
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json)
Hash identifier: 7zTZAysZ8fh/bGUyT/Tjr6E/jLq/T/DdL4sOhpjUcgU=
Subject key identifier: BA:13:1C:BA:75:2B:18:BF:88:14:99:FA:26:9F:2C:6A:3E:1E:74:67
Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Certificate serial: 0913
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
Manifest number: 08CB
Signing time: Mon 02 Mar 2026 20:31:40 +0000
Manifest this update: Mon 02 Mar 2026 20:31:39 +0000
Manifest next update: Mon 09 Mar 2026 20:31:39 +0000
Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: N/EV9OsxJg/979ZiQYESqjGnSl8+LqXVrkwbB2G2sVc=)
2: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: Bo7KfSmgopE09z8Ii/6iDq4ZBQOfTMw5H36AojNCI5M=)
3: 65519ACC506C11EC99354984C4F9AE02.roa (hash: cyYmW2mjaeVZhYJ/t/F5yjmvt3AgL3H5/RwI/7ZyO5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Validity
Not Before: Mar 2 20:31:39 2026 GMT
Not After : Mar 9 20:31:39 2026 GMT
Subject: CN=69a5f3ac-b38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:2f:e9:23:48:2e:4b:14:ec:95:2c:24:5b:
aa:cd:c2:23:09:c9:b8:f9:6b:f6:76:55:5e:cb:de:
49:e8:f2:de:da:0e:5f:66:1e:58:92:35:df:02:cf:
fd:d8:1d:b3:34:d9:e7:2a:fa:92:96:d5:4c:40:d9:
56:80:5e:5a:19:f5:d2:d8:9e:ac:ee:9e:0d:ba:66:
a7:01:6a:7f:04:6d:96:6d:b1:1f:38:57:9e:1f:8e:
e5:15:5e:12:fa:e2:eb:06:20:61:9a:40:e4:94:0a:
38:1d:5e:85:b0:ef:90:10:81:3d:8d:57:d0:e5:6d:
d4:ae:37:ee:79:d8:d5:c7:45:1d:d2:4c:fe:ce:07:
51:88:4c:01:38:88:87:19:48:62:16:df:51:0b:18:
e1:e5:b3:e2:a5:f4:ce:47:ec:93:10:1a:0e:3f:60:
45:8b:d2:04:e5:a6:7a:20:35:5f:50:b9:07:0b:b8:
db:d2:31:00:36:02:fc:3b:d9:aa:cb:f1:98:3a:56:
7c:56:16:ed:ee:45:0c:21:a3:72:25:83:77:1f:73:
9c:dd:9e:40:d0:8d:cc:c8:f5:7f:85:fc:8e:74:ae:
c7:dc:1a:22:36:4f:59:e2:41:64:0f:3e:d4:07:7e:
09:9e:04:4d:b3:56:92:69:d7:aa:66:23:58:44:d9:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:1C:BA:75:2B:18:BF:88:14:99:FA:26:9F:2C:6A:3E:1E:74:67
X509v3 Authority Key Identifier:
keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7a:8c:e1:72:34:29:1b:07:6a:b8:83:04:a6:a2:c5:ce:82:
c9:95:a1:24:de:e6:92:07:95:2a:89:46:95:26:3b:f1:b1:cf:
61:d2:b3:21:0f:f9:88:f7:f3:cf:70:ba:f7:a8:f9:08:41:ac:
62:29:5a:b0:88:f3:ef:7f:94:d6:36:a7:71:b7:6f:e8:2c:a8:
51:85:f9:32:25:02:c0:29:e8:38:c7:06:ef:86:b8:81:5d:c2:
4d:97:61:aa:8a:64:cb:47:7b:38:6c:bd:c8:f6:06:f1:2d:d4:
aa:a6:77:c3:c5:c2:aa:8c:b8:4a:0e:24:dd:bb:55:94:e7:60:
9f:fe:a6:f6:30:43:90:68:a4:d8:40:59:1d:c6:d2:3a:a4:2e:
26:5b:b1:7d:ee:b1:d1:5c:f1:f6:4e:c9:3c:ad:68:0a:08:b4:
db:50:92:1f:10:cd:93:6e:76:b5:a3:b0:85:a9:83:fa:65:42:
b0:37:5d:77:d3:d5:18:28:a4:95:c8:19:7d:e4:d6:d8:fc:25:
af:2f:ea:41:92:7c:de:fd:5c:1c:fb:3a:07:32:3a:70:40:fc:
1a:0a:fb:71:e2:5f:7f:17:82:68:2d:be:12:88:a0:fd:bd:32:
9f:d0:ef:b2:cc:2f:be:74:64:55:d8:f0:71:1d:19:d9:50:2d:
dc:d9:86:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx
Nzc4RDA2QkYwHhcNMjYwMzAyMjAzMTM5WhcNMjYwMzA5MjAzMTM5WjAYMRYwFAYD
VQQDEw02OWE1ZjNhYy1iMzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtPgv6SNILksU7JUsJFuqzcIjCcm4+Wv2dlVey95J6PLe2g5fZh5YkjXfAs/9
2B2zNNnnKvqSltVMQNlWgF5aGfXS2J6s7p4NumanAWp/BG2WbbEfOFeeH47lFV4S
+uLrBiBhmkDklAo4HV6FsO+QEIE9jVfQ5W3UrjfuedjVx0Ud0kz+zgdRiEwBOIiH
GUhiFt9RCxjh5bPipfTOR+yTEBoOP2BFi9IE5aZ6IDVfULkHC7jb0jEANgL8O9mq
y/GYOlZ8Vhbt7kUMIaNyJYN3H3Oc3Z5A0I3MyPV/hfyOdK7H3BoiNk9Z4kFkDz7U
B34JngRNs1aSadeqZiNYRNnVYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLoTHLp1
Kxi/iBSZ+iafLGo+HnRnMB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx
QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF
ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC3qM4XI0KRsHariDBKaixc6CyZWhJN7mkgeVKolGlSY78bHPYdKzIQ/5iPfz
z3C696j5CEGsYilasIjz73+U1jancbdv6CyoUYX5MiUCwCnoOMcG74a4gV3CTZdh
qopky0d7OGy9yPYG8S3UqqZ3w8XCqoy4Sg4k3btVlOdgn/6m9jBDkGik2EBZHcbS
OqQuJluxfe6x0Vzx9k7JPK1oCgi021CSHxDNk252taOwhamD+mVCsDddd9PVGCik
lcgZfeTW2Pwlry/qQZJ83v1cHPs6BzI6cED8Ggr7ceJffxeCaC2+Eoig/b0yn9Dv
sswvvnRkVdjwcR0Z2VAt3NmGSw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:35 2026 by rpki-client