
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
File: F6I2W2QK2rIDQznh5f80TkeLWJg.mft (raw, json)
Hash identifier: xGcaUXDU9SjlVkhhiXZw6fA88EQOqIys5JNYSo7wLCM=
Subject key identifier: 08:2E:77:81:3F:65:BB:97:B0:65:3C:DC:EB:27:7E:0B:39:2E:84:5D
Authority key identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98
Certificate issuer: /CN=A91E1BB0/serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
Manifest number: 37
Signing time: Sun 01 Mar 2026 09:57:11 +0000
Manifest this update: Sun 01 Mar 2026 09:57:10 +0000
Manifest next update: Sun 08 Mar 2026 09:57:10 +0000
Files and hashes: 1: F6I2W2QK2rIDQznh5f80TkeLWJg.crl (hash: DCsjCh7yv5BPLQo4k4iFMnNvNkDN8BOSmsGz9kfHuUo=)
2: CAA5A90CC47811F0833DFF5DC4F9AE02.roa (hash: H8pE2g5ZUOoAMl+wWqQ1EZjDZWZf77Qbks8/czGrNQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl
rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BB0, serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898
Validity
Not Before: Mar 1 09:57:10 2026 GMT
Not After : Mar 8 09:57:10 2026 GMT
Subject: CN=69a40d77-d79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:f5:e5:98:fe:ba:87:b0:61:6d:77:76:09:
3b:f7:d1:74:37:e2:f7:7c:9b:a0:26:b0:67:07:b0:
3d:3f:21:5f:2f:5f:13:39:6b:a2:30:bc:2a:40:7b:
f2:ca:7d:50:2e:45:0d:d5:82:c7:bf:96:60:f4:6d:
7c:d5:ac:3b:ed:f1:6e:7d:8d:93:95:07:d7:a5:78:
71:7d:bc:9c:7c:ca:21:df:c3:39:5c:30:37:18:9d:
2a:31:49:54:0d:ea:51:58:37:d9:bf:54:d8:bf:e8:
1e:d7:62:f0:f3:57:35:5a:7d:ff:7f:ac:d0:a5:dd:
c5:b2:42:f5:f5:1a:9a:24:7b:da:32:74:bd:a8:0f:
8d:2e:35:90:04:a2:8f:94:c9:12:1c:06:da:0b:f4:
d9:65:07:df:26:b7:44:1e:4d:58:e0:fe:76:a5:a4:
4f:4f:9a:c2:67:78:e7:f1:32:35:43:47:af:cb:d6:
b9:30:35:d2:a8:0a:45:bc:ff:53:4c:fb:c4:a2:26:
5c:6a:e1:48:57:d0:d5:bd:a2:61:98:96:1c:11:5e:
48:31:e0:89:2f:77:6a:78:5e:92:37:83:e6:74:58:
d5:9f:d8:74:12:c6:f7:9d:6c:4a:17:c7:69:90:e3:
9c:e2:92:68:db:da:eb:c0:f3:5c:5e:38:2a:05:a4:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2E:77:81:3F:65:BB:97:B0:65:3C:DC:EB:27:7E:0B:39:2E:84:5D
X509v3 Authority Key Identifier:
keyid:17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:01:de:67:ff:36:46:95:5c:97:90:4c:4a:51:6f:71:b6:b1:
f1:17:7f:89:b2:9a:5f:61:10:30:66:33:29:72:0c:81:a6:f4:
fa:e7:7f:a8:67:68:05:88:21:1b:ad:d0:12:9d:75:85:69:e4:
ad:09:5a:23:34:57:fe:59:4f:39:0d:e0:f6:1b:39:74:e0:9c:
ff:3f:26:b8:c8:6f:92:82:ae:2c:ad:14:c0:d1:b0:dc:61:7e:
08:a2:2a:81:d0:e7:63:36:37:6d:08:60:3d:b8:8c:2a:3a:41:
9f:e2:56:2f:27:4a:54:d9:43:b5:df:25:91:23:57:05:a5:68:
75:32:c3:38:30:ce:6f:e6:25:5e:0f:c7:dc:b3:e2:40:b3:a0:
3e:41:86:58:60:78:f8:3b:0a:2e:ad:24:b0:bc:71:8d:03:d8:
51:af:2c:ce:ed:d3:a0:53:67:91:fd:1c:9c:b1:4f:6e:f8:25:
81:e1:88:88:53:5f:84:4f:8c:32:50:98:b3:68:48:49:fa:ad:
be:1c:69:a2:eb:60:d5:0d:27:bd:aa:e9:61:c8:61:4d:bc:6f:
9d:6e:78:a4:6f:42:08:8a:a3:1e:05:44:63:b3:b7:e4:33:1f:
48:e5:b8:38:4a:25:a3:ec:90:79:3d:56:3b:83:02:a0:fc:bc:
50:3f:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:58 2026 by rpki-client