
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
File: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft (raw, json)
Hash identifier: BTOU/2psZi7YoGe3TehiHD34U05oawNqgo3LnEdeloY=
Subject key identifier: 47:6F:BC:0E:D5:8E:19:C2:48:B6:BE:BE:2D:88:94:2D:E1:DE:89:6F
Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
Certificate issuer: /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
Manifest number: 07
Signing time: Sun 01 Mar 2026 23:03:06 +0000
Manifest this update: Sun 01 Mar 2026 23:03:06 +0000
Manifest next update: Sun 08 Mar 2026 23:03:06 +0000
Files and hashes: 1: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl (hash: xuLsPKbP0+OWMM0yrilMXkJV5K0yBurRIKfZKzusUXQ=)
2: DF277BF6108811F191FBC4DC323D8C67.roa (hash: Zj/qt6d8JZ+mBud8zE0Xyo2kCQrjGw0dQHm9EzZ5uvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl
rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
Validity
Not Before: Mar 1 23:03:06 2026 GMT
Not After : Mar 8 23:03:06 2026 GMT
Subject: CN=69a4c5aa-0105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:12:0b:e6:19:84:a4:bc:71:a7:ad:37:67:
b2:83:73:d0:43:cf:a1:c5:06:c4:1a:e6:be:65:0d:
f5:08:64:46:88:7d:7d:e0:f9:26:79:61:00:4e:a6:
c9:e1:f8:29:1c:db:ce:55:c5:44:b0:78:27:39:30:
f9:f0:60:16:61:b6:86:51:d0:eb:f3:72:3a:6e:b2:
c6:17:c3:1f:22:a3:7b:0d:bc:62:10:14:40:ec:83:
ad:24:36:4c:26:59:e5:af:21:4e:39:4c:23:2b:24:
b6:cf:2f:60:ca:66:c9:3f:ce:13:28:3e:20:f0:ac:
ff:aa:03:0a:55:f4:29:f5:e5:91:c3:90:61:ba:56:
f6:3a:22:9a:dd:c9:33:27:40:59:b2:ec:d6:e5:ea:
f1:e2:88:82:d5:90:49:d3:db:63:7f:7f:c5:bd:b6:
c6:e0:25:51:d8:f8:27:1e:41:f8:d1:5b:29:76:8a:
6f:6e:90:db:7a:7c:0e:26:f5:8f:43:09:51:88:da:
fd:ca:4f:89:3b:6c:01:9c:5a:27:ec:4a:55:8a:fb:
a6:6e:c8:e4:c6:e4:60:69:55:ac:31:2f:62:6a:6c:
e6:fd:e0:f8:14:b9:89:ce:d7:fb:b5:fd:48:57:0f:
d6:90:46:a7:4e:be:65:08:a5:2b:13:c2:c2:dc:4f:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6F:BC:0E:D5:8E:19:C2:48:B6:BE:BE:2D:88:94:2D:E1:DE:89:6F
X509v3 Authority Key Identifier:
keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:11:ad:36:51:20:cd:ab:85:3f:d9:6e:2a:f8:3d:5c:eb:a8:
0b:94:07:3c:63:7c:bf:f7:c3:61:8a:20:cb:81:99:1e:13:67:
21:92:48:54:48:a9:81:7a:0c:ad:cc:eb:c8:4d:25:f6:27:f2:
b7:7f:42:57:d1:a8:15:c9:94:6c:d1:d3:39:9f:e0:3d:89:fc:
44:ce:5d:2e:4f:a5:66:af:cc:7d:60:1a:37:8b:d0:64:4b:c0:
6b:e4:ab:8b:4d:ff:ec:50:8e:83:23:05:fb:3a:dd:2b:94:26:
db:7f:df:14:6d:2e:d8:e8:79:05:03:1e:e5:81:fd:83:f6:e7:
f5:f9:11:5a:af:09:85:20:d9:14:45:17:cf:68:fa:89:6e:eb:
e4:b4:30:07:4f:12:d7:f8:7f:9a:77:97:53:75:28:50:ea:56:
49:b1:53:a6:1b:1b:de:c4:47:f9:8d:cf:93:21:4b:c9:a7:9d:
5e:f0:dc:cb:f9:52:de:0f:24:47:89:7e:2f:ed:b2:9b:29:39:
58:9c:36:f8:5f:a9:4d:25:ef:83:eb:6b:1e:6c:d1:3f:28:75:
a5:be:9c:82:5d:5f:29:81:5f:d0:30:7c:32:2c:9b:a1:9d:16:
d3:df:d2:74:14:e5:df:e4:26:15:df:44:ef:3e:b8:59:e7:05:
98:44:08:90
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NkM0MzExMC8GA1UEBRMoRDJDNDY3QkMzQzYyNkJDNUU2QUUxQjJBNEQyMzU3MTFE
ODE5Q0FFNDAeFw0yNjAzMDEyMzAzMDZaFw0yNjAzMDgyMzAzMDZaMBgxFjAUBgNV
BAMTDTY5YTRjNWFhLTAxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCULhIL5hmEpLxxp603Z7KDc9BDz6HFBsQa5r5lDfUIZEaIfX3g+SZ5YQBOpsnh
+Ckc285VxUSweCc5MPnwYBZhtoZR0OvzcjpussYXwx8io3sNvGIQFEDsg60kNkwm
WeWvIU45TCMrJLbPL2DKZsk/zhMoPiDwrP+qAwpV9Cn15ZHDkGG6VvY6IprdyTMn
QFmy7Nbl6vHiiILVkEnT22N/f8W9tsbgJVHY+CceQfjRWyl2im9ukNt6fA4m9Y9D
CVGI2v3KT4k7bAGcWifsSlWK+6ZuyOTG5GBpVawxL2JqbOb94PgUuYnO1/u1/UhX
D9aQRqdOvmUIpSsTwsLcT7iBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUR2+8DtWO
GcJItr6+LYiULeHeiW8wHwYDVR0jBBgwFoAU0sRnvDxia8XmrhsqTSNXEdgZyuQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzQzL0M4MDlCOEYwMTA4
NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThYbXJoc3FUU05YRWRnWnl1
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMHNSbnZEeGlhOFhtcmhzcVRTTlhFZGdaeXVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2
QzQzL0M4MDlCOEYwMTA4NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThY
bXJoc3FUU05YRWRnWnl1US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCkEa02USDNq4U/2W4q+D1c66gLlAc8Y3y/98NhiiDLgZkeE2chkkhUSKmBegyt
zOvITSX2J/K3f0JX0agVyZRs0dM5n+A9ifxEzl0uT6Vmr8x9YBo3i9BkS8Br5KuL
Tf/sUI6DIwX7Ot0rlCbbf98UbS7Y6HkFAx7lgf2D9uf1+RFarwmFINkURRfPaPqJ
buvktDAHTxLX+H+ad5dTdShQ6lZJsVOmGxvexEf5jc+TIUvJp51e8NzL+VLeDyRH
iX4v7bKbKTlYnDb4X6lNJe+D62sebNE/KHWlvpyCXV8pgV/QMHwyLJuhnRbT39J0
FOXf5CYV30TvPrhZ5wWYRAiQ
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:41 2026 by rpki-client