
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json)
Hash identifier: 1H15cEsKljsgbDFSSXSQ2XFainV+qrevmtRYzn2iTLI=
Subject key identifier: EF:86:4E:8A:1D:7E:4D:48:3E:2C:68:63:DA:E2:45:03:33:C7:D2:C4
Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Certificate serial: 0F18
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
Manifest number: 0F06
Signing time: Sat 28 Feb 2026 17:43:46 +0000
Manifest this update: Sat 28 Feb 2026 17:43:45 +0000
Manifest next update: Sat 07 Mar 2026 17:43:45 +0000
Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: wT/Egseou02E+pxfKr8N2nesHAwa8VBigW3vEX9aqRU=)
2: 5C154406988911E991B10838C4F9AE02.roa (hash: 3p0WjHEBpJpj8h8Z2IO+iO7ZAOODzHYWzNEv2oSXw+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3864 (0xf18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Validity
Not Before: Feb 28 17:43:45 2026 GMT
Not After : Mar 7 17:43:45 2026 GMT
Subject: CN=69a32952-2073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:9b:75:ca:80:19:d3:37:a5:e7:bb:1a:5b:
c6:1d:5f:3d:44:d8:dd:c7:3d:79:72:a3:0b:64:b2:
55:2b:67:f4:79:f4:39:89:4d:ca:9f:0b:34:ef:f5:
99:f3:a2:c3:ae:d3:82:e8:c4:d9:54:94:df:72:5e:
31:45:26:a5:e2:6e:c7:19:c2:6a:53:01:30:64:97:
69:f8:bb:3b:6b:32:74:22:23:7f:55:a5:a1:72:aa:
25:cc:e0:24:d2:d0:2f:56:e9:7c:8f:54:0c:ac:c5:
7f:b5:ac:36:48:dc:19:d7:f1:79:99:c3:e8:c2:69:
3e:ec:44:e1:c3:4d:fa:0c:5d:9b:77:9b:ce:fb:ba:
c2:44:da:58:79:b4:e0:84:97:e5:8a:94:b2:46:4f:
66:61:35:33:0b:bb:3c:30:3a:fa:c1:fc:d0:7b:8c:
6a:7d:1a:ed:fa:76:59:94:18:a9:ea:68:0b:b5:1c:
95:da:e3:97:c4:f5:dd:34:49:ef:cc:80:8f:7e:86:
4d:1e:c4:26:22:51:be:65:df:7a:f8:9d:cf:96:89:
b6:3c:82:03:0f:26:a9:37:ba:15:af:67:85:dc:7f:
94:92:d9:f3:33:e8:0d:33:54:83:39:30:0a:85:b5:
dc:7a:c6:4e:19:a2:41:1d:5f:c2:68:6a:d1:40:31:
4d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:86:4E:8A:1D:7E:4D:48:3E:2C:68:63:DA:E2:45:03:33:C7:D2:C4
X509v3 Authority Key Identifier:
keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e9:ab:60:b8:95:d7:f5:e4:89:54:a8:ff:10:e7:a8:c6:16:
3a:cc:72:bd:31:bb:0a:ae:c3:5b:c3:b5:e5:b8:eb:de:eb:cc:
39:7f:3a:45:f7:3d:a7:29:72:38:10:45:ae:3b:1f:5d:de:04:
fe:aa:35:ac:2c:72:4f:5a:21:64:5b:08:81:89:62:ee:2c:ea:
7d:e8:fd:f2:e1:5f:3d:90:78:0d:db:8e:3b:fe:11:d1:91:f1:
11:9c:19:91:57:c7:77:f0:48:4c:4a:5f:8a:44:6e:6e:34:71:
7c:15:cf:0d:37:fc:d9:03:ea:fa:b3:e0:2d:7b:8b:50:af:52:
6f:b0:61:10:ef:fa:47:cd:8d:d8:fc:ac:6b:e1:f0:0a:e1:8f:
72:c9:8e:63:c1:59:0a:a1:0c:fe:1f:79:de:7e:66:66:cd:e8:
e3:73:b9:08:a4:17:d6:27:ea:4d:c9:4c:ec:70:15:26:e1:6a:
22:a6:41:0b:4f:96:82:04:64:3a:3a:ad:a1:88:47:de:9e:9f:
3f:45:42:f5:b5:4a:75:1c:48:9a:0e:14:b0:0b:e3:25:68:83:
33:5a:97:59:12:94:33:65:a4:4a:15:7d:81:ba:56:bb:81:4d:
96:15:40:b3:7b:b8:7a:98:50:8c:10:73:65:40:69:42:f5:53:
e2:71:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:05 2026 by rpki-client