
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json)
Hash identifier: h92Czwz3U+pVFPy0Zo1cS4c/9Er7t93WAcE/333eUqo=
Subject key identifier: 6A:12:DA:12:6D:62:58:62:62:50:66:3C:CD:4B:AC:9C:B9:D1:F8:55
Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Certificate serial: 354C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
Manifest number: 352E
Signing time: Sat 28 Feb 2026 14:56:04 +0000
Manifest this update: Sat 28 Feb 2026 14:56:03 +0000
Manifest next update: Sat 07 Mar 2026 14:56:03 +0000
Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: ENK2djwsrmOSK8kLiM4L8WYA2HpptTCO8hwi/ONDI7c=)
2: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: xQvW4YZqb4bpCHiKIuihyp10lyfUE3gYXiSNZp52O44=)
3: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: mYoYyr1o64AZsjx2x5gA3CLCgmfiA6pfIdBA+yYc62o=)
4: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: jD/7/ehRzXn+r7A8PWs0CNNR/EbOe0oKdg7xk/UAFqU=)
5: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: BiN0k39VUnPLhlKViMIRm8mbjvoQycrvLT233B9KH/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13644 (0x354c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Validity
Not Before: Feb 28 14:56:03 2026 GMT
Not After : Mar 7 14:56:03 2026 GMT
Subject: CN=69a30203-9810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e3:71:19:5d:6c:0d:c6:2d:2d:29:1a:7e:7d:
eb:50:74:56:2d:31:05:c9:ab:a5:24:d6:82:a6:5b:
e1:89:c6:04:b4:39:35:e4:ee:b0:6f:44:53:9a:89:
3f:f3:7c:fd:32:f8:c9:b4:ee:8d:a8:20:a8:92:d1:
70:99:0a:46:de:18:89:e1:08:21:5a:19:83:8a:a9:
f7:1e:77:16:75:0b:6b:07:e3:2d:bd:73:51:e3:a8:
0b:53:5f:2e:51:73:d4:ee:48:f0:62:1f:10:55:40:
9a:f5:2f:41:91:0f:4f:40:8a:86:ac:ca:86:b0:ab:
e2:f0:54:3e:3d:7b:4d:76:34:4f:2d:77:5c:c6:b4:
0b:49:76:70:36:19:64:69:2c:0a:10:3b:1e:ee:d7:
18:11:5f:b7:f5:cf:d5:2a:0f:38:a0:43:b9:c5:b8:
0b:0b:34:0b:e5:e8:e4:81:74:c3:af:21:be:2c:5c:
04:34:c9:15:0c:1a:21:f0:6a:97:a1:e7:f1:fc:b0:
4e:24:b1:9f:8e:cd:ae:df:55:fe:b1:bf:7e:9a:54:
62:e4:a3:aa:7c:aa:18:5d:59:29:1a:2b:c7:fc:8c:
a0:a6:ef:d1:43:18:d1:c4:fe:68:f1:50:b0:3f:70:
a6:c6:7c:16:16:18:78:27:46:db:d8:33:e2:88:06:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:12:DA:12:6D:62:58:62:62:50:66:3C:CD:4B:AC:9C:B9:D1:F8:55
X509v3 Authority Key Identifier:
keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:6f:f4:23:90:db:2b:aa:bb:4c:f4:8f:d3:fb:d8:ae:9b:74:
f2:77:66:4a:e2:c5:63:39:88:df:f7:b4:1f:6a:52:52:fc:65:
7f:9d:73:86:92:4b:a6:6c:c5:6f:6d:14:72:53:30:f2:70:f2:
38:d8:8b:58:0a:00:d4:c2:2a:78:4f:41:1e:5e:73:cf:43:d8:
9d:a5:50:4e:77:de:0a:86:0d:78:3f:1c:5e:bf:5c:4d:78:0f:
57:6d:a0:33:58:40:ca:3e:b5:39:0f:e6:cd:e7:3e:b5:02:33:
5f:d5:04:34:5c:59:cc:a4:08:2f:61:63:07:03:44:af:82:48:
03:2d:9a:6f:1d:1f:cb:39:db:d0:c4:d9:40:24:8b:ad:dc:30:
8b:f5:2d:7c:bc:95:20:8b:e9:d0:d8:59:a8:12:33:ef:3b:2c:
49:4d:f7:dc:a1:96:04:66:30:83:9d:52:8d:fc:d2:36:14:d1:
65:aa:7e:38:03:de:0f:58:88:31:1d:02:d8:8f:55:50:16:9b:
7b:05:71:e6:2f:1f:05:96:12:65:87:e5:4b:df:d4:d4:de:aa:
65:40:85:9a:6b:f4:97:47:5a:ee:d8:03:7f:e4:5a:77:75:bd:
7a:d2:dd:46:0f:27:8c:3f:c3:3a:18:06:72:35:d1:01:c0:5a:
ae:85:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:18 2026 by rpki-client