
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json)
Hash identifier: 1uzc51fJwI6cYYzczYDAtM1kxQ2hxbmLTfUCqq0AZZA=
Subject key identifier: F2:2E:65:11:B2:B4:38:A5:7C:ED:C3:43:9F:A7:B8:19:3C:52:14:DA
Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Certificate serial: 0ADB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
Manifest number: 0ABE
Signing time: Sun 01 Mar 2026 23:51:43 +0000
Manifest this update: Sun 01 Mar 2026 23:51:42 +0000
Manifest next update: Sun 08 Mar 2026 23:51:42 +0000
Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: FN614FWVfM41E1T3nVOkdFjRBnNvqNx3ZB+SeZxBET0=)
2: 6EE80A72F80A11F0BD0E5DB76F6F56BC.roa (hash: Jh4Ff7zuJk/wuhEY+gYNdPlenkcVzVFWzJ8Ffm4/pSY=)
3: 6E71C43EF80A11F0BD0E5DB76F6F56BC.roa (hash: exImyAeQnH2e+Miw5tPRziDVGs9lzMXANWdN6H9jKss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2779 (0xadb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Validity
Not Before: Mar 1 23:51:42 2026 GMT
Not After : Mar 8 23:51:42 2026 GMT
Subject: CN=69a4d10f-8658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:d5:7c:89:ae:eb:d6:95:f0:06:9e:1c:c8:
4c:01:e9:2e:9b:ff:8a:7a:97:1a:50:56:82:49:55:
c7:61:89:2d:57:88:84:1d:13:5b:18:e4:cc:19:38:
09:38:2d:29:05:30:94:08:96:5d:4d:f3:a3:fc:40:
0e:d1:bd:ed:41:5e:d8:bd:da:3f:9d:19:de:2f:0a:
b1:de:d7:5a:18:54:fb:c3:d2:36:43:96:e8:e9:1d:
46:36:2b:3e:8e:30:af:0b:61:6f:c1:17:0f:98:dc:
5c:db:fa:10:72:61:3b:6c:5c:16:20:09:fd:55:69:
5e:e7:ad:4e:bf:10:da:31:aa:9a:40:8d:64:13:8e:
57:cf:0d:e1:5c:8e:42:67:64:22:12:28:53:91:95:
bc:7f:34:9c:d1:76:7e:7d:88:b2:87:7a:02:30:be:
85:56:2a:d6:22:58:3b:c9:ad:b1:07:fe:c8:31:f9:
bf:ab:73:42:2d:de:b7:13:8e:94:b5:61:13:95:4f:
87:d1:7e:c2:d5:39:24:57:32:39:20:5a:c0:cc:f2:
20:34:ad:3c:12:36:be:27:64:03:49:33:93:6d:7b:
8b:c5:67:9a:d8:39:49:e1:e1:25:6c:aa:ec:5d:ed:
1c:6d:91:2d:3c:46:f3:42:0f:6c:a8:51:f6:d4:e8:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:65:11:B2:B4:38:A5:7C:ED:C3:43:9F:A7:B8:19:3C:52:14:DA
X509v3 Authority Key Identifier:
keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ef:d3:e9:d3:fb:e3:a4:99:ec:91:01:dc:15:9c:d5:54:40:
87:12:0e:6c:17:c6:4a:0d:e5:20:41:a0:e8:84:52:db:6b:3b:
25:41:ca:04:f5:8d:ab:26:68:7a:a8:ac:fb:5b:35:99:f9:3f:
28:26:51:fa:14:f2:81:01:6b:f1:2c:84:1e:59:ac:cf:9a:7a:
62:51:9d:4e:36:b6:2d:a0:96:6f:e2:ca:15:a4:46:f6:c1:3d:
b2:20:80:da:18:2b:92:3c:13:f7:4f:39:32:9b:e9:e9:8a:ce:
4a:db:2b:80:e2:a8:99:fc:da:3a:9b:68:77:5c:32:7d:02:ba:
5b:28:49:db:71:ba:94:4a:dd:a9:e4:b7:4c:33:66:ae:73:87:
f3:95:34:85:d2:d9:89:f5:a5:85:a6:58:ca:16:b8:00:3a:66:
f5:48:a3:bb:70:fa:d6:e0:69:4e:7d:ce:65:1d:eb:79:9c:cc:
a5:c9:d1:3a:e1:66:d3:b3:43:cf:cc:1a:82:14:b3:1c:4d:dc:
fa:20:d5:d8:a6:ff:fc:c0:4a:3c:44:71:f7:d7:5d:fc:b5:4c:
b7:13:2f:df:51:75:c9:3d:9f:3a:ac:65:fb:77:a4:21:63:a2:
82:a5:72:d0:dd:bb:84:fc:45:a6:7d:6e:14:d2:2f:8d:ad:d1:
05:18:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:50 2026 by rpki-client