
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json)
Hash identifier: L472r2Pez4pTtdKKnulzb6GIJh0+j4W0t3dBWacsek0=
Subject key identifier: 13:F9:52:2C:52:CF:C2:96:27:03:33:C1:74:0F:64:DF:2E:2D:34:73
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial: 0861
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
Manifest number: 084D
Signing time: Sat 28 Feb 2026 21:10:56 +0000
Manifest this update: Sat 28 Feb 2026 21:10:55 +0000
Manifest next update: Sat 07 Mar 2026 21:10:55 +0000
Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: CpxMOKbgkDwZIVHRAsQQUd6o9dvvWQsTkMs90KasohM=)
2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: zbiYtUOfzyp7ptHvHbV0SU4d4rP1mH83ebF8pRuNsx0=)
3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: ZYqL2fHcbNd2tSbNDmjF+dD/m7i54Wfd/1i3In6hhsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145 (0x861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Validity
Not Before: Feb 28 21:10:55 2026 GMT
Not After : Mar 7 21:10:55 2026 GMT
Subject: CN=69a359df-94ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:ba:cc:c4:1e:b8:7e:1b:f2:28:fa:84:90:
28:74:57:ce:62:c2:bc:d2:90:0c:b4:2d:21:1b:35:
68:e6:df:a9:ee:67:43:d4:f9:6d:53:d5:9e:dc:49:
8e:dd:98:10:27:fa:67:7d:a7:36:a0:3b:d5:55:36:
3e:6f:fe:1e:7f:49:c5:28:1d:bf:5a:73:35:63:05:
c2:94:50:af:af:40:e6:58:6f:c4:3a:b7:98:54:59:
f9:e7:0f:60:ff:80:86:c5:6e:d5:c0:92:9c:df:68:
63:bc:d2:eb:5b:eb:3e:b2:3b:aa:4e:09:69:1b:c5:
e6:1d:62:0c:7e:77:ef:2f:10:04:93:b6:bc:39:37:
2c:21:a6:fc:ed:a9:b3:a1:2c:dc:36:76:21:1b:f2:
da:5f:18:8e:78:3f:06:50:da:a7:a9:83:bf:57:cd:
dd:6e:f7:b5:e8:b7:a7:d7:37:09:47:e2:5f:bb:99:
01:c3:27:42:f7:51:03:c9:ab:01:4f:a9:f7:6b:3d:
5e:92:a0:46:97:6b:4c:67:e1:a6:ef:e4:82:f6:fc:
5e:ae:fe:05:d2:26:62:03:a4:54:a4:f2:07:43:7c:
2c:20:0b:26:8a:bc:09:25:df:ef:a5:fc:83:0e:57:
b7:e6:ef:f6:1d:9d:5b:bf:83:ed:49:14:6a:34:93:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F9:52:2C:52:CF:C2:96:27:03:33:C1:74:0F:64:DF:2E:2D:34:73
X509v3 Authority Key Identifier:
keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:34:1f:43:0b:83:5c:aa:1d:f8:1d:1d:4f:d5:87:00:3f:a0:
c1:fa:8e:38:c8:1b:ca:b8:ad:51:04:dd:2a:d9:aa:8f:58:98:
5b:f4:49:ba:5d:f8:d5:a5:b4:ec:a5:68:65:0f:54:54:18:86:
96:cc:b7:c3:62:57:85:37:5d:33:99:e8:a6:af:cf:be:73:e1:
34:20:9f:69:d7:53:c1:b8:bd:2c:d7:88:3a:cd:ae:36:55:3f:
1f:52:00:49:be:08:53:be:4f:37:e6:a5:c7:3e:bc:21:34:58:
8c:36:fa:4a:6b:84:4a:a4:8b:7a:b4:5b:aa:7c:3d:95:4d:57:
ce:be:93:10:f4:4a:79:42:ff:12:b1:ec:de:5d:fd:46:45:ef:
5c:d4:a2:67:19:c3:73:cd:81:5d:2a:85:95:33:1b:64:69:eb:
25:77:e6:45:0f:bc:21:04:11:d7:c9:d2:ff:2c:97:c2:05:29:
23:d2:fa:ba:f0:f9:d5:51:6e:f9:46:9b:44:f9:5f:5a:df:db:
01:09:da:4c:f5:97:67:2c:7b:84:50:0e:ff:af:58:9e:f0:d8:
75:03:0a:0a:ca:fd:e5:1c:d1:28:ad:9a:7b:1e:ae:a5:f3:40:
b8:cc:48:1b:1b:47:df:43:f6:01:db:cf:f5:b6:eb:92:74:29:
96:00:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:18 2026 by rpki-client