
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier: Us4UiaBKJPXr1N/IaqHXP3VdcQRTeqSZT4xggtmdHmE=
Subject key identifier: 86:D6:7D:97:52:72:24:51:9A:6E:3E:D2:78:2F:4F:DD:54:56:6C:36
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number: 0165
Signing time: Sun 01 Mar 2026 05:53:50 +0000
Manifest this update: Sun 01 Mar 2026 05:53:49 +0000
Manifest next update: Sun 08 Mar 2026 05:53:49 +0000
Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: Z1YHi0geL/jEjRYT2IvNP5PAtVc2vLlB/qLqiVyJXxo=)
2: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: GMXU4PxSO88RcbBqzb2gyEchtqA2OVDVG15sHhZwd7g=)
3: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s=)
4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: UOVpPqyzylpvUS4PFJS4QPq1eALE7pHfj83Afvy+ymM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: Mar 1 05:53:49 2026 GMT
Not After : Mar 8 05:53:49 2026 GMT
Subject: CN=69a3d46d-fd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:75:4f:b8:99:43:ff:90:e1:e1:71:22:ce:
38:fa:38:ae:76:81:92:1a:f5:47:a2:3b:84:46:60:
8a:7a:fc:b4:47:3e:64:50:8b:b0:74:a2:46:e9:2e:
0e:a7:18:92:0f:8b:39:d4:09:9f:0e:7c:31:b4:01:
6e:85:12:e2:89:ec:e0:98:86:8c:b5:dd:18:ec:d4:
b7:bb:95:b8:36:13:29:81:3c:93:8a:88:97:28:5e:
ae:8d:89:d2:f7:e6:4b:c7:43:a1:ef:7e:ee:4f:b3:
64:0f:b5:0a:7c:7b:23:41:6d:ea:2b:17:f3:4b:32:
e4:66:d4:8a:a2:db:1e:6e:34:9a:cd:80:67:95:a6:
3f:0b:b3:1e:20:47:05:f5:ff:29:05:f0:f7:65:8f:
e2:1a:7a:8a:6f:53:51:71:47:37:1a:73:00:0d:45:
4e:1c:97:0e:92:b8:42:42:33:a4:cb:b4:24:fa:0e:
bb:8a:66:ec:20:1a:69:8d:04:1d:b5:9d:2e:bb:41:
94:40:93:94:da:7c:8a:19:7a:c2:0f:6c:33:d8:3f:
6e:3d:cd:1c:12:6d:b6:1f:25:8a:0d:62:cc:34:ca:
31:b4:e3:22:c6:7f:9c:6e:e2:03:f1:25:0c:26:54:
7e:d3:e7:13:8c:28:4b:50:eb:07:02:20:62:12:fe:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D6:7D:97:52:72:24:51:9A:6E:3E:D2:78:2F:4F:DD:54:56:6C:36
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cb:c6:2b:ea:9a:d6:97:f7:d3:8c:1e:1b:9c:dd:a6:f7:d1:
36:1c:39:3b:25:3b:10:b4:34:13:42:1f:9a:85:76:ef:74:48:
e9:c1:7f:a8:44:f7:df:d1:24:6d:f0:f4:21:81:15:60:af:ac:
9a:ed:16:96:29:94:71:49:a7:13:c8:93:a2:c2:9f:ec:52:1e:
20:0b:48:39:1c:d2:6f:1d:c8:f6:fa:d7:41:08:63:e7:f2:ef:
47:54:3f:2d:03:f8:6e:af:0c:d8:c8:19:43:a1:00:99:1a:f9:
2b:75:0c:25:df:57:c3:31:ae:46:ec:86:b2:60:ff:27:5b:b4:
3f:8c:a8:c7:52:cc:c2:db:e5:7a:f6:d4:35:f4:e9:91:56:f8:
4d:59:e0:26:8d:33:bf:cd:cd:ae:d9:47:27:a2:18:a4:3a:30:
95:19:a0:f7:16:b9:13:ee:a3:18:a0:59:11:ab:b2:84:6c:ce:
9a:66:10:1e:df:01:9b:6d:fa:26:c0:be:45:22:86:48:4f:ca:
21:dc:4c:57:c0:50:cf:1c:4b:ca:de:a2:74:ff:8d:79:3e:97:
94:40:ac:18:09:03:e6:b3:28:0d:23:3b:c8:c3:c4:e9:a4:8a:
66:9e:80:c2:06:30:94:95:8e:35:0d:16:12:1c:08:30:a3:cd:
f6:55:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:13 2026 by rpki-client