
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json)
Hash identifier: DhfCSVnu8GUPt1b5hPmRLWBg63wqSBiG3LNLRDuBATw=
Subject key identifier: E4:E9:96:D1:95:1B:37:24:09:E6:1E:39:18:50:BA:57:A8:0F:33:F0
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 35D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
Manifest number: 356F
Signing time: Sat 28 Feb 2026 14:53:58 +0000
Manifest this update: Sat 28 Feb 2026 14:53:58 +0000
Manifest next update: Sat 07 Mar 2026 14:53:58 +0000
Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: ErKYoKqonI7MHW2NXIChi58tAmX9miF2Ukk9nQOgBpU=)
2: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 1mDu3Q1bdiSa3axtc15ZDTGlc4zW4OxSySLPwHbTbvE=)
3: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: 8K4hb6GJHcWswysfKKK+VFXlsdhKy8EjS5fIz+8731Q=)
4: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: ZqgeyChgSkuAuEy8E4XBqCcFOmGTEjV9SXx7odN3pv4=)
5: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: vltJ7Buw53igWVIfCgs9blss6VeKEkgF9l7xhGZDnwo=)
6: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: oj9MA2Xl79Ulu/1U7XExVD59vw2GZhJkFrHTogIDTCg=)
7: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: 3IhKk2ns73ug1cPcItokkvNYGQWI9rs7b4nF6YtsTSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13780 (0x35d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: Feb 28 14:53:58 2026 GMT
Not After : Mar 7 14:53:58 2026 GMT
Subject: CN=69a30186-9d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:ba:e4:19:ab:bd:a0:ad:2c:05:d9:7c:2f:
60:31:77:25:dd:09:d3:6a:66:39:25:92:6a:8f:3c:
57:12:db:b1:af:4f:48:16:58:92:62:da:9e:fa:ed:
11:21:22:cf:da:b0:62:f1:4a:fa:37:32:16:76:9c:
3f:30:59:01:21:ef:33:73:11:f3:3e:e2:31:cf:24:
09:eb:fe:d0:f4:88:8f:a4:a0:cf:60:12:77:7d:45:
10:52:93:b9:11:3d:12:84:f4:2e:3b:cd:73:23:a4:
01:a1:f3:ec:59:b8:d4:73:b8:c1:2e:70:c9:08:22:
3c:99:e4:b0:bf:57:40:7f:51:ae:c3:d3:b5:06:80:
01:61:b4:8e:51:47:91:94:bc:12:c7:96:ea:92:61:
11:a7:b8:c1:c7:20:d0:9f:0a:8d:a3:6c:d3:5f:e6:
a4:fc:b7:9d:cf:b5:fc:ea:a3:89:13:fc:f8:5f:30:
1b:4f:88:00:dd:36:d3:80:1d:f8:d2:c0:2e:9b:28:
65:92:e7:b3:37:3b:73:bd:9d:82:fd:b9:05:8b:fc:
bc:d4:44:88:b7:9e:92:a6:89:39:3d:95:bc:63:f9:
25:cf:b5:7e:7b:f5:09:2c:fc:c2:a1:80:54:8b:a6:
d9:5e:e1:ae:52:1e:8f:2d:9e:0f:05:53:0b:4d:7d:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E9:96:D1:95:1B:37:24:09:E6:1E:39:18:50:BA:57:A8:0F:33:F0
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:08:4f:a0:9d:41:1f:44:e4:90:62:67:7a:e1:60:1a:b7:f2:
2f:5d:57:25:f9:b5:fa:fd:a0:c4:12:7e:11:61:64:ae:f1:7b:
b0:60:ca:34:24:17:07:07:92:68:eb:ca:1e:b2:53:12:22:95:
bc:f8:b4:8e:ab:df:dd:ad:b7:d6:f8:e5:a4:9c:0a:80:ed:45:
9c:86:6b:0f:c3:40:d0:b8:19:cb:c4:98:11:3f:c3:91:b0:fa:
f6:62:5f:3f:e9:2a:27:2a:32:e6:b3:2d:7e:07:e5:34:18:b2:
03:79:2a:a3:9e:68:6a:f3:42:37:f1:bc:34:6b:ed:ee:f6:5d:
c3:51:eb:4e:db:9b:a8:6b:13:00:a2:94:00:b4:24:5f:a3:07:
a3:f8:6f:50:8a:71:c9:1e:d8:56:3b:f7:dc:86:25:af:32:62:
31:a0:e5:45:06:9f:66:bb:d1:db:22:9d:f7:f6:8d:e1:2f:2c:
5a:f9:ef:cd:6f:cb:e7:82:db:e0:65:4c:e5:5a:05:91:f3:0e:
30:bd:2e:67:c7:5c:22:e2:d8:8d:89:c0:e3:d0:5e:3a:2d:af:
fc:10:29:35:0d:a6:1d:d3:3d:6f:30:f0:f5:77:2d:c0:16:3b:
0d:7c:1a:f2:e1:e4:84:72:32:93:31:53:26:1d:45:d7:2b:6e:
03:0f:10:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE
RjgzOTZFQkUwHhcNMjYwMjI4MTQ1MzU4WhcNMjYwMzA3MTQ1MzU4WjAYMRYwFAYD
VQQDDA02OWEzMDE4Ni05ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0+65BmrvaCtLAXZfC9gMXcl3QnTamY5JZJqjzxXEtuxr09IFliSYtqe+u0R
ISLP2rBi8Ur6NzIWdpw/MFkBIe8zcxHzPuIxzyQJ6/7Q9IiPpKDPYBJ3fUUQUpO5
ET0ShPQuO81zI6QBofPsWbjUc7jBLnDJCCI8meSwv1dAf1Guw9O1BoABYbSOUUeR
lLwSx5bqkmERp7jBxyDQnwqNo2zTX+ak/Ledz7X86qOJE/z4XzAbT4gA3TbTgB34
0sAumyhlkuezNztzvZ2C/bkFi/y81ESIt56Spok5PZW8Y/klz7V+e/UJLPzCoYBU
i6bZXuGuUh6PLZ4PBVMLTX0wGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOTpltGV
GzckCeYeORhQuleoDzPwMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE
OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy
bVZJc2s5Sm5jX0RmZzVicjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAowhPoJ1BH0TkkGJneuFgGrfyL11XJfm1+v2gxBJ+EWFkrvF7sGDKNCQXBweS
aOvKHrJTEiKVvPi0jqvf3a231vjlpJwKgO1FnIZrD8NA0LgZy8SYET/DkbD69mJf
P+kqJyoy5rMtfgflNBiyA3kqo55oavNCN/G8NGvt7vZdw1HrTtubqGsTAKKUALQk
X6MHo/hvUIpxyR7YVjv33IYlrzJiMaDlRQafZrvR2yKd9/aN4S8sWvnvzW/L54Lb
4GVM5VoFkfMOML0uZ8dcIuLYjYnA49BeOi2v/BApNQ2mHdM9bzDw9XctwBY7DXwa
8uHkhHIykzFTJh1F1ytuAw8Qmw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:31 2026 by rpki-client