
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json)
Hash identifier: p81/FZL03TFl071pGpWaOq2CjAqrZi3g1LxMsRHPyoc=
Subject key identifier: DE:DE:06:2A:86:A7:9D:E7:60:AA:11:08:D5:89:79:4C:37:7D:FA:42
Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
Manifest number: 58
Signing time: Sun 01 Mar 2026 09:12:33 +0000
Manifest this update: Sun 01 Mar 2026 09:12:32 +0000
Manifest next update: Sun 08 Mar 2026 09:12:32 +0000
Files and hashes: 1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: sykHsk8FXar7lnMq93sl1U6ywSh9DKYMYUriDIPNSGs=)
2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: 8wP/NlNE2Z/JRbzUdllp1czpJ2kBXEzpgll4z9yQeFg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Validity
Not Before: Mar 1 09:12:32 2026 GMT
Not After : Mar 8 09:12:32 2026 GMT
Subject: CN=69a40300-23f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:67:84:dc:a7:d7:34:04:09:a2:09:82:87:
1a:f7:75:e8:00:a8:a1:bd:ab:c1:6e:2b:79:55:da:
af:ea:ec:a6:a3:d2:38:34:fe:9f:5d:ab:85:c6:47:
ce:9d:6b:c6:49:ca:73:6c:67:aa:28:5d:eb:a6:68:
6d:21:47:42:d2:1d:e4:aa:ed:49:ef:3b:67:7c:7d:
02:e1:75:57:e8:a8:5c:a8:9b:b4:36:c9:8d:0f:83:
56:3a:c2:dc:cb:58:e3:c8:43:71:7f:70:e9:67:69:
fb:cd:12:8a:c3:86:c2:f6:21:1b:21:ea:44:54:46:
8c:f3:11:bd:4c:68:99:d4:34:c9:aa:83:ac:34:23:
89:69:0d:a4:6b:fa:09:3a:da:58:44:26:95:6c:cd:
09:b6:70:16:65:a1:ba:45:9c:88:6d:6a:7f:c2:cd:
49:42:b3:f7:66:45:7e:f4:db:b4:b1:b2:38:e3:a0:
f5:08:43:06:a0:1c:d2:dd:ce:d2:67:c3:9d:3c:67:
62:70:b5:45:f6:15:a2:50:b4:c0:c6:42:d0:fe:ca:
37:cb:08:ba:b2:1c:05:48:ad:a1:a7:71:2e:dc:92:
f8:ea:56:ea:7b:94:21:02:4e:61:6e:7d:70:9d:2d:
a8:2d:44:be:14:c1:d1:73:94:89:ba:7f:c9:8f:05:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DE:06:2A:86:A7:9D:E7:60:AA:11:08:D5:89:79:4C:37:7D:FA:42
X509v3 Authority Key Identifier:
keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3a:5a:f3:e9:eb:62:95:5b:17:54:ed:c6:7c:7b:7e:48:71:
45:56:54:f9:ef:5e:6d:06:00:8f:1f:ab:23:b5:de:f6:21:f5:
a6:f0:59:1b:27:5c:66:b4:da:54:45:d9:2c:2b:18:f4:97:d3:
9f:9b:5f:eb:86:76:f6:d1:8a:cf:dd:6f:6f:2e:6c:cf:28:70:
ac:d0:8d:7d:5e:bf:05:ae:ff:39:64:25:b1:33:d5:83:84:96:
43:d2:23:2f:e8:65:56:45:75:08:d5:d5:83:07:63:03:4c:a4:
f8:ce:11:03:e7:bb:8d:bf:44:50:9e:9d:95:f0:cf:01:0c:d6:
32:1e:97:b8:7c:b9:ee:18:13:0d:b3:63:1e:07:c8:19:56:55:
99:b0:95:f8:30:9c:20:52:e9:1e:f5:db:07:c3:76:29:31:63:
d7:b9:39:23:a0:4e:32:47:c2:f6:84:c2:45:d4:8b:30:8a:59:
f9:8e:0a:fd:06:b6:20:69:27:1a:14:99:aa:1e:b4:34:3a:72:
e1:be:46:21:e5:f6:0d:99:6a:4a:b2:85:25:77:c6:ec:70:aa:
c8:2c:8a:cf:50:1b:76:53:45:b7:5a:00:4b:c9:54:2f:e9:bd:
fd:e3:6a:31:49:fb:41:73:4d:a6:d9:e0:1f:e7:37:bf:c5:cc:
51:6f:36:89
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2NzQxNDVGNkM1
OEY4M0NENTAeFw0yNjAzMDEwOTEyMzJaFw0yNjAzMDgwOTEyMzJaMBgxFjAUBgNV
BAMTDTY5YTQwMzAwLTIzZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClP2eE3KfXNAQJogmChxr3degAqKG9q8FuK3lV2q/q7Kaj0jg0/p9dq4XGR86d
a8ZJynNsZ6ooXeumaG0hR0LSHeSq7UnvO2d8fQLhdVfoqFyom7Q2yY0Pg1Y6wtzL
WOPIQ3F/cOlnafvNEorDhsL2IRsh6kRURozzEb1MaJnUNMmqg6w0I4lpDaRr+gk6
2lhEJpVszQm2cBZlobpFnIhtan/CzUlCs/dmRX7027SxsjjjoPUIQwagHNLdztJn
w508Z2JwtUX2FaJQtMDGQtD+yjfLCLqyHAVIraGncS7ckvjqVup7lCECTmFufXCd
LagtRL4UwdFzlIm6f8mPBR+5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3t4GKoan
nedgqhEI1Yl5TDd9+kIwHwYDVR0jBBgwFoAURH1Zg78NuRGtj9y2dBRfbFj4PNUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxLzMyRUUwQTZFOTlF
OTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBO
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUkgxWmc3OE51Ukd0ajl5MmRCUmZiRmo0UE5VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
QjAxLzMyRUUwQTZFOTlFOTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJH
dGo5eTJkQlJmYkZqNFBOVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAqOlrz6etilVsXVO3GfHt+SHFFVlT5715tBgCPH6sjtd72IfWm8FkbJ1xmtNpU
RdksKxj0l9Ofm1/rhnb20YrP3W9vLmzPKHCs0I19Xr8Frv85ZCWxM9WDhJZD0iMv
6GVWRXUI1dWDB2MDTKT4zhED57uNv0RQnp2V8M8BDNYyHpe4fLnuGBMNs2MeB8gZ
VlWZsJX4MJwgUuke9dsHw3YpMWPXuTkjoE4yR8L2hMJF1Iswiln5jgr9BrYgaSca
FJmqHrQ0OnLhvkYh5fYNmWpKsoUld8bscKrILIrPUBt2U0W3WgBLyVQv6b3942ox
SftBc02m2eAf5ze/xcxRbzaJ
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:30 2026 by rpki-client