
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json)
Hash identifier: 7v1s4ztb2zwzlDEXzPNN0SAQU7IMiHFe0xBWqjJ7TYI=
Subject key identifier: 98:B2:6C:9E:D3:18:0B:8F:A9:0B:9B:9C:CE:B1:CB:67:5F:58:BC:B4
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial: 0CF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
Manifest number: 0CBF
Signing time: Mon 02 Mar 2026 00:25:23 +0000
Manifest this update: Mon 02 Mar 2026 00:25:21 +0000
Manifest next update: Mon 09 Mar 2026 00:25:21 +0000
Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: CdKFIPF2PiwpHJtiFXLvcybv/b5nvCxNHrpNpOlxYvs=)
2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: npMUoX66cgZXCaBB6lCnTnHytLKQeJV2gAr8sUZBNPU=)
3: C1C279D6997C11F0BDB1853FC4F9AE02.roa (hash: sy82Q33W/5kzadQCj37Q7UZ0VhicR2IKGQXfpva0SkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Validity
Not Before: Mar 2 00:25:21 2026 GMT
Not After : Mar 9 00:25:21 2026 GMT
Subject: CN=69a4d8f2-172f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:22:53:37:7d:aa:e2:c6:c4:54:44:44:08:
f2:cf:60:03:12:c1:04:7a:00:73:29:30:02:35:ee:
65:02:71:32:88:59:73:23:b5:af:b0:bc:d6:86:12:
a5:76:b4:de:15:8a:1a:46:0e:4b:f7:ed:20:e0:28:
c5:e9:8b:23:29:39:c6:a6:e4:69:58:5b:97:63:90:
8f:73:ad:c9:7d:c7:4b:71:9d:9d:4e:b7:ec:2b:d7:
9e:fe:62:aa:80:ac:9c:62:35:4f:e5:42:28:86:ae:
90:bd:21:96:c4:37:64:23:57:a7:b5:93:ca:6d:e3:
4c:70:e4:2c:28:4f:d3:91:1b:ac:69:05:16:c1:32:
3e:5e:6c:52:6f:aa:c0:35:9d:9d:81:db:07:0d:e7:
fa:d8:0c:53:70:ff:86:89:58:ec:89:e8:b1:d7:61:
fd:aa:2a:1e:aa:81:f5:e6:14:b5:48:3a:db:fc:ab:
2c:c8:1c:9f:36:d8:f2:bb:e7:d3:ad:fe:8f:73:24:
2e:11:8b:7f:2a:2e:3e:25:6b:ea:b9:64:ea:26:c4:
aa:b2:5d:34:d5:f2:3f:83:d4:85:1c:8b:db:50:ab:
ae:82:e1:27:0f:80:19:ac:19:59:41:dc:37:ed:f0:
8f:85:03:85:2f:7c:42:ea:fa:b9:21:71:7d:42:c7:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B2:6C:9E:D3:18:0B:8F:A9:0B:9B:9C:CE:B1:CB:67:5F:58:BC:B4
X509v3 Authority Key Identifier:
keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:51:9b:34:26:33:a6:be:f6:ff:81:ba:f7:89:fe:49:be:e8:
e0:9b:cd:57:97:68:52:9b:8e:bd:9c:c2:c2:c8:db:32:cb:64:
a7:68:fa:83:db:96:36:12:31:95:33:22:47:2b:29:a7:b5:91:
a7:45:99:76:6d:b5:66:4b:79:4d:c0:c9:e1:f9:12:0a:b9:27:
27:2c:89:3e:dd:89:9f:5a:87:8d:82:8a:09:74:6d:88:47:42:
7b:e2:fa:6c:8a:e6:ba:a8:5d:c5:0a:e6:84:c0:80:1f:d1:be:
83:18:04:d4:13:e4:11:fd:b1:bf:02:2c:01:f8:e4:f2:e0:d8:
84:55:01:9e:66:ca:20:16:a5:3c:59:5a:3b:4f:83:92:a2:10:
18:e7:22:90:f7:e2:15:dd:8d:8f:75:ad:f2:11:23:23:47:27:
ea:06:cd:8b:61:f6:c4:4b:b9:b5:77:11:e3:48:a5:a0:e1:d4:
16:48:ce:56:8d:ca:ec:e1:ff:6a:11:7e:06:dd:42:ef:66:60:
fe:65:7b:e3:0a:c9:b6:7a:61:67:b4:6c:89:45:67:b1:ed:56:
e6:86:d2:79:7b:b2:3e:7d:67:a7:da:7d:ab:09:cf:0e:f2:d6:
8b:22:9b:3d:7a:7b:73:96:65:59:c5:f5:73:60:08:65:84:7e:
93:b6:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:54 2026 by rpki-client