
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
File: K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json)
Hash identifier: gFhjJls5PCMvNfjdPKmIBUrSLFgwhMGzTT2KNApvk2Y=
Subject key identifier: 66:77:95:0D:2E:18:E2:D1:95:AD:E3:16:27:51:9E:60:36:43:62:CA
Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92
Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
Certificate serial: 085C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
Manifest number: 084E
Signing time: Mon 02 Mar 2026 00:49:14 +0000
Manifest this update: Mon 02 Mar 2026 00:49:13 +0000
Manifest next update: Mon 09 Mar 2026 00:49:13 +0000
Files and hashes: 1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: 6owkuLcE2TZfakPcBYjwh4sPwHwFOd2n6j8Bian8t+0=)
2: DFB4AB2C9FD911F0B75B1848C4F9AE02.roa (hash: NDPwNan09Ssdmc1pybvK6GRLd224X2AqBtS0fXc6jf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl
rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
Validity
Not Before: Mar 2 00:49:13 2026 GMT
Not After : Mar 9 00:49:13 2026 GMT
Subject: CN=69a4de8a-33bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:4a:ef:b6:60:3c:c7:38:38:fb:3c:51:f8:
fc:db:e1:27:7a:70:94:59:59:ae:06:c8:ec:34:e1:
81:50:a2:ad:70:67:9c:1b:be:5f:1f:e0:66:73:61:
4f:4b:d8:3c:69:86:5f:51:81:0e:91:62:fb:74:40:
a2:d7:e6:2e:df:f6:ea:aa:87:7e:9e:a8:f5:f2:3b:
98:d3:c5:08:14:01:93:2b:81:d4:d2:73:9a:8f:b8:
80:96:99:0a:8f:11:ac:16:48:8d:6a:53:df:73:d2:
2c:6e:a2:0f:95:68:f1:b8:97:57:34:15:ec:d1:79:
1e:4c:c6:81:22:ff:b9:4b:90:81:15:ea:5b:f4:b3:
72:5e:bc:8f:5f:71:86:22:5b:49:8f:08:af:42:69:
63:92:de:de:20:be:6c:15:0f:54:12:02:c6:7f:0c:
c6:b4:76:9b:92:61:67:39:69:64:38:4c:f7:74:3b:
f5:30:73:1d:cb:12:4c:a0:50:95:7f:c7:22:32:11:
32:a5:d2:2d:ab:26:24:fb:4b:2f:14:5f:80:97:47:
a7:cc:0d:e6:a3:30:95:bf:35:a6:46:36:0d:d6:1a:
47:08:53:c9:2d:43:9b:d9:14:3d:0a:5e:c0:3a:c5:
89:07:08:4b:20:a3:c7:6a:48:d9:3d:78:9c:23:47:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:77:95:0D:2E:18:E2:D1:95:AD:E3:16:27:51:9E:60:36:43:62:CA
X509v3 Authority Key Identifier:
keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:16:b5:b9:43:f9:18:eb:ba:42:36:8d:21:0b:40:db:39:1a:
b9:1c:9d:6e:ef:61:c2:7b:e5:c3:fc:de:31:37:74:bd:52:ab:
84:e1:22:45:66:51:35:4f:07:4b:f3:ed:d9:e5:9f:fa:5b:82:
5d:64:f7:0a:72:8b:9e:6c:c5:7c:77:44:b0:b6:ef:e2:12:15:
b9:1b:6a:23:1d:d1:e0:20:8b:54:5f:c7:28:fd:e1:f6:db:8c:
cc:a0:62:60:32:46:13:8e:fc:28:1c:64:99:02:5c:63:e0:f6:
81:a5:47:0e:91:54:20:1b:8d:c2:47:f0:a9:62:2b:c2:21:fd:
c1:d6:3e:8d:57:fd:a5:e9:fe:23:16:24:9b:57:b9:81:d9:42:
52:a1:ce:37:3b:7a:e1:5d:57:f4:1d:91:1c:d4:f5:97:9c:f8:
f1:aa:81:f7:7a:eb:a8:f8:65:c6:82:25:5b:84:cd:9c:a3:d7:
0d:6b:68:b9:ea:f4:42:84:e9:ee:d5:c2:b4:f0:55:d0:14:02:
1d:05:63:eb:a6:0f:2d:a6:72:b4:cb:cb:f3:13:c1:46:ff:2a:
dd:d4:d6:22:d3:03:ec:4b:be:c0:63:16:1c:0c:58:f7:16:18:
35:cb:45:79:f6:ef:91:7a:01:81:1b:a1:ff:82:e4:f3:62:44:
08:8f:cb:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2
NTM4MjM0OTIwHhcNMjYwMzAyMDA0OTEzWhcNMjYwMzA5MDA0OTEzWjAYMRYwFAYD
VQQDEw02OWE0ZGU4YS0zM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmRJK77ZgPMc4OPs8Ufj82+EnenCUWVmuBsjsNOGBUKKtcGecG75fH+Bmc2FP
S9g8aYZfUYEOkWL7dECi1+Yu3/bqqod+nqj18juY08UIFAGTK4HU0nOaj7iAlpkK
jxGsFkiNalPfc9IsbqIPlWjxuJdXNBXs0XkeTMaBIv+5S5CBFepb9LNyXryPX3GG
IltJjwivQmljkt7eIL5sFQ9UEgLGfwzGtHabkmFnOWlkOEz3dDv1MHMdyxJMoFCV
f8ciMhEypdItqyYk+0svFF+Al0enzA3mozCVvzWmRjYN1hpHCFPJLUOb2RQ9Cl7A
OsWJBwhLIKPHakjZPXicI0ehQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZ3lQ0u
GOLRla3jFidRnmA2Q2LKMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD
Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO
SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODEwMC9BQUM3MkUwQ0ZDQ0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJ
Yy16dWRkWjFnMVJsT0NOSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYRa1uUP5GOu6QjaNIQtA2zkauRydbu9hwnvlw/zeMTd0vVKrhOEiRWZRNU8H
S/Pt2eWf+luCXWT3CnKLnmzFfHdEsLbv4hIVuRtqIx3R4CCLVF/HKP3h9tuMzKBi
YDJGE478KBxkmQJcY+D2gaVHDpFUIBuNwkfwqWIrwiH9wdY+jVf9pen+IxYkm1e5
gdlCUqHONzt64V1X9B2RHNT1l5z48aqB93rrqPhlxoIlW4TNnKPXDWtouer0QoTp
7tXCtPBV0BQCHQVj66YPLaZytMvL8xPBRv8q3dTWItMD7Eu+wGMWHAxY9xYYNctF
efbvkXoBgRuh/4Lk82JECI/L8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:04 2026 by rpki-client