
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json)
Hash identifier: eCA/L93r1qJ23PDU8VXuiyKBCwjAF1ierCGtcX0MgA4=
Subject key identifier: 48:2C:DC:F1:F7:2B:8E:CF:51:BD:07:99:BD:05:6A:69:CA:07:DE:4A
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
Manifest number: FD
Signing time: Sun 01 Mar 2026 07:15:40 +0000
Manifest this update: Sun 01 Mar 2026 07:15:39 +0000
Manifest next update: Sun 08 Mar 2026 07:15:39 +0000
Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: DU1RnsArka7pYqtNu4kPc+wX06x+jCU+uuiHdmftOA0=)
2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: 1Pw3F4k0O1ke+ThDTspVWhZWgUjv2zsb15CKjPdj4IQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Validity
Not Before: Mar 1 07:15:39 2026 GMT
Not After : Mar 8 07:15:39 2026 GMT
Subject: CN=69a3e79c-36a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:65:b1:ad:22:54:a5:3d:8a:9a:5b:c7:3e:
c3:11:78:c1:16:09:73:e6:f2:03:7e:2b:5e:32:a2:
3e:c8:20:f1:3b:26:7a:95:f4:92:af:84:8b:16:31:
65:37:c8:15:4c:b1:fc:19:16:12:3f:64:7c:0e:a5:
26:d8:fb:c6:de:7c:8b:c5:ce:93:06:cf:26:25:fa:
01:3a:01:65:0e:fa:60:44:eb:fa:0a:4d:9d:10:e6:
bb:74:69:ae:6f:54:21:2c:68:19:8e:5a:2a:ac:3a:
8f:2b:e6:1c:6c:2d:da:c7:d1:da:0d:89:33:b6:89:
58:aa:f0:5d:4e:29:2b:85:87:f4:90:b4:98:9d:a5:
97:5e:07:c2:65:15:db:6c:a6:c6:df:77:17:6e:63:
48:2f:44:78:be:ff:c4:8c:55:ed:e6:be:b6:07:52:
42:73:e6:e1:c3:95:37:21:93:5c:3e:7e:5f:24:4b:
d3:26:fd:2a:dc:34:4c:33:83:31:93:06:67:d9:1f:
81:1b:e9:0c:17:8a:b5:5f:ad:13:65:6a:c7:11:be:
a1:49:e1:0a:55:1b:17:8e:b1:46:dc:9f:1a:58:db:
53:27:19:c2:4a:ce:cf:11:08:fb:7f:56:14:63:a4:
ba:70:c4:1c:f7:2e:aa:ee:7c:b9:c7:db:25:2a:c6:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:DC:F1:F7:2B:8E:CF:51:BD:07:99:BD:05:6A:69:CA:07:DE:4A
X509v3 Authority Key Identifier:
keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:96:82:98:30:3c:41:88:92:1e:da:7b:ee:1f:f9:3a:6e:fc:
e9:85:bd:c4:41:9e:39:fb:ad:85:89:06:83:a4:4d:0f:d7:09:
56:00:56:09:dd:55:08:cd:26:a6:44:25:1b:e8:e3:42:e4:93:
a7:36:09:63:f7:00:6c:07:55:a7:98:7a:54:c1:12:be:dd:d6:
d0:d2:82:9b:de:c4:f9:86:87:0a:5d:ff:2b:45:a6:86:7c:42:
f3:58:7d:e6:42:fe:53:46:1c:4c:0f:55:79:cd:95:a2:17:a5:
1f:0b:d7:57:bf:b5:87:2b:56:07:b9:23:b2:3d:29:a6:35:cc:
b7:0f:66:92:f1:ca:2f:20:51:38:36:99:20:f0:f0:dd:4d:ac:
31:4f:70:08:b3:8d:25:95:fd:0a:ed:36:fb:27:e3:69:35:ef:
38:03:3f:e2:a7:82:d4:31:1b:50:43:54:d1:fc:e8:84:f6:47:
e0:a3:ef:60:ca:c7:5d:05:e5:3a:83:c4:1c:d7:39:b2:11:11:
92:a9:50:ce:72:1f:36:d5:77:87:31:5c:72:f5:a5:61:70:0b:
dc:1d:42:ef:28:8d:61:89:91:5b:f9:40:e1:3e:bc:98:a3:9c:
54:70:d9:72:0a:08:87:87:09:53:23:f3:54:77:74:bd:78:21:
bf:3f:fe:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1
QzFGNzIxMzkwHhcNMjYwMzAxMDcxNTM5WhcNMjYwMzA4MDcxNTM5WjAYMRYwFAYD
VQQDEw02OWEzZTc5Yy0zNmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyHtlsa0iVKU9ippbxz7DEXjBFglz5vIDfiteMqI+yCDxOyZ6lfSSr4SLFjFl
N8gVTLH8GRYSP2R8DqUm2PvG3nyLxc6TBs8mJfoBOgFlDvpgROv6Ck2dEOa7dGmu
b1QhLGgZjloqrDqPK+YcbC3ax9HaDYkztolYqvBdTikrhYf0kLSYnaWXXgfCZRXb
bKbG33cXbmNIL0R4vv/EjFXt5r62B1JCc+bhw5U3IZNcPn5fJEvTJv0q3DRMM4Mx
kwZn2R+BG+kMF4q1X60TZWrHEb6hSeEKVRsXjrFG3J8aWNtTJxnCSs7PEQj7f1YU
Y6S6cMQc9y6q7ny5x9slKsZaLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEgs3PH3
K47PUb0Hmb0FamnKB95KMB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky
NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo
b245UGliMEpLdTVjSDNJVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjJaCmDA8QYiSHtp77h/5Om786YW9xEGeOfuthYkGg6RND9cJVgBWCd1VCM0m
pkQlG+jjQuSTpzYJY/cAbAdVp5h6VMESvt3W0NKCm97E+YaHCl3/K0WmhnxC81h9
5kL+U0YcTA9Vec2VohelHwvXV7+1hytWB7kjsj0ppjXMtw9mkvHKLyBRODaZIPDw
3U2sMU9wCLONJZX9Cu02+yfjaTXvOAM/4qeC1DEbUENU0fzohPZH4KPvYMrHXQXl
OoPEHNc5shERkqlQznIfNtV3hzFccvWlYXAL3B1C7yiNYYmRW/lA4T68mKOcVHDZ
cgoIh4cJUyPzVHd0vXghvz/+kQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:39 2026 by rpki-client