
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier: iyQdCrWBJAc/kdANe/RTmoOfohwVSaGrJvXsi8WkYD8=
Subject key identifier: 8C:EC:F5:FC:AE:77:88:A4:5B:C0:03:4F:2D:2F:B4:33:76:E1:80:B3
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial: 0CA8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number: 0CA1
Signing time: Sat 28 Feb 2026 18:38:37 +0000
Manifest this update: Sat 28 Feb 2026 18:38:36 +0000
Manifest next update: Sat 07 Mar 2026 18:38:36 +0000
Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: zEvIrW16Gc4wacBEjRwCZyuhplRgJeVpcBoChtcM8Mg=)
2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3240 (0xca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Validity
Not Before: Feb 28 18:38:36 2026 GMT
Not After : Mar 7 18:38:36 2026 GMT
Subject: CN=69a3362d-0661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:70:24:a9:e3:1f:26:db:67:98:74:3c:5d:
94:ae:7f:92:e4:72:2e:05:d4:ac:01:68:2d:2e:b9:
04:5c:80:28:01:69:9c:88:ac:94:4c:c2:4d:17:87:
1f:1e:d7:7c:b8:86:2a:ae:31:30:ed:9d:39:3f:d2:
f4:86:52:4c:7c:b2:14:d1:db:6b:7e:14:ca:4e:ac:
10:1a:05:f7:75:93:78:22:39:54:0d:dd:7f:05:b9:
90:d8:cd:e4:96:a6:df:05:a7:0d:96:73:5e:de:97:
29:e2:a1:8f:13:a1:99:7b:cb:63:a2:22:f5:d9:89:
95:91:28:ba:d9:58:59:7a:2c:ce:f4:40:c8:d4:fe:
30:aa:87:01:26:bb:d0:4e:c3:e6:01:e7:72:d6:f6:
47:6b:cc:56:cc:dc:55:f7:74:03:97:c9:85:d4:d3:
56:3a:8a:57:35:8c:d4:b4:c4:14:75:32:b4:6e:20:
30:98:ee:c5:1c:64:aa:2e:d6:a0:39:3c:82:13:46:
aa:af:12:a7:30:ca:ed:bd:13:d0:4f:27:f4:ce:fa:
95:1e:24:e1:fd:f5:d7:96:5b:b2:2d:ee:e4:7b:f4:
d6:40:11:6f:2e:ec:5b:cd:14:e5:20:f5:51:46:c9:
b0:ef:35:19:22:f1:81:71:a8:96:46:90:bb:f7:8f:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:F5:FC:AE:77:88:A4:5B:C0:03:4F:2D:2F:B4:33:76:E1:80:B3
X509v3 Authority Key Identifier:
keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:61:b8:e8:e7:bd:17:bf:2a:aa:f6:db:c5:d0:ff:c6:49:21:
50:3c:b5:e0:f9:9c:31:8d:e5:dd:81:f5:39:80:6f:0a:87:5d:
b1:18:71:b2:95:d2:e8:0f:38:08:c3:95:d9:f9:60:a4:e0:9a:
82:f5:af:2a:17:4d:85:15:f7:a5:35:24:ff:31:27:3e:52:ec:
32:d1:3d:f8:bd:59:f6:03:f1:96:38:7c:a9:61:09:53:0c:20:
64:e4:2a:45:b7:f3:24:f3:b1:b5:4b:7a:6f:12:0d:c3:d6:6b:
1f:1b:88:36:75:b1:47:2d:78:97:7c:59:4a:30:76:6f:d6:6a:
b4:9c:d9:43:be:01:9b:65:08:a7:10:63:17:c0:da:01:94:85:
42:bd:24:c7:f6:6b:33:b1:de:63:a2:7b:b1:bd:20:23:b0:a9:
cd:5a:17:8d:e5:a6:39:b7:c5:ad:56:5c:4e:f3:a4:95:3d:df:
10:cf:59:c7:00:91:93:67:c8:c3:45:f4:12:7b:b8:96:8d:83:
d5:6e:3b:60:c9:88:48:d5:f0:f7:e5:c0:58:6f:72:5b:2d:87:
54:49:27:66:d7:5f:59:33:69:ce:d6:ff:c1:f7:1a:f0:64:65:
59:d1:1f:40:d8:4f:7b:85:3e:e4:94:ca:20:fc:96:f0:55:ae:
30:1d:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:44 2026 by rpki-client