
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier: BhFy4Xm0ORoN4Au2mPMlWLGkDc6X/qQSP6WKoobMkSQ=
Subject key identifier: 83:74:43:BA:20:81:43:1C:C6:95:29:A0:10:44:3C:83:9A:B7:41:0B
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial: 0836
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number: 082C
Signing time: Mon 02 Mar 2026 00:52:41 +0000
Manifest this update: Mon 02 Mar 2026 00:52:39 +0000
Manifest next update: Mon 09 Mar 2026 00:52:39 +0000
Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: m1MBgx1KsP87bNnGZ8Ur6+lwuYF6LGQ4K6QxIvIJghQ=)
2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: ofQHrXKIXpON7nwkCVzz/fxJZ831mKwy1TbIVQC8ThE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Validity
Not Before: Mar 2 00:52:39 2026 GMT
Not After : Mar 9 00:52:39 2026 GMT
Subject: CN=69a4df59-24e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:0d:75:98:46:42:be:42:72:cb:3a:7c:19:
fc:0b:7f:bd:ed:1f:4f:39:b8:78:e8:e0:d7:a7:e3:
37:6c:22:98:95:75:1b:0d:4a:ad:7f:e4:55:22:fd:
f9:52:b5:47:ab:c6:98:09:ef:ab:f5:76:5d:06:ef:
42:3e:b1:aa:c8:c6:cb:5a:03:87:ee:45:b6:47:2e:
6c:da:61:77:cd:fe:93:39:f9:20:13:f9:fd:7b:63:
81:aa:d0:56:f5:88:db:ec:ec:56:c2:6c:cf:b9:f5:
68:da:41:b4:2a:1e:e4:0d:f4:55:67:16:a9:52:d8:
73:80:6c:ea:ce:2b:c9:5c:5a:e9:77:46:1e:da:b9:
f8:66:2a:da:b7:6d:34:56:3c:56:cd:91:a7:d7:a0:
70:2b:34:c5:ad:7a:98:ac:4d:10:3f:93:bb:90:2d:
a7:d9:65:9f:b8:08:bb:4e:86:08:33:8f:ab:ea:50:
38:9e:39:14:4e:58:56:d7:fb:b0:42:2a:df:89:6b:
ab:3c:e3:75:2c:d5:ec:0f:3a:4d:b6:50:76:57:7b:
2c:81:c0:f2:89:46:02:ac:04:75:62:9a:c0:80:be:
82:7c:9f:82:c4:26:e5:c4:90:63:d4:75:dc:a2:b3:
42:59:47:3b:25:69:cd:da:db:39:90:cf:dc:a6:92:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:74:43:BA:20:81:43:1C:C6:95:29:A0:10:44:3C:83:9A:B7:41:0B
X509v3 Authority Key Identifier:
keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:15:01:ed:d6:3d:9a:c2:4f:43:9a:c3:da:20:de:c0:fe:22:
61:c1:d3:ee:34:16:4c:f4:ca:e8:36:a1:59:99:52:4c:53:a2:
27:20:f5:8e:87:e1:d1:22:ca:af:3a:a2:eb:e3:31:e9:d1:0a:
00:46:ca:20:47:8d:e5:4e:86:f6:af:a2:ed:7f:7e:40:18:c0:
50:d6:ce:c8:03:07:e3:24:fb:be:69:6b:f5:49:95:16:f6:4c:
91:20:5d:eb:79:a7:04:a9:2a:8d:5e:c7:b6:2a:1e:dd:cc:80:
71:b2:04:4f:e2:d5:61:e1:f9:c9:c0:d8:c7:96:18:4d:f8:9e:
93:f3:9a:ba:70:92:87:fe:0c:dd:24:a0:ae:f8:c1:3a:d3:79:
92:4b:47:8e:36:ac:65:5b:2e:97:04:d1:ce:45:ce:ca:79:2b:
42:2a:7f:aa:df:ae:ef:b9:ce:8b:b3:de:33:1d:68:fe:5f:2a:
7a:ec:8a:1d:75:94:c8:8f:d5:8a:e7:71:a5:12:7b:7d:42:be:
5c:8a:25:07:42:ca:f8:1f:68:83:47:a4:22:cf:10:32:ff:05:
88:ad:ea:ed:28:c7:38:c7:fd:92:ee:7b:ed:92:f6:c0:14:fd:
8b:56:02:93:55:b2:7d:02:b9:08:4a:69:cf:13:2b:f2:55:e8:
27:e8:f3:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5
RjIwOUY0MUUwHhcNMjYwMzAyMDA1MjM5WhcNMjYwMzA5MDA1MjM5WjAYMRYwFAYD
VQQDEw02OWE0ZGY1OS0yNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDINdZhGQr5Ccss6fBn8C3+97R9PObh46ODXp+M3bCKYlXUbDUqtf+RVIv35
UrVHq8aYCe+r9XZdBu9CPrGqyMbLWgOH7kW2Ry5s2mF3zf6TOfkgE/n9e2OBqtBW
9Yjb7OxWwmzPufVo2kG0Kh7kDfRVZxapUthzgGzqzivJXFrpd0Ye2rn4Zirat200
VjxWzZGn16BwKzTFrXqYrE0QP5O7kC2n2WWfuAi7ToYIM4+r6lA4njkUTlhW1/uw
QirfiWurPON1LNXsDzpNtlB2V3ssgcDyiUYCrAR1YprAgL6CfJ+CxCblxJBj1HXc
orNCWUc7JWnN2ts5kM/cppKHNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIN0Q7og
gUMcxpUpoBBEPIOat0ELMB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4
NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD
Tld4ZmlCY0JqejJmSUo5QjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANRUB7dY9msJPQ5rD2iDewP4iYcHT7jQWTPTK6DahWZlSTFOiJyD1jofh0SLK
rzqi6+Mx6dEKAEbKIEeN5U6G9q+i7X9+QBjAUNbOyAMH4yT7vmlr9UmVFvZMkSBd
63mnBKkqjV7Htioe3cyAcbIET+LVYeH5ycDYx5YYTfiek/OaunCSh/4M3SSgrvjB
OtN5kktHjjasZVsulwTRzkXOynkrQip/qt+u77nOi7PeMx1o/l8qeuyKHXWUyI/V
iudxpRJ7fUK+XIolB0LK+B9og0ekIs8QMv8FiK3q7SjHOMf9ku577ZL2wBT9i1YC
k1WyfQK5CEppzxMr8lXoJ+jztw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:54 2026 by rpki-client