
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json)
Hash identifier: DsCvWOa/SNWkm3DA9gXz9qFl/htgbSG94HDr06IdkyA=
Subject key identifier: 16:DF:D5:3A:4E:38:DC:85:73:A4:FD:25:7F:C7:E0:A2:01:0F:D8:C4
Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Certificate serial: 0CDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
Manifest number: 0CCE
Signing time: Mon 02 Mar 2026 18:16:59 +0000
Manifest this update: Mon 02 Mar 2026 18:16:58 +0000
Manifest next update: Mon 09 Mar 2026 18:16:58 +0000
Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: PMQmqbn/66gbQ/cEZVrep5q6U1ww+82B8JmpTCQL9N0=)
2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: b1VtTeZ3i3+p56WxtkqO9+Z/XK8otu366dEwvuMxQIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 18:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Validity
Not Before: Mar 2 18:16:58 2026 GMT
Not After : Mar 9 18:16:58 2026 GMT
Subject: CN=69a5d41b-b122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:5b:65:85:f3:7b:24:de:93:3e:d0:cd:31:
b3:d0:b5:16:8e:ef:01:73:05:a6:51:24:69:b2:27:
d7:cb:3b:b7:5f:dc:52:9e:f1:19:8d:40:dd:33:2a:
86:25:3d:38:5e:c4:7e:3c:5b:3e:cd:e8:15:d1:72:
74:70:87:76:b8:cc:05:af:7b:60:89:96:23:aa:30:
68:5f:c5:b2:d0:71:1e:6b:99:51:bf:67:ee:33:3e:
cf:51:62:06:4a:1f:22:62:c8:09:50:a9:e3:20:ab:
fe:58:7e:c4:84:a3:2c:20:9b:32:5d:5c:15:5f:e0:
25:5f:07:21:44:82:50:2c:f9:48:35:61:98:8c:4f:
71:08:c4:a1:a3:a1:e6:a9:27:dd:20:26:1d:59:03:
9c:88:81:e1:35:d4:6d:32:7d:7d:a5:15:7d:82:5e:
21:5a:98:4b:e3:85:60:58:8f:5a:23:a2:af:fe:84:
bb:c9:99:41:8b:d6:3e:dd:2e:96:e7:40:58:c8:3b:
3b:90:9e:d2:cb:1d:6b:5f:c5:10:05:30:7f:3b:8b:
f0:1d:74:80:e1:6e:c3:71:c1:d6:24:8e:1a:72:c9:
74:71:ee:e0:de:6b:57:42:78:08:2a:4b:21:fa:01:
7b:fc:73:ce:7d:bc:aa:97:e4:d0:2d:29:bf:b9:8d:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DF:D5:3A:4E:38:DC:85:73:A4:FD:25:7F:C7:E0:A2:01:0F:D8:C4
X509v3 Authority Key Identifier:
keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:13:7f:eb:78:fa:dd:c9:56:91:d7:2a:e6:72:34:e3:e1:b4:
66:f4:58:1e:53:cf:f7:e3:eb:da:49:4a:e0:4b:9a:a6:54:eb:
53:fc:8f:d9:5d:87:86:55:4c:7d:72:70:4b:f3:0c:8c:05:21:
44:e2:00:43:33:34:fb:d1:ba:3d:a9:c8:7f:8a:45:91:23:8b:
97:78:00:5b:c1:12:ec:53:d8:45:ef:d7:e7:65:6f:81:24:10:
f2:90:c9:84:44:85:26:a3:2c:72:31:40:6b:51:b7:e9:cc:cf:
df:30:b2:26:4f:70:56:70:19:f8:42:cf:cf:da:2f:24:f2:90:
53:83:50:e7:a2:aa:36:e5:35:c9:b3:6a:1f:5d:ed:7c:62:87:
d4:64:5f:ae:bd:bd:15:86:bd:76:41:b3:b2:8a:12:3b:7a:bb:
25:a7:cf:db:76:91:a1:57:58:5d:6e:80:33:8f:67:43:17:af:
0b:da:c1:8d:72:4d:7b:7f:6c:a5:c8:2d:02:aa:25:6e:d0:7d:
8e:c0:cd:df:38:d9:56:00:cf:3c:87:21:38:94:57:95:f0:b8:
34:00:4c:73:f8:a0:a7:c6:a4:53:07:7e:04:d0:33:e5:97:47:
67:f7:1d:75:cd:60:2d:f1:50:fe:d3:e3:d5:b7:6b:40:8a:0f:
82:9b:58:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUwRkIxMTAvBgNVBAUTKEQ0Q0Y1RjA5NjczNkYyNEVBMjQxMDc5MkE2MDNDREJB
REQ4MjdEQ0QwHhcNMjYwMzAyMTgxNjU4WhcNMjYwMzA5MTgxNjU4WjAYMRYwFAYD
VQQDEw02OWE1ZDQxYi1iMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwVbZYXzeyTekz7QzTGz0LUWju8BcwWmUSRpsifXyzu3X9xSnvEZjUDdMyqG
JT04XsR+PFs+zegV0XJ0cId2uMwFr3tgiZYjqjBoX8Wy0HEea5lRv2fuMz7PUWIG
Sh8iYsgJUKnjIKv+WH7EhKMsIJsyXVwVX+AlXwchRIJQLPlINWGYjE9xCMSho6Hm
qSfdICYdWQOciIHhNdRtMn19pRV9gl4hWphL44VgWI9aI6Kv/oS7yZlBi9Y+3S6W
50BYyDs7kJ7Syx1rX8UQBTB/O4vwHXSA4W7DccHWJI4acsl0ce7g3mtXQngIKksh
+gF7/HPOfbyql+TQLSm/uY056QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbf1TpO
ONyFc6T9JX/H4KIBD9jEMB8GA1UdIwQYMBaAFNTPXwlnNvJOokEHkqYDzbrdgn3N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBGQi8yNTdCQjJDNDA3
MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhrNmlRUWVTcGdQTnV0MkNm
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFNOWZDV2MyOGs2aVFRZVNwZ1BOdXQyQ2ZjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTBGQi8yNTdCQjJDNDA3MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhr
NmlRUWVTcGdQTnV0MkNmYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeBN/63j63clWkdcq5nI04+G0ZvRYHlPP9+Pr2klK4EuaplTrU/yP2V2HhlVM
fXJwS/MMjAUhROIAQzM0+9G6PanIf4pFkSOLl3gAW8ES7FPYRe/X52VvgSQQ8pDJ
hESFJqMscjFAa1G36czP3zCyJk9wVnAZ+ELPz9ovJPKQU4NQ56KqNuU1ybNqH13t
fGKH1GRfrr29FYa9dkGzsooSO3q7JafP23aRoVdYXW6AM49nQxevC9rBjXJNe39s
pcgtAqolbtB9jsDN3zjZVgDPPIchOJRXlfC4NABMc/igp8akUwd+BNAz5ZdHZ/cd
dc1gLfFQ/tPj1bdrQIoPgptY4g==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:21 2026 by rpki-client