
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json)
Hash identifier: 3SXiQGasmCX/jbDdgWfeLjt8Ig8ymfwYYDbwcs1pmvg=
Subject key identifier: DB:0D:D6:EF:E7:98:55:53:1E:AB:D7:CA:FB:52:54:ED:0D:E3:F3:5E
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial: 093D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
Manifest number: 14B5
Signing time: Sat 28 Feb 2026 19:15:56 +0000
Manifest this update: Sat 28 Feb 2026 19:15:55 +0000
Manifest next update: Sat 07 Mar 2026 19:15:55 +0000
Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: Bfw8gKjBXgTAb1TMri02nNaWH02ECiFRnKWOEtOGhjE=)
2: 31C03F8A148D11F19BFA55B13D3D8C67.roa (hash: 2P8tm1L1/hHeozdOLIkZxpU7TBO+3OCMP2HCt5QPwpg=)
3: 306CD346148D11F19BFA55B13D3D8C67.roa (hash: ipKZgFxhpqnn6tI4MKpXp8Q9xOy3sbkWZiu8mJOtMQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2365 (0x93d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Validity
Not Before: Feb 28 19:15:55 2026 GMT
Not After : Mar 7 19:15:55 2026 GMT
Subject: CN=69a33eeb-e340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:c2:45:fa:87:a4:e8:3f:f7:6e:af:c3:57:
7f:60:e7:18:a7:e0:03:06:cd:9c:0a:18:65:5d:28:
4e:28:20:ef:35:db:a0:ce:3e:b0:9c:ee:75:ad:82:
89:9e:6b:4c:3f:aa:86:99:3c:10:30:cb:e5:0e:0f:
e1:7a:97:c6:eb:80:19:c7:b8:07:23:e6:97:f2:48:
9c:7c:d9:25:71:37:84:e5:b2:b4:78:1d:61:64:65:
12:1e:28:39:80:48:10:db:55:93:4f:2a:2d:00:07:
dd:fb:6c:02:c7:99:d1:fb:8b:93:68:92:ea:49:bd:
35:d3:13:4d:85:1d:fd:e9:3c:c1:d3:5f:b8:7e:e7:
67:e0:bd:2f:45:c8:4a:9c:f9:d7:3f:ce:e6:fb:c1:
89:77:08:e1:3b:f8:b2:24:2f:d9:e0:2e:ce:70:47:
85:fc:57:af:05:10:51:93:fd:b7:7d:20:f6:42:45:
36:33:3b:36:fe:13:87:ff:be:a9:a8:de:b6:93:d4:
a6:06:3d:5a:56:a1:85:19:05:3d:c5:b2:9a:86:b3:
67:0a:66:5f:23:26:b7:11:bd:03:f4:9e:ec:50:eb:
93:69:27:e0:96:23:60:b5:59:c6:5a:79:94:f6:7a:
a1:e6:ed:7d:dc:6b:8d:d0:10:02:3f:87:df:1e:2b:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0D:D6:EF:E7:98:55:53:1E:AB:D7:CA:FB:52:54:ED:0D:E3:F3:5E
X509v3 Authority Key Identifier:
keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:b6:fd:4b:4f:82:20:41:76:ac:79:c5:b5:54:26:e0:f2:76:
b7:4e:d7:51:89:7a:2d:3d:c8:b3:b3:ec:1c:fa:54:06:4e:f5:
dd:fa:bc:d2:c5:e2:42:81:7c:f2:ed:70:2c:4b:96:3d:ed:57:
b4:ec:60:bd:28:d0:bf:f1:79:f7:ca:08:82:69:de:96:47:28:
75:e2:1d:5c:32:0d:f9:59:4c:50:cf:8b:9d:d7:37:73:82:2d:
b0:ea:30:0d:8a:53:ef:cf:57:37:36:3e:c9:f0:32:4e:09:1f:
22:fb:6a:8a:9c:a7:d6:52:5c:92:6d:82:fe:26:80:aa:23:b6:
db:18:cb:d7:b4:ef:d4:08:33:b9:b8:ce:a7:a3:fb:0b:e7:e9:
8f:d7:28:65:fa:6b:7d:41:34:ed:be:58:44:c6:a0:cc:25:b3:
ca:1b:56:e0:6c:00:f5:23:9c:f6:2c:db:09:b6:3b:5a:1a:79:
eb:c1:93:d1:0e:a4:c3:b7:58:dc:15:3b:17:1d:b2:42:88:21:
e2:e7:2a:a5:43:1d:a3:45:09:2d:e4:78:1c:5e:05:97:80:9f:
a3:0d:be:0e:e5:93:c7:76:d0:90:66:1a:00:c9:0d:03:ea:0d:
bc:d9:46:db:1c:8f:80:b4:c3:8f:74:be:aa:df:e9:6e:f5:40:
9d:60:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:32 2026 by rpki-client