
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
File: A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json)
Hash identifier: orm6f/f2rGCbHoj7Zrim3p56x7JkmdEfegYnUroEeCQ=
Subject key identifier: 23:58:3F:3F:6B:18:73:FD:E0:E9:CF:3C:BE:51:0E:6B:92:A8:14:F4
Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81
Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
Manifest number: 0191
Signing time: Sun 01 Mar 2026 05:16:37 +0000
Manifest this update: Sun 01 Mar 2026 05:16:36 +0000
Manifest next update: Sun 08 Mar 2026 05:16:36 +0000
Files and hashes: 1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: YX+f16+fE1Fi37eAVeH/MaJjk6Q4boJbZAUKLklmJ68=)
2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: /F1r5TNvz5O+loAxtqvN6ua/Jk1sG70DsTCgwmr+C4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl
rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
Validity
Not Before: Mar 1 05:16:36 2026 GMT
Not After : Mar 8 05:16:36 2026 GMT
Subject: CN=69a3cbb5-7999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:38:f6:33:54:61:03:1f:65:08:e1:a5:90:
ff:61:99:70:61:28:46:2b:43:10:7c:0c:f1:3e:09:
62:e8:af:74:97:32:4b:97:0f:1b:86:b2:08:bf:7b:
1d:48:d1:72:68:7a:ec:98:ab:bd:ab:90:19:c8:fa:
d5:26:9d:d9:a3:ac:f8:25:52:ce:85:10:b1:a0:45:
f3:63:70:9e:0d:74:34:d6:8d:68:8f:bd:28:18:51:
a9:7f:3d:59:51:3e:c4:3f:00:a6:a4:5c:cc:57:50:
78:c5:a5:e9:e6:27:c4:fb:86:74:9c:5d:39:ac:19:
5f:0c:ac:7f:8d:cf:5d:52:b7:58:44:15:96:0a:5f:
53:5a:44:a3:8a:80:04:15:df:a1:a2:15:f2:3c:1b:
8b:84:fb:ce:d4:6c:af:c2:bc:a7:63:88:20:fc:81:
27:1d:fd:92:ed:b2:68:36:85:a5:ad:46:98:13:80:
43:30:ae:d1:39:ec:93:29:63:cf:12:f6:62:62:b6:
79:03:09:93:9e:5b:7f:ca:30:0f:f9:fb:59:d9:f2:
5b:c7:20:83:1e:f6:9c:08:ad:86:d1:48:d8:27:23:
1f:0a:69:91:f4:e4:60:f8:61:c2:cf:5a:66:c8:74:
7c:80:0c:ae:78:82:8c:2f:76:2d:e4:e0:9a:80:30:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:58:3F:3F:6B:18:73:FD:E0:E9:CF:3C:BE:51:0E:6B:92:A8:14:F4
X509v3 Authority Key Identifier:
keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5f:79:ca:9b:2f:22:63:53:94:48:d6:22:a2:f7:bf:34:de:
48:70:c0:9c:67:31:d2:49:cf:4b:57:12:bb:75:31:95:40:fd:
f7:94:d7:4e:2a:f0:59:06:51:89:74:66:f1:9e:77:9b:3c:e6:
c5:0e:07:c5:f1:12:e5:87:d6:00:d1:1a:07:a6:1d:38:97:36:
f3:e1:fd:f8:f1:10:d7:4a:9c:2f:d4:a9:ff:ab:4c:bc:cd:db:
f7:08:38:c2:5e:3e:61:a5:6d:cb:59:bb:d3:79:fa:f3:ca:79:
4d:96:9c:59:46:c4:57:22:8b:5c:96:5c:53:7e:ee:4b:bf:38:
20:5f:a6:50:b0:8a:93:0d:88:b7:3e:11:eb:b6:e9:4d:06:15:
5a:44:69:90:39:a7:39:90:71:27:7a:ee:c2:b1:c9:4c:f9:c6:
39:1d:64:79:13:52:b9:d4:5e:8a:7e:da:08:ab:62:46:db:3d:
f6:47:37:fa:f1:46:a7:31:51:85:59:6e:8c:1b:9b:8e:8d:64:
82:1d:c0:9f:2d:8a:ce:3b:21:f0:e2:70:7a:99:cc:10:96:d3:
2e:3a:52:15:22:1c:8d:39:8e:e9:30:0b:8d:35:ce:7a:48:ab:
6d:8f:8f:35:7e:6a:e4:30:57:29:21:69:3b:8c:4a:6a:b4:90:
fd:c8:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:33:42 2026 by rpki-client