
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json)
Hash identifier: 9Z2oEbkaQbYvgDAJAeeIOtYCax5FxKK6Bc3HZZC5kMs=
Subject key identifier: BC:A7:FB:DC:31:88:BF:9F:47:67:00:1C:26:DE:EB:4D:53:C5:A3:89
Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E
Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
Manifest number: 016D
Signing time: Sun 01 Mar 2026 05:46:14 +0000
Manifest this update: Sun 01 Mar 2026 05:46:14 +0000
Manifest next update: Sun 08 Mar 2026 05:46:14 +0000
Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: 51NLyZR2MrZTzUtetUf8+KlZGCs376AKr4wvAFhWCBw=)
2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: RkusyxzR0xrFJ6VFvMv+nvMkxMfB3sdBezjBg1WbNLo=)
3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: vTspr7D2Mh9Ado1Qi+7w7sbqMv4hKB0CPd1WNZ4I3co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl
rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E
Validity
Not Before: Mar 1 05:46:14 2026 GMT
Not After : Mar 8 05:46:14 2026 GMT
Subject: CN=69a3d2a6-709d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:75:68:8c:db:fb:8b:ab:0d:c8:81:24:f3:
a1:28:fc:2d:7a:b9:61:0b:3a:11:48:b6:62:d9:f8:
54:06:64:8a:82:c9:c2:89:57:d8:4d:15:bf:48:41:
f0:ed:04:97:5f:2f:8b:ea:c6:a9:87:55:f0:26:51:
ac:9f:be:d8:16:17:3c:ac:61:fd:27:c6:51:a5:98:
93:0b:68:54:3a:57:e6:4c:31:d8:17:c2:32:c6:12:
84:67:cd:6d:3d:26:93:04:f9:6b:d4:71:02:e5:37:
44:5f:78:cb:9f:42:f4:d4:27:83:3d:8a:18:e1:d9:
90:6b:5b:ba:e8:08:ae:7d:b6:48:9d:fc:ab:21:06:
f7:10:a4:2c:3f:7f:27:39:4c:e0:71:cd:7c:4d:1a:
25:5d:19:1f:6f:31:56:03:49:77:e3:01:03:76:98:
4f:8f:e8:69:81:f7:96:c3:6f:48:bc:75:7c:0c:83:
72:be:a4:22:f6:95:76:49:69:42:d4:0b:e2:05:0b:
a1:77:31:da:45:c6:33:76:0a:7b:cb:a0:d2:a1:bc:
06:d2:6e:6b:d9:3f:76:db:b4:5a:c1:c5:bf:60:91:
37:28:e7:48:2a:4d:b6:b3:86:2c:c6:05:c8:db:a2:
d5:ed:74:af:ca:69:92:36:63:b5:ab:da:a8:b2:2a:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A7:FB:DC:31:88:BF:9F:47:67:00:1C:26:DE:EB:4D:53:C5:A3:89
X509v3 Authority Key Identifier:
keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:34:87:63:3f:aa:11:94:85:91:12:77:23:ed:9d:61:a8:17:
c1:bb:e3:a4:31:d6:5e:b1:87:7c:98:69:ac:88:c3:a1:c5:4d:
fd:35:8e:19:36:84:7f:c0:b2:27:cf:3d:88:2c:35:04:a2:80:
5c:90:fa:c9:8b:e5:47:3f:de:08:3d:95:68:8f:21:0f:3c:68:
da:99:d1:09:9e:e7:52:b6:cb:6d:2c:c6:d9:90:bc:c9:d1:28:
46:f9:27:f6:4e:e7:2d:24:10:6f:b3:46:be:a5:b4:e5:cd:5b:
7e:3d:e7:c9:76:f9:52:21:a7:c4:bc:7d:a2:b1:a8:0e:57:83:
d1:6d:15:5c:a6:7b:70:09:c7:a9:35:f8:a5:d7:c5:0a:f3:88:
b7:c3:5c:5d:fa:00:9e:f7:fe:95:0c:75:77:2c:82:1e:e3:33:
fb:ef:25:8c:60:3b:82:b2:cf:87:ac:86:1e:ab:a1:ff:f5:a8:
8c:f0:1d:58:df:7e:64:5b:d4:b9:14:1b:1a:4e:7a:c4:43:39:
ab:98:00:51:52:db:af:0f:b8:f5:3b:df:28:f9:8d:f0:28:be:
6e:03:8c:95:4b:18:49:a9:ab:34:e7:eb:bb:fd:48:ed:f8:29:
3f:be:7d:d1:f5:e0:24:66:f6:1f:b6:ea:5a:d2:27:46:d5:4f:
a0:51:84:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:31 2026 by rpki-client