
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json)
Hash identifier: Uika3VNzrjHQzAjHjrjlENaws8z1SCYvd1mezI4pjDQ=
Subject key identifier: 98:1D:0B:95:CA:BF:70:82:33:37:65:58:E5:98:36:9D:F5:46:E4:68
Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
Manifest number: 01DA
Signing time: Mon 02 Mar 2026 02:45:07 +0000
Manifest this update: Mon 02 Mar 2026 02:45:05 +0000
Manifest next update: Mon 09 Mar 2026 02:45:05 +0000
Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: V3ji1ymqZ0jDJVvHkKc1wRbpHpCMlR8aroaYR3hNRms=)
2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: aOgdwHx4RJqFv06ROzYFXUkAb7MKRRzbQI1IYFIaGUs=)
3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: 5dJP/M//lcF+sbSnEZ913U8w49zktTAz2tqR2Ha8qBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Validity
Not Before: Mar 2 02:45:05 2026 GMT
Not After : Mar 9 02:45:05 2026 GMT
Subject: CN=69a4f9b3-7ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:2a:80:63:35:dc:23:5d:6b:f2:4b:09:2c:
4b:9d:6a:22:68:2f:7e:fd:6b:41:d3:ee:26:48:db:
7c:eb:2f:cb:bc:a5:12:21:6a:7a:9c:f8:b8:f5:6f:
e6:da:29:d6:d7:f0:58:cd:d2:55:3f:70:2f:5f:f0:
d3:86:7c:b6:5e:3a:29:ff:98:a8:0b:34:4d:e7:28:
bf:a7:6e:8d:95:0e:15:2e:c6:3c:b0:07:ca:3c:be:
7c:dd:be:cb:f8:49:cf:52:86:3e:66:52:90:56:21:
66:d1:6d:e8:14:fc:f7:c4:ea:3f:0c:e4:0d:b8:2d:
36:c7:e4:ef:5f:7f:04:d6:29:b9:92:d6:64:a0:04:
fb:4d:33:d3:f1:29:75:32:e2:3a:63:5c:c5:b5:14:
65:f0:76:77:85:81:fa:a2:fe:12:04:83:c0:b2:0b:
54:8a:46:16:c5:c5:69:14:af:15:c5:dc:2c:d1:65:
d1:e4:7a:fb:bf:7d:3d:71:2c:6b:43:a8:62:5a:6a:
11:c2:9b:e6:b0:c6:a7:b2:f1:24:22:72:5f:96:29:
2d:b0:c6:2b:23:48:90:1e:8b:2b:a4:b1:c8:fd:a5:
82:f1:a4:3e:73:a5:66:ea:18:d0:9d:56:18:cc:1b:
0a:cd:b2:d6:9f:7b:f5:19:6f:cb:dc:d1:b9:25:5a:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1D:0B:95:CA:BF:70:82:33:37:65:58:E5:98:36:9D:F5:46:E4:68
X509v3 Authority Key Identifier:
keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:34:a5:9d:5c:3b:b9:29:29:dc:c0:01:ab:d1:4e:06:4b:ad:
68:a6:95:ec:d4:d2:64:de:ee:50:93:72:e2:4a:af:8b:a9:e0:
67:b7:dd:e2:1e:f0:f3:d7:a8:6d:b1:0c:59:38:57:f4:e5:6e:
1a:79:fd:29:ac:14:99:c5:f6:8a:1d:ab:60:de:69:f6:18:f4:
2a:8e:76:ab:50:0c:cd:50:78:d3:d9:22:0e:f9:12:6c:b2:04:
79:27:f3:5f:6b:ef:54:bc:2e:4a:ef:1f:b5:95:96:5f:c5:9d:
61:09:5d:57:35:c8:93:79:1d:8e:2c:36:e0:14:eb:77:a1:f5:
6c:a0:fb:5d:a4:ea:2e:8f:23:3e:f2:ac:47:c7:65:82:5f:a2:
6b:67:b7:da:eb:1e:d0:a9:42:17:74:ef:8b:5f:a5:c5:a9:eb:
57:75:f5:22:bb:13:27:44:f6:41:2a:7d:8a:f4:b3:8c:7a:38:
84:ee:c1:20:6a:25:06:8c:d3:9a:a6:c4:e9:1c:b9:42:e6:58:
8b:24:97:06:43:6f:a2:88:a6:93:64:d7:42:1b:18:26:d1:5b:
de:c8:66:37:91:31:d5:9e:07:7c:3f:a0:a0:29:61:2b:fc:35:
be:f6:ed:6d:bf:eb:b8:bd:90:7a:3f:e6:a4:d1:86:f6:7d:c0:
82:1f:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:27:59 2026 by rpki-client