:01:ac:35:f6:6c:99:a4:e3:35:75:41:1e:df:e1:
0e:3f:f7:b4:14:d6:29:85:ee:64:7d:0b:1a:7f:19:
9d:42:d0:fa:1a:85:23:e0:be:59:9d:fd:2c:3e:31:
a8:ef:dc:fc:df:80:92:38:1d:a6:6d:e0:11:f8:42:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B6:AB:1C:45:A0:A5:A6:35:B1:2F:22:63:6E:C8:FF:46:A7:27:86
X509v3 Authority Key Identifier:
keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ef:17:ae:c6:ee:89:b4:b7:85:45:4a:b4:05:4d:de:75:28:
37:ec:e0:66:47:c9:27:63:a6:32:a9:21:79:4c:9d:e9:ca:8c:
8a:7b:53:c1:4c:2e:cb:31:9f:87:6b:ae:31:f1:cf:5b:6b:65:
43:d3:aa:55:a3:58:e8:46:2e:09:f6:ba:7b:46:b7:74:d6:86:
a5:a1:8e:13:96:8b:bb:1d:fe:00:41:cc:02:f8:3f:b3:2d:b8:
f3:56:07:2a:e7:6e:76:65:33:3d:7d:d5:09:e3:7a:84:4b:69:
12:d1:3d:2b:43:a2:fe:ae:1e:c7:85:4c:dd:37:ce:34:21:db:
5a:77:f3:ee:76:86:3a:47:54:b5:ae:b3:04:6b:7b:29:8b:d7:
d0:41:93:ca:77:ee:09:d5:4c:23:11:1a:65:42:1f:f0:f5:93:
cb:e6:a5:dc:01:72:8c:35:36:15:50:e0:94:c1:45:03:77:52:
44:95:23:8d:c4:37:91:c5:08:0d:e2:b8:35:8c:f2:9c:2c:cd:
85:29:c1:ff:c9:d6:04:75:dc:fb:50:3b:e8:73:54:c4:b5:13:
e4:c9:07:25:80:4a:a2:31:16:95:8b:77:e8:da:e1:b9:42:5b:
46:c7:f8:ad:38:97:c0:4e:7a:8d:0a:aa:f3:19:65:f7:0e:4a:
9b:35:b8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:48 2026 by rpki-client