
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
File: cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json)
Hash identifier: GuvrqN04pObuzPqRUpkcgqyjaMfqXqj/SYLPhDVZHd4=
Subject key identifier: 56:DB:95:D1:2A:7F:E1:FB:D5:14:CE:AC:80:59:BB:85:C0:74:DA:4A
Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
Certificate issuer: /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Certificate serial: 042E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
Manifest number: 0423
Signing time: Sun 01 Mar 2026 23:08:46 +0000
Manifest this update: Sun 01 Mar 2026 23:08:45 +0000
Manifest next update: Sun 08 Mar 2026 23:08:45 +0000
Files and hashes: 1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: MGWqx4hUvEmhKn2wqU/dcGFyud2InmaE1Rh29zuLhho=)
2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: oqfIxv0udDM9rmoFtVldzIxDF/X78zCUeZiXvqN0ymQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1070 (0x42e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Validity
Not Before: Mar 1 23:08:45 2026 GMT
Not After : Mar 8 23:08:45 2026 GMT
Subject: CN=69a4c6fe-6fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ba:e5:b3:ec:ca:44:6c:03:44:39:27:0a:2a:
20:5d:79:8a:cd:66:d1:65:41:53:7c:f4:02:e7:8e:
c7:5a:6a:42:0e:89:09:e7:3e:99:a5:0b:16:53:ad:
db:f5:ea:5d:07:f4:94:1a:ea:4a:75:c2:5b:e9:0c:
57:7a:c6:86:60:b5:f1:11:b1:6e:70:58:5d:b2:15:
3a:8d:8f:1b:c4:db:c8:dc:1b:01:2f:53:00:7a:75:
f6:ca:3f:4d:4e:7a:c0:cf:af:dd:ea:27:2d:2e:17:
17:0e:45:69:d5:07:cc:2a:da:14:43:44:0b:1a:e0:
21:91:3d:94:53:fd:11:f6:90:d4:f6:40:e8:68:60:
6b:fa:a9:44:f4:5c:30:bd:f0:a3:60:e6:fe:0a:20:
bc:a4:a0:0f:7b:3e:24:bf:f9:39:3a:8c:61:7f:94:
6b:05:86:42:44:ac:27:a8:44:b2:82:fc:af:86:6c:
5e:3d:98:40:9a:39:d2:e3:c1:79:e9:11:ab:fd:d6:
82:17:02:f4:66:43:be:58:e6:12:cb:ba:33:36:69:
46:d2:e8:d4:51:c1:1a:8a:99:fa:41:f5:5b:bd:01:
9e:70:da:f4:57:eb:8b:bc:77:b1:e3:ae:0f:92:1c:
17:63:58:76:e2:c5:ce:c8:e9:23:b0:20:70:c3:fe:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DB:95:D1:2A:7F:E1:FB:D5:14:CE:AC:80:59:BB:85:C0:74:DA:4A
X509v3 Authority Key Identifier:
keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:42:73:3d:3a:21:27:d8:1c:a8:8a:5f:c4:34:83:7f:1f:49:
c9:6c:02:29:93:2d:b3:95:e3:47:c2:32:6d:9b:d1:a1:09:05:
aa:14:4f:01:01:a1:47:cb:d1:ce:e6:19:2a:ce:fc:f4:93:04:
23:01:f9:68:13:68:78:85:d0:00:fe:4b:69:28:73:c5:5b:ce:
c9:16:71:8d:eb:9f:75:14:5c:43:ce:e4:c4:d5:e0:e4:35:48:
54:f0:d4:bb:f7:3a:b5:50:be:93:21:92:56:d7:4c:65:d9:02:
d4:93:d1:53:a6:04:b5:c1:0f:c5:a8:aa:cd:7c:24:c3:65:65:
2f:ba:d0:a7:b8:fa:a6:3e:d9:d9:2a:3e:67:de:e0:7b:21:c5:
70:87:bb:ff:e5:f1:65:67:eb:6a:08:c3:57:65:dd:75:a8:bf:
a1:7c:04:d7:23:60:44:22:12:ac:10:85:09:c3:82:9f:bf:0a:
34:1f:a5:0d:d2:04:f3:68:d3:0a:89:27:3b:f8:54:e7:d5:9d:
bc:59:bd:fd:fa:81:cd:d7:32:cf:74:e7:8d:b1:37:21:3e:7a:
ef:e7:38:8b:f8:c4:77:bb:ba:58:57:e9:c7:ca:99:8b:ba:67:
3b:78:cb:8c:fb:89:e2:14:d7:05:21:86:ed:e4:0e:a2:23:bd:
94:ea:72:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:05 2026 by rpki-client