
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json)
Hash identifier: VGW+ZDlc31kCcX1wZJIsnf/ATgDDHFKf9aBCWJ28uds=
Subject key identifier: BE:6A:AB:4C:67:B2:B1:EE:A2:D2:06:34:3E:88:AB:57:5D:00:70:9C
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial: 0BF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
Manifest number: 0B93
Signing time: Sat 28 Feb 2026 19:29:00 +0000
Manifest this update: Sat 28 Feb 2026 19:29:00 +0000
Manifest next update: Sat 07 Mar 2026 19:29:00 +0000
Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: jPsEgw5q9IfiCgG1iFVGbNR9ZgOcD2LK8m0TtMisKrY=)
2: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: eR1CwoT+DNfBY5Fom2xgTVdBct441pK1ZuTbHGG+Djc=)
3: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: YF3wvRDD0dzUZakdeFWJrsLYoJUpMBgClY/hZFPMmvI=)
4: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: Gi3ZB3u4tIqQA57JWptzmGj4T0h+RzUq8o/c0VetBYI=)
5: B66F0C58817111EFB121970CC4F9AE02.roa (hash: mu1iARnCi5kA2mbUie8M1ra9hiXhkaHe7HXaTEKFUdU=)
6: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: TTlhGhUAD/2NGqtgzSrC9HKcOBdgmaTheq7ErX+FNZ4=)
7: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: 3JOJzRv4irtlrsMwD4nhQQebwbICPddO6QXSBTA7ZXU=)
8: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: lgdsNT8nYBqcm8DCsobXOW7p2S7NgKOOoWUT5xQjbBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3057 (0xbf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Validity
Not Before: Feb 28 19:29:00 2026 GMT
Not After : Mar 7 19:29:00 2026 GMT
Subject: CN=69a341fc-3396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:67:ff:97:c6:3a:1a:df:99:d8:ea:82:aa:
ef:ce:1c:67:ca:be:12:83:c9:1b:08:7a:8d:bf:59:
74:49:39:1b:c6:cd:cf:58:75:f0:40:e6:f5:78:f4:
e1:74:42:6f:ea:16:45:94:d1:b2:68:58:34:a0:e2:
53:48:36:8f:af:d7:b7:1a:5a:2b:c0:67:7c:f9:b0:
72:1a:fc:72:4b:f4:be:33:89:f9:02:26:ed:a3:d8:
fe:31:af:a0:0f:31:79:47:eb:fb:d7:f0:37:ec:ea:
b1:4f:22:69:d9:32:0a:b0:7e:1e:d4:73:39:a5:a9:
25:f4:d1:41:13:29:c0:b3:66:4f:01:57:d3:de:f0:
13:6d:87:1a:21:c7:1a:80:7b:3a:ca:9f:ae:b2:c8:
1b:2c:1d:32:78:33:ac:36:df:e3:88:bd:a0:68:66:
4c:4b:66:11:f0:e2:ee:9c:9a:4d:d5:73:fb:bb:f2:
4a:fb:99:72:39:a4:12:da:c8:3b:b0:28:ba:81:53:
08:01:39:e8:af:b1:fd:59:67:8d:f4:d9:e4:ff:fe:
68:d4:27:ed:21:4c:ac:f9:48:bc:fc:24:60:f4:9f:
08:33:0d:48:56:06:41:4d:92:4f:93:08:4b:d8:40:
bc:2b:e9:05:31:47:b8:3e:02:c6:5e:62:70:05:4d:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6A:AB:4C:67:B2:B1:EE:A2:D2:06:34:3E:88:AB:57:5D:00:70:9C
X509v3 Authority Key Identifier:
keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:4e:e1:95:b0:14:7c:11:ef:86:64:27:83:b2:4e:32:dc:47:
18:93:0d:73:89:b1:fa:3a:4f:35:56:cf:02:94:38:58:9f:85:
0b:ed:0f:44:bd:41:50:62:22:27:69:37:13:b3:01:69:db:68:
41:ea:68:91:e6:c1:fa:ba:7c:88:4b:48:5b:6c:ac:1c:97:11:
0b:b8:51:7e:ae:0a:25:a5:32:ea:f3:fa:35:f3:e0:0f:a3:e9:
b2:75:fd:59:bc:6b:af:ac:4e:f1:39:d0:08:db:5f:00:2d:e0:
87:90:9c:bf:f8:e8:c7:73:da:5a:3c:6b:8b:fc:d8:92:89:b4:
ce:31:21:4e:e7:df:7e:3d:2e:9e:2d:0f:23:96:c7:e7:37:54:
8c:21:bc:45:d2:6f:26:50:85:cd:b6:4b:3a:fd:eb:c3:a8:8b:
4f:d0:ab:07:40:60:de:a6:03:f4:2f:5c:25:51:19:26:53:20:
d7:0d:48:93:cd:64:0e:80:9d:c4:dc:f9:e4:a2:7b:66:cb:6d:
3d:b2:62:81:38:1a:34:d5:b0:6b:53:b5:3a:3f:2e:e6:aa:55:
da:9a:47:21:f7:75:f1:01:a1:c7:61:e4:06:f7:16:fd:bc:10:
54:c7:7f:94:f4:a6:50:c7:e5:51:b9:2f:d5:46:51:aa:15:8b:
b3:6a:41:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw
Rjk3MkZFQUYwHhcNMjYwMjI4MTkyOTAwWhcNMjYwMzA3MTkyOTAwWjAYMRYwFAYD
VQQDDA02OWEzNDFmYy0zMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqD1n/5fGOhrfmdjqgqrvzhxnyr4Sg8kbCHqNv1l0STkbxs3PWHXwQOb1ePTh
dEJv6hZFlNGyaFg0oOJTSDaPr9e3GlorwGd8+bByGvxyS/S+M4n5Aibto9j+Ma+g
DzF5R+v71/A37OqxTyJp2TIKsH4e1HM5pakl9NFBEynAs2ZPAVfT3vATbYcaIcca
gHs6yp+ussgbLB0yeDOsNt/jiL2gaGZMS2YR8OLunJpN1XP7u/JK+5lyOaQS2sg7
sCi6gVMIATnor7H9WWeN9Nnk//5o1CftIUys+Ui8/CRg9J8IMw1IVgZBTZJPkwhL
2EC8K+kFMUe4PgLGXmJwBU1/cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5qq0xn
srHuotIGND6Iq1ddAHCcMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz
OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf
cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy
MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdk7hlbAUfBHvhmQng7JOMtxHGJMNc4mx+jpPNVbPApQ4WJ+FC+0PRL1BUGIi
J2k3E7MBadtoQepokebB+rp8iEtIW2ysHJcRC7hRfq4KJaUy6vP6NfPgD6PpsnX9
Wbxrr6xO8TnQCNtfAC3gh5Ccv/jox3PaWjxri/zYkom0zjEhTufffj0uni0PI5bH
5zdUjCG8RdJvJlCFzbZLOv3rw6iLT9CrB0Bg3qYD9C9cJVEZJlMg1w1Ik81kDoCd
xNz55KJ7ZsttPbJigTgaNNWwa1O1Oj8u5qpV2ppHIfd18QGhx2HkBvcW/bwQVMd/
lPSmUMflUbkv1UZRqhWLs2pBxg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:41 2026 by rpki-client