
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
File: i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json)
Hash identifier: 6ZuSY+416Dfd7kTsP3iSUq10aZOLHWrA5cR5B7k7ZBY=
Subject key identifier: FB:2E:78:03:2C:6F:EA:44:02:2A:57:08:06:B4:03:62:DA:3A:E1:FD
Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14
Certificate issuer: /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
Certificate serial: 06E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
Manifest number: 06D8
Signing time: Mon 02 Mar 2026 00:16:27 +0000
Manifest this update: Mon 02 Mar 2026 00:16:26 +0000
Manifest next update: Mon 09 Mar 2026 00:16:26 +0000
Files and hashes: 1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: P43jIp5w8vheMdMtDZtYB2cn4JS8xZtZujb08mJiczI=)
2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: GFVauPq5fJh/s7MjoQc/i7d6D36WUmsf38yMr3GXmuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl
rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
Validity
Not Before: Mar 2 00:16:26 2026 GMT
Not After : Mar 9 00:16:26 2026 GMT
Subject: CN=69a4d6db-bcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:4a:b9:7e:90:ff:1a:c4:f0:64:8d:7a:f2:
fa:ee:82:73:6b:31:d5:ae:97:55:88:60:ba:2c:ad:
62:07:c6:95:69:36:1a:41:88:51:4a:c4:90:2f:d3:
0e:ec:e1:d7:9e:82:d6:1b:41:46:a7:53:54:49:44:
f6:18:77:c5:cc:19:a3:49:8b:6d:ae:5a:e1:3a:d5:
73:d8:92:6e:70:0a:b4:4d:ce:f6:23:be:c0:b6:ba:
3f:a5:7c:cc:80:7b:f8:d6:2b:c5:5d:6f:31:b4:49:
95:42:f8:6c:4f:5c:3a:81:69:d9:32:c2:5f:00:db:
3b:f0:14:6d:3b:3c:ea:7b:fe:be:10:55:4c:16:54:
bb:06:e0:fb:09:51:f6:bb:1e:c4:aa:0f:80:f0:69:
88:37:a5:58:a4:b8:d6:60:1a:94:86:b1:a4:29:e3:
de:e1:29:fd:cc:e4:c9:9f:bf:b2:8d:e0:8a:f4:b0:
52:f5:d0:3a:87:ff:15:26:3f:f9:a8:a2:64:d1:80:
e4:20:43:97:39:dd:93:a9:f6:0a:1a:bb:00:fa:eb:
5b:23:02:59:1b:78:2d:68:dd:86:b5:40:8d:74:8c:
7a:61:b5:95:8a:31:10:12:46:80:1c:e3:81:87:3d:
15:23:c1:f2:fc:a0:52:ee:b2:5e:71:63:b7:63:48:
eb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2E:78:03:2C:6F:EA:44:02:2A:57:08:06:B4:03:62:DA:3A:E1:FD
X509v3 Authority Key Identifier:
keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:76:b2:5f:4a:03:3e:00:9c:d5:a9:e2:d2:4c:54:71:17:d6:
e4:55:25:a1:03:06:df:d2:e0:fd:81:c5:8e:0b:93:27:68:78:
0a:3a:56:ea:0e:7a:15:a0:e1:9b:9b:37:97:9b:d0:20:c9:eb:
12:6f:11:60:58:9e:55:13:2e:43:0b:58:d4:39:a6:22:0a:fc:
33:ba:cd:a4:23:be:1c:a6:6a:65:55:60:fa:e4:be:b5:db:3a:
c1:1f:de:00:54:29:f2:7c:74:46:42:f9:e5:12:1e:7c:f0:af:
36:b8:00:aa:3c:1f:aa:e9:6e:3a:68:ff:18:71:e7:e1:22:87:
1b:17:b3:ee:4e:8b:0d:ab:85:a7:45:de:54:e1:83:50:d6:5a:
09:2a:df:e5:b6:c5:77:94:ff:71:37:fb:75:b1:90:9f:ff:74:
3b:2b:7b:99:5c:41:b6:d2:88:80:26:17:b7:3a:b4:4f:af:fe:
3f:e4:78:08:27:ed:64:a8:b5:ec:36:59:31:99:69:ac:91:fa:
f9:91:f7:c3:56:ba:3f:1d:f4:39:53:90:f6:88:1b:b6:89:88:
e4:ab:5f:4b:82:32:5c:49:00:0f:c4:8e:14:e4:99:2b:a6:a2:
a6:bb:d5:07:8f:64:22:ea:af:2c:93:94:79:96:f7:b3:b5:70:
6e:f7:15:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz
QkY1QzVEMTQwHhcNMjYwMzAyMDAxNjI2WhcNMjYwMzA5MDAxNjI2WjAYMRYwFAYD
VQQDEw02OWE0ZDZkYi1iY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0tKuX6Q/xrE8GSNevL67oJzazHVrpdViGC6LK1iB8aVaTYaQYhRSsSQL9MO
7OHXnoLWG0FGp1NUSUT2GHfFzBmjSYttrlrhOtVz2JJucAq0Tc72I77Atro/pXzM
gHv41ivFXW8xtEmVQvhsT1w6gWnZMsJfANs78BRtOzzqe/6+EFVMFlS7BuD7CVH2
ux7Eqg+A8GmIN6VYpLjWYBqUhrGkKePe4Sn9zOTJn7+yjeCK9LBS9dA6h/8VJj/5
qKJk0YDkIEOXOd2TqfYKGrsA+utbIwJZG3gtaN2GtUCNdIx6YbWVijEQEkaAHOOB
hz0VI8Hy/KBS7rJecWO3Y0jr1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsueAMs
b+pEAipXCAa0A2LaOuH9MB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD
NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY
UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDMxRS83QTg0ODE5NjhDNjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlm
RmU3bWRVZUJqaVk3OWNYUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEHayX0oDPgCc1ani0kxUcRfW5FUloQMG39Lg/YHFjguTJ2h4CjpW6g56FaDh
m5s3l5vQIMnrEm8RYFieVRMuQwtY1DmmIgr8M7rNpCO+HKZqZVVg+uS+tds6wR/e
AFQp8nx0RkL55RIefPCvNrgAqjwfquluOmj/GHHn4SKHGxez7k6LDauFp0XeVOGD
UNZaCSrf5bbFd5T/cTf7dbGQn/90Oyt7mVxBttKIgCYXtzq0T6/+P+R4CCftZKi1
7DZZMZlprJH6+ZH3w1a6Px30OVOQ9ogbtomI5KtfS4IyXEkAD8SOFOSZK6aiprvV
B49kIuqvLJOUeZb3s7VwbvcVqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:21 2026 by rpki-client