
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
File: ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json)
Hash identifier: tbTNrYgN34nubONt7MLALLrZExQXhKUTXfh/maUXCzY=
Subject key identifier: 9A:F4:6F:7C:6E:4F:3D:D7:05:C6:26:64:53:1A:E7:44:92:2D:FF:08
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial: 04A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
Manifest number: 0494
Signing time: Mon 02 Mar 2026 00:03:46 +0000
Manifest this update: Mon 02 Mar 2026 00:03:43 +0000
Manifest next update: Mon 09 Mar 2026 00:03:43 +0000
Files and hashes: 1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: fSoIaav/AyR+fFW2Fx1OvXcczLMXFZSzsE2TPX9MWmk=)
2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: jtPs82NLVd21ee8+NCk8Ufzq1PTdaAHag74elLulFv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190 (0x4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Validity
Not Before: Mar 2 00:03:43 2026 GMT
Not After : Mar 9 00:03:43 2026 GMT
Subject: CN=69a4d3e2-e7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:c6:29:4d:ae:b8:24:d9:95:92:85:75:aa:
38:94:a7:db:f0:70:40:7e:58:10:32:7d:08:d2:c6:
ee:46:65:20:c1:70:05:76:92:1c:5f:72:ca:ad:d2:
d4:93:09:6f:82:1a:31:ec:4e:b9:4c:32:d1:01:2e:
47:95:46:8e:29:f8:cb:97:5e:de:70:d4:77:67:62:
12:02:ac:01:09:34:0b:53:9a:ce:4b:f9:63:77:b2:
ed:ea:5f:35:f8:32:98:a8:39:1a:ec:fd:51:b2:fa:
09:74:cd:20:ae:55:4e:65:12:e0:5c:82:78:6e:0a:
94:24:66:20:27:80:2c:df:9c:d3:1c:60:eb:e4:eb:
14:16:96:ff:e3:df:51:23:1e:fc:29:83:bf:26:cc:
83:b2:ab:5e:c5:fc:95:99:04:bd:52:55:bd:13:b5:
90:71:7d:53:d1:e6:d7:b5:a9:0e:99:6b:d2:60:9c:
52:e3:4c:26:e1:64:a9:ad:31:f6:09:7e:0b:0f:31:
77:35:cf:66:a6:8e:f5:38:d1:21:64:3f:0b:20:2c:
3d:8a:8c:1f:0a:1f:aa:e9:6b:64:2b:74:cc:63:fd:
ac:a7:63:a0:ea:0a:02:f8:dd:d1:78:74:87:66:40:
4c:bc:f6:32:d2:a1:44:30:72:e8:b0:d4:d6:75:b2:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F4:6F:7C:6E:4F:3D:D7:05:C6:26:64:53:1A:E7:44:92:2D:FF:08
X509v3 Authority Key Identifier:
keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:44:8d:6a:b5:a1:b2:fa:45:ab:ed:a8:db:1e:64:a8:ee:
80:60:f3:b9:3f:3e:35:0a:d2:9a:3d:03:95:06:a9:37:98:fb:
93:2d:f7:9c:92:c0:45:ec:69:60:07:82:0b:41:03:14:eb:ee:
21:3b:19:e9:1d:d3:0b:54:e7:33:13:1f:71:b0:45:9d:12:96:
ed:c6:9b:fa:7e:b9:37:4e:a5:f7:66:ff:95:ec:51:11:b6:51:
40:14:fb:52:7c:46:21:c7:d9:6e:bb:9d:9b:50:96:aa:ea:79:
56:47:b3:9c:cf:2a:32:fa:c3:42:99:26:1a:ae:48:6a:da:1b:
d7:01:24:ef:07:47:ce:08:e6:b0:2d:0b:84:5d:4a:39:a9:ac:
ff:b5:92:da:d5:f5:b6:8b:64:39:5e:07:39:4a:42:e7:09:68:
f5:7b:ee:32:af:2b:67:e3:72:4a:da:9b:92:82:85:5f:82:95:
2b:15:3e:9c:a2:6b:6c:89:90:58:14:da:68:74:0c:fa:a3:43:
36:ef:a3:34:ec:dc:d5:7e:9f:47:9d:f0:c0:e1:01:9e:f2:de:
ee:9e:fe:8e:20:a2:18:20:5a:7e:25:1e:01:80:ab:3e:27:0e:
e6:f2:53:82:1f:12:29:ec:17:15:5c:68:47:bc:bc:06:4b:61:
45:9b:72:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBBQUQxMTAvBgNVBAUTKDAwMTczNDdEQTNGMzVCNzUzOTUxQkRGNEIxQjA3Rjc2
MUUzRDlFQkYwHhcNMjYwMzAyMDAwMzQzWhcNMjYwMzA5MDAwMzQzWjAYMRYwFAYD
VQQDEw02OWE0ZDNlMi1lN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHrGKU2uuCTZlZKFdao4lKfb8HBAflgQMn0I0sbuRmUgwXAFdpIcX3LKrdLU
kwlvghox7E65TDLRAS5HlUaOKfjLl17ecNR3Z2ISAqwBCTQLU5rOS/ljd7Lt6l81
+DKYqDka7P1RsvoJdM0grlVOZRLgXIJ4bgqUJGYgJ4As35zTHGDr5OsUFpb/499R
Ix78KYO/JsyDsqtexfyVmQS9UlW9E7WQcX1T0ebXtakOmWvSYJxS40wm4WSprTH2
CX4LDzF3Nc9mpo71ONEhZD8LICw9iowfCh+q6WtkK3TMY/2sp2Og6goC+N3ReHSH
ZkBMvPYy0qFEMHLosNTWdbLDlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJr0b3xu
Tz3XBcYmZFMa50SSLf8IMB8GA1UdIwQYMBaAFAAXNH2j81t1OVG99LGwf3YePZ6/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEFBRC8wREU1QjQwRTc5
RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelczVTVVYjMwc2JCX2RoNDlu
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCYzBmYVB6VzNVNVViMzBzYkJfZGg0OW5yOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEFBRC8wREU1QjQwRTc5RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelcz
VTVVYjMwc2JCX2RoNDlucjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU5ZEjWq1obL6RavtqNseZKjugGDzuT8+NQrSmj0DlQapN5j7ky33nJLARexp
YAeCC0EDFOvuITsZ6R3TC1TnMxMfcbBFnRKW7cab+n65N06l92b/lexREbZRQBT7
UnxGIcfZbrudm1CWqup5VkeznM8qMvrDQpkmGq5Iatob1wEk7wdHzgjmsC0LhF1K
Oams/7WS2tX1totkOV4HOUpC5wlo9XvuMq8rZ+NyStqbkoKFX4KVKxU+nKJrbImQ
WBTaaHQM+qNDNu+jNOzc1X6fR53wwOEBnvLe7p7+jiCiGCBafiUeAYCrPicO5vJT
gh8SKewXFVxoR7y8BkthRZtyDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:18 2026 by rpki-client