
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json)
Hash identifier: 9k02nJCa3cxMi+3nvnK07+JOd+dTWLfLbHAbdWmwPHw=
Subject key identifier: 77:0D:8C:DB:26:71:DE:E2:49:62:B1:16:6A:F4:1B:D0:54:74:A2:4F
Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Certificate serial: 230E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
Manifest number: 230E
Signing time: Sat 28 Feb 2026 14:40:57 +0000
Manifest this update: Sat 28 Feb 2026 14:40:56 +0000
Manifest next update: Sat 07 Mar 2026 14:40:56 +0000
Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: OH8Kl562k4o/QtcW109RdwbKa8TExJt+0yZZ899A+L0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8974 (0x230e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Validity
Not Before: Feb 28 14:40:56 2026 GMT
Not After : Mar 7 14:40:56 2026 GMT
Subject: CN=69a2fe79-bab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:c4:d6:70:1a:07:d7:19:41:60:64:27:95:
a2:28:db:4e:b7:4e:99:3d:39:37:9c:27:27:90:f8:
7d:81:1a:20:df:9b:7f:40:8b:1f:94:1f:89:d7:c6:
6d:9e:54:5e:b4:e1:47:f7:d7:6d:a9:1e:2c:80:1c:
05:2e:dc:aa:cf:b4:bc:3a:b9:ab:82:90:c6:22:4e:
dd:59:a4:be:f9:0f:f8:9c:12:5b:9a:52:44:d0:95:
32:40:7b:84:83:aa:e9:08:4c:09:0d:5f:42:50:88:
c1:48:60:58:d6:d4:a2:f6:11:28:6d:1b:0a:21:b1:
2b:90:71:cf:c9:6f:8c:cd:01:8d:04:f3:b0:d0:94:
91:b8:18:39:f2:68:1d:0b:a6:93:9d:6b:ef:90:bd:
80:20:5b:80:bc:86:03:c0:61:0d:19:9c:a6:11:71:
cd:1d:c1:08:50:ba:6b:a1:d8:6f:50:0f:b8:ab:85:
d7:49:96:cc:f9:17:f7:55:9c:4d:75:00:27:59:f4:
90:4f:b2:07:cd:e2:e9:e2:a0:7e:8e:7e:00:25:97:
d5:a7:b4:f7:b6:ab:fc:3e:c9:a4:72:5a:90:e1:f1:
4d:52:92:38:44:a7:97:ed:f5:a7:d9:1e:bc:39:d6:
34:42:7b:1d:16:78:fd:b7:bb:6f:c7:a2:52:6d:ff:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0D:8C:DB:26:71:DE:E2:49:62:B1:16:6A:F4:1B:D0:54:74:A2:4F
X509v3 Authority Key Identifier:
keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:dd:96:07:07:36:36:25:be:d7:5e:03:46:86:65:66:1b:
26:fc:7c:27:2b:ac:52:26:27:42:fe:7b:56:9f:a1:55:16:b3:
88:78:bd:7e:0a:1e:73:e7:b4:e3:b5:22:6a:13:ca:7b:0a:93:
fa:a1:5f:e5:5e:1a:e7:48:14:20:7b:88:97:18:8f:88:04:c9:
ff:d3:50:14:ef:7b:e3:06:74:2e:0f:04:52:cd:ee:b7:c8:bb:
fd:13:e8:fe:a2:87:3c:4c:cf:77:b7:c9:97:e0:7d:3b:e2:4e:
0c:bc:27:82:01:7d:39:13:09:d5:b8:a0:28:cb:aa:ce:fa:12:
15:e2:a0:dc:64:0b:45:f9:c8:77:cf:51:c5:85:15:24:ec:72:
e0:6c:7e:b6:22:12:75:ea:90:f2:9d:1b:c3:49:e7:7a:ca:a6:
83:e7:d8:1d:c8:8e:03:d0:7a:f9:d6:3f:57:06:7f:d9:15:26:
b4:ff:37:f7:f9:21:58:94:aa:07:40:0f:b6:96:25:4b:76:d1:
37:e9:95:4c:d7:32:f7:f9:54:46:20:7f:8e:7a:be:38:7d:1a:
ad:20:ac:a5:86:5e:b6:ef:f8:43:c3:86:a3:86:2a:bc:34:42:
42:d2:55:4e:7e:6d:3c:3d:eb:c5:06:83:e8:78:26:61:0b:48:
59:2c:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:14 2026 by rpki-client