
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
File: k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json)
Hash identifier: cYUUxV+BhPLTdMRNQQ7ZieDkN/3Kj+veHj/SXcRCG4g=
Subject key identifier: C7:BB:B0:81:EB:5C:40:8A:33:1F:CF:F2:C9:8D:8D:A8:41:0C:12:A4
Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9
Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
Certificate serial: 1456
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
Manifest number: 1439
Signing time: Mon 02 Mar 2026 02:18:54 +0000
Manifest this update: Mon 02 Mar 2026 02:18:52 +0000
Manifest next update: Mon 09 Mar 2026 02:18:52 +0000
Files and hashes: 1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: U6MGDYMznxyomMkTib7JUJFsW8NGUuvIPgkxkMfJ4Ss=)
2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: lBBrJlFc6lFPUF/puNjL74UgLNgA767qw8yUAFWXy+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl
rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5206 (0x1456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
Validity
Not Before: Mar 2 02:18:52 2026 GMT
Not After : Mar 9 02:18:52 2026 GMT
Subject: CN=69a4f38d-add2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:42:f3:25:eb:3d:90:7c:27:ee:cb:e5:57:
d9:0b:f5:9b:05:93:e1:04:d5:75:fd:30:b4:b4:66:
d2:df:1a:d1:f9:b0:f3:d5:17:64:e1:63:37:3d:0e:
58:c5:ba:95:de:78:a8:89:1f:2c:d3:72:08:2a:07:
9c:c8:ec:df:d4:6d:8a:36:57:99:8b:45:b2:1d:6e:
67:2f:6c:b2:8b:15:0f:8a:41:b1:b1:22:da:5f:6f:
2a:e4:1b:d1:35:01:0a:92:33:94:2b:b5:b2:48:2e:
e9:31:67:ec:5f:39:6a:7c:47:22:a7:b5:a3:1c:ac:
b4:8d:e9:20:8c:78:a5:db:42:82:42:8e:4d:50:10:
45:03:3d:45:c6:d0:5c:5a:43:1e:66:24:66:ff:c5:
d5:17:f0:fe:d6:ef:34:02:9f:31:26:ea:aa:4a:3f:
6f:5a:c4:b3:27:be:67:e4:56:53:0b:8e:bb:08:98:
84:26:8a:51:bd:59:36:e0:58:4f:d7:c7:2a:e5:77:
0e:c7:82:06:4e:89:26:c6:77:aa:2a:99:02:2c:52:
b1:22:c3:ba:1e:81:ce:31:1e:4c:f5:c9:81:52:7c:
5e:b3:68:88:28:9c:82:e9:6d:c4:e0:61:65:cd:1b:
99:17:31:01:78:17:0c:a4:23:3a:d6:e0:61:e0:13:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BB:B0:81:EB:5C:40:8A:33:1F:CF:F2:C9:8D:8D:A8:41:0C:12:A4
X509v3 Authority Key Identifier:
keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:46:1d:44:7d:8e:f8:de:c0:7e:d3:f1:6c:f0:a4:65:32:5a:
aa:9f:61:68:42:26:ad:3b:a8:d0:e9:66:3a:7a:5e:0c:70:75:
d8:8e:30:c2:11:43:55:8c:da:f7:68:bc:8a:63:c3:97:b6:e1:
f3:a8:69:c9:9b:2b:70:37:86:1e:0e:55:9a:38:64:09:db:d1:
20:d1:9e:80:33:49:35:1d:cb:fb:68:3f:c0:d4:1c:9f:2b:3b:
77:21:7f:b7:d8:e6:d7:5f:34:4e:eb:f5:bd:4c:f2:ab:31:b5:
4a:8a:3d:b3:3a:9a:5c:12:e8:6e:fb:05:92:42:f0:42:ec:96:
f2:e5:99:72:38:35:25:ed:0e:db:d9:ac:c5:ad:62:26:51:71:
7d:56:38:ea:cb:28:e4:12:fb:a3:e2:f3:22:de:33:97:92:d5:
a2:e8:d5:ad:c3:54:12:f0:e8:95:e6:9a:4b:56:ae:63:27:58:
d8:81:6c:7f:4f:be:2a:05:b2:f4:7d:00:37:e3:12:75:3d:6f:
37:0e:e1:3b:ed:e3:14:d1:07:24:79:87:35:2b:36:4c:19:56:
63:22:cf:62:d4:dc:0a:03:b9:34:8d:14:71:02:69:50:0a:3f:
b4:62:b6:de:7b:53:6f:86:a0:3d:e0:32:54:7c:ee:dc:26:ee:
60:2e:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:39 2026 by rpki-client