
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
File: 97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json)
Hash identifier: r1D2rX71hy16gPSuq7MRQw/QbRuaoBpeotiUBbVUC5g=
Subject key identifier: 89:8E:36:22:EE:F4:E7:4B:27:D9:44:52:E3:D7:E9:C3:4F:2A:50:73
Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
Certificate issuer: /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
Manifest number: 0266
Signing time: Sun 01 Mar 2026 02:45:09 +0000
Manifest this update: Sun 01 Mar 2026 02:45:09 +0000
Manifest next update: Sun 08 Mar 2026 02:45:09 +0000
Files and hashes: 1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: MccvMQeXp5WAjQkzla6xamdi2agHsJMwG26z/PTgPcE=)
2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: lGnrQ3842agDvnpgF+nJ7WvDfJ9Hvbpu2XOPWGO29f0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Validity
Not Before: Mar 1 02:45:09 2026 GMT
Not After : Mar 8 02:45:09 2026 GMT
Subject: CN=69a3a835-63cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:54:3e:5b:3c:07:3c:38:7d:f3:de:d9:13:
84:31:f1:56:34:af:88:3e:1f:b9:f5:6e:61:e6:dd:
c1:35:0f:31:7c:6b:26:de:81:f6:b7:4a:cc:38:bf:
36:ec:f1:6f:4e:46:09:42:3c:15:89:a3:35:a9:01:
6f:d8:22:83:20:99:46:44:cd:b2:39:60:e0:1a:bb:
9b:93:22:d7:f6:9a:dc:39:53:3a:16:0f:65:f7:ba:
7a:27:c1:cc:52:49:cb:70:93:2a:6d:4d:b4:11:24:
56:b0:f6:e8:8e:f0:f1:2f:f6:1b:28:08:24:eb:94:
56:92:17:e6:71:ae:96:08:92:9a:99:51:79:10:53:
8f:aa:3e:e4:f4:4b:18:35:7a:c5:9d:d7:8e:ae:e5:
ba:50:4a:51:2e:2f:89:a6:f9:f7:d1:2e:f8:9d:97:
24:ba:78:e9:9a:eb:bb:9c:d5:9e:98:44:44:28:1a:
d4:bd:02:22:2f:03:49:f2:16:b9:fe:aa:25:e7:12:
04:8d:ec:8c:26:e0:6d:93:28:a1:68:9f:24:48:56:
59:44:65:22:39:de:47:29:45:bc:2c:90:02:3d:da:
bf:80:6a:d6:01:b3:4e:11:5e:b9:bf:a8:53:09:6c:
e5:ba:7a:61:25:df:6e:49:b0:40:6f:13:b5:6e:01:
e7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8E:36:22:EE:F4:E7:4B:27:D9:44:52:E3:D7:E9:C3:4F:2A:50:73
X509v3 Authority Key Identifier:
keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:47:a2:f7:22:aa:fd:21:e1:ac:a8:cc:74:f5:6b:e9:cd:86:
05:38:0d:76:ea:e5:5a:0a:02:50:64:5b:57:7a:a7:eb:76:3d:
fc:d1:5a:75:53:ce:c1:6a:fc:04:0b:7f:39:f3:e0:8f:29:ea:
1a:64:fb:8f:aa:4f:fc:a9:35:47:ed:ff:6c:7e:55:98:59:97:
75:5a:b2:b3:1e:2f:6e:8d:90:d8:65:21:87:7f:b5:91:94:1d:
06:86:91:51:ca:0b:8b:2b:c5:b0:1d:49:57:1f:75:4a:c3:51:
0d:03:39:33:d7:38:44:ab:35:25:aa:f9:ae:5d:fa:1f:a6:5f:
86:43:4c:c7:23:3e:a1:40:b6:ae:ae:b1:8e:b1:7a:4c:e3:45:
5b:73:de:cf:71:30:b6:a8:59:c8:cc:03:7d:d5:00:3c:d8:64:
b1:15:00:7b:3e:12:52:ef:e6:20:db:ce:bd:df:2d:90:e4:d0:
3e:bf:d1:3f:57:a2:b1:9e:51:d4:9f:15:71:7d:31:4c:39:cd:
8c:da:ec:9b:dd:ee:d7:f0:a3:a4:26:44:8b:99:d3:ec:ff:5e:
34:bb:ef:8f:df:8c:7f:83:52:75:e2:ce:5e:7c:eb:f3:e1:88:
34:31:27:b1:3c:ed:23:f2:64:f2:28:55:6c:3c:03:4e:61:57:
2d:2a:9f:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VERDMxMTAvBgNVBAUTKEY3QkIxNzJGQ0FFQ0FGQkY5RUJFRjI1MDhBMTU0MjY0
MzNBRUM5REUwHhcNMjYwMzAxMDI0NTA5WhcNMjYwMzA4MDI0NTA5WjAYMRYwFAYD
VQQDDA02OWEzYTgzNS02M2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwktUPls8Bzw4ffPe2ROEMfFWNK+IPh+59W5h5t3BNQ8xfGsm3oH2t0rMOL82
7PFvTkYJQjwViaM1qQFv2CKDIJlGRM2yOWDgGrubkyLX9prcOVM6Fg9l97p6J8HM
UknLcJMqbU20ESRWsPbojvDxL/YbKAgk65RWkhfmca6WCJKamVF5EFOPqj7k9EsY
NXrFndeOruW6UEpRLi+Jpvn30S74nZckunjpmuu7nNWemEREKBrUvQIiLwNJ8ha5
/qol5xIEjeyMJuBtkyihaJ8kSFZZRGUiOd5HKUW8LJACPdq/gGrWAbNOEV65v6hT
CWzlunphJd9uSbBAbxO1bgHn2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImONiLu
9OdLJ9lEUuPX6cNPKlBzMB8GA1UdIwQYMBaAFPe7Fy/K7K+/nr7yUIoVQmQzrsne
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUREMy9EMDY2MzMyODcw
NUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3LWV2dkpRaWhWQ1pET3V5
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk3c1hMOHJzcjctZXZ2SlFpaFZDWkRPdXlkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUREMy9EMDY2MzMyODcwNUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3
LWV2dkpRaWhWQ1pET3V5ZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAikei9yKq/SHhrKjMdPVr6c2GBTgNdurlWgoCUGRbV3qn63Y9/NFadVPOwWr8
BAt/OfPgjynqGmT7j6pP/Kk1R+3/bH5VmFmXdVqysx4vbo2Q2GUhh3+1kZQdBoaR
UcoLiyvFsB1JVx91SsNRDQM5M9c4RKs1Jar5rl36H6ZfhkNMxyM+oUC2rq6xjrF6
TONFW3Pez3EwtqhZyMwDfdUAPNhksRUAez4SUu/mINvOvd8tkOTQPr/RP1eisZ5R
1J8VcX0xTDnNjNrsm93u1/CjpCZEi5nT7P9eNLvvj9+Mf4NSdeLOXnzr8+GINDEn
sTztI/Jk8ihVbDwDTmFXLSqfxg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:59 2026 by rpki-client