
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
File: AfBcfqXyou38GDiX9YNZgrLPA78.mft (raw, json)
Hash identifier: ie6Zuct4s3j6Fuw7+w+wxX5JPSJ+G3W4DusdONAKG6w=
Subject key identifier: 7B:DB:BB:2E:5A:7E:42:1B:31:03:2F:62:01:7F:45:AA:3E:D0:A4:C1
Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
Certificate issuer: /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
Manifest number: F9
Signing time: Mon 02 Mar 2026 03:06:09 +0000
Manifest this update: Mon 02 Mar 2026 03:06:07 +0000
Manifest next update: Mon 09 Mar 2026 03:06:07 +0000
Files and hashes: 1: AfBcfqXyou38GDiX9YNZgrLPA78.crl (hash: KbHtVO54QkeH6AzP7HCYLNKR3Mg/jmAbm35+tdBbLgA=)
2: 3CA96D46FF2E11F088116B6D89EE528E.roa (hash: 9k26GgzaF7JUBXzdAr1iBX77IktY67fjp/QCPFOAclU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Validity
Not Before: Mar 2 03:06:07 2026 GMT
Not After : Mar 9 03:06:07 2026 GMT
Subject: CN=69a4fea1-72da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f3:33:60:97:58:7f:71:db:b1:53:a9:54:3d:
10:da:56:01:d0:fe:70:9a:ff:35:e7:d1:4a:89:01:
f5:d2:83:24:a5:0d:e5:9c:7a:f9:99:41:48:1a:d6:
ee:8d:16:d6:18:bf:3a:9a:9c:42:b8:9c:3c:79:1e:
39:6a:68:7a:29:f3:e5:43:a5:42:a7:82:74:d9:ef:
93:de:65:db:43:c5:54:fb:ad:c3:22:ae:84:3a:2f:
39:69:c5:d3:11:13:e1:c2:d6:7c:db:43:8f:b4:56:
d6:38:cf:61:4e:cb:c0:38:69:8c:b9:3f:fc:4f:17:
de:7e:a7:22:e6:f0:06:b7:7c:77:42:bc:38:43:be:
26:ea:bf:ef:59:7b:c8:e5:3e:7b:fe:f2:79:8a:5f:
95:68:46:12:f3:ea:4c:5c:1e:57:35:53:e5:c8:50:
0b:c3:70:d9:69:54:df:fe:4b:ff:f4:c8:10:ff:f2:
db:65:61:2b:ea:5c:af:bf:e8:b9:be:74:a9:24:04:
52:6d:49:a3:53:e7:da:e4:84:69:cc:06:64:0a:96:
9e:3c:ea:2c:6f:c2:68:a1:45:c2:58:34:34:0b:a5:
83:32:45:12:ed:4c:54:43:a6:ae:f0:9d:a1:5c:db:
61:09:d0:11:97:6d:06:c0:73:97:f3:6f:19:4a:71:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DB:BB:2E:5A:7E:42:1B:31:03:2F:62:01:7F:45:AA:3E:D0:A4:C1
X509v3 Authority Key Identifier:
keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:7f:69:20:5d:f8:9b:68:0a:fd:b1:f9:8f:e5:49:cd:9a:f1:
a9:3d:cc:5a:5d:55:c1:d3:1c:64:ce:27:46:17:80:de:19:cb:
88:49:ec:fa:f5:0d:7c:75:b7:af:8a:31:96:39:ea:f0:28:19:
f2:23:c2:a1:d8:80:a2:5d:1a:7e:ac:5d:6f:51:39:0a:40:7b:
6b:f5:84:a2:64:80:f6:5a:e2:e6:0e:fb:68:e6:1f:79:4c:0d:
89:6d:b6:14:f6:02:fa:45:c3:ea:9b:77:82:99:0d:2f:04:f9:
e0:2d:f8:48:0d:1f:b0:cf:e7:8c:2b:bb:d9:f7:62:78:ee:c3:
6f:05:9c:7a:b0:32:66:b1:c0:2e:59:04:4e:84:ae:dd:07:d0:
ec:02:a6:86:02:49:c4:2b:4c:43:59:4c:0d:81:16:bc:11:8e:
26:0d:26:d6:36:8e:8f:e2:86:35:ba:81:88:85:f2:bf:13:b1:
16:1f:bb:2c:cb:3b:92:ca:89:8e:9e:72:9a:03:5c:5b:bf:22:
23:26:20:ce:43:82:9e:01:91:5e:72:12:4c:e6:74:4c:fa:9a:
61:ab:ac:4e:b7:97:5a:58:ef:ca:a5:01:7d:0c:76:ef:ac:fe:
c9:c0:b5:ee:34:f7:15:a3:6c:19:a9:58:15:f9:f0:c6:63:d1:
09:a3:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:30 2026 by rpki-client