
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json)
Hash identifier: RQkQz7Ko4qxyKzmWeThi2QarKWSSRaAvkK9mkkAijp0=
Subject key identifier: B6:F1:EF:DC:DC:FD:57:DC:8D:C6:55:F8:C6:EA:B8:92:33:00:B8:92
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 3518
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
Manifest number: 3518
Signing time: Sat 28 Feb 2026 14:37:59 +0000
Manifest this update: Sat 28 Feb 2026 14:37:58 +0000
Manifest next update: Sat 07 Mar 2026 14:37:58 +0000
Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: eozRCOYO/VYV0uj5suKUHbbPv9McAHEMov6A6BvN+48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13592 (0x3518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: Feb 28 14:37:58 2026 GMT
Not After : Mar 7 14:37:58 2026 GMT
Subject: CN=69a2fdc6-79f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:52:d2:05:4c:a9:94:26:a4:40:39:5a:dc:
d1:cc:7d:9a:4e:78:97:e4:c2:f7:fc:43:09:2a:ef:
d2:46:3e:2f:8a:6c:57:6e:51:07:e4:ea:dd:d9:87:
e3:75:87:a7:ff:a5:b3:f1:34:fa:6e:f2:4e:7c:75:
96:0e:f5:e7:8e:6a:8c:78:40:ef:6e:a7:fb:96:c9:
04:8a:70:a2:10:31:7c:a2:59:ff:cb:50:c4:79:d4:
22:a8:96:1d:57:52:c0:77:bb:e9:3f:5f:bf:42:b3:
04:de:7b:0b:b5:8f:2a:d7:55:2e:94:d1:02:c2:43:
99:f1:18:74:8a:c1:a2:16:9e:ed:34:1a:2d:ed:1c:
a1:39:a4:55:7f:ce:ce:6b:0a:92:ee:0b:4a:cc:bf:
27:f8:59:01:cb:f1:20:29:77:11:35:be:e2:96:97:
43:97:cd:13:86:fc:ce:db:2d:16:95:b6:04:32:fa:
a4:43:70:50:06:7a:c0:0e:f0:dd:05:ac:46:9e:3b:
df:94:50:ed:0c:c2:18:13:c0:57:93:fe:b2:4d:20:
07:07:b8:46:20:6e:06:72:9d:68:65:bb:07:ad:dc:
b3:ce:a6:b2:b0:c2:25:73:53:25:a5:40:ed:6f:26:
f8:e6:80:dd:33:4b:31:98:58:5c:72:2c:e8:42:e1:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F1:EF:DC:DC:FD:57:DC:8D:C6:55:F8:C6:EA:B8:92:33:00:B8:92
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:99:3e:0f:fa:92:24:f7:37:d6:d4:6d:9c:42:5a:e3:3e:3b:
0e:c3:90:34:01:50:49:55:fd:bb:4d:db:21:c3:ab:20:26:db:
5f:c7:e4:30:06:42:d0:7b:a3:f6:4d:2c:40:e4:f0:2a:e5:d6:
f9:f1:8d:ea:3a:97:fa:fb:cf:55:f4:66:33:32:84:4a:2c:28:
f6:d2:6d:d9:7f:77:62:de:45:43:cd:a8:86:cc:a3:2f:14:a4:
e8:73:61:89:70:0c:fb:2d:99:5d:8e:7b:e7:33:e6:40:b0:bc:
b7:88:07:dd:e3:4d:5b:ee:f6:98:70:62:61:5a:5a:a7:c5:60:
4e:90:0c:d6:de:91:79:4f:e4:06:8b:d3:54:4a:18:fd:a8:16:
4a:2a:6a:29:6e:58:78:0e:03:c2:c3:26:e3:b5:a9:53:22:03:
5b:56:89:ce:f9:41:25:c5:68:a0:0a:ce:e4:a6:73:1e:58:c4:
c7:5c:67:44:79:ae:d9:7c:fb:0e:76:23:82:8e:0d:1e:42:8e:
20:cb:11:03:bc:c3:18:e8:46:23:05:79:72:4b:5f:a6:f4:d1:
95:1a:a3:59:6c:b6:34:3d:7b:07:5c:b9:71:6c:ac:90:b5:aa:
c9:c2:0c:f8:4a:ac:b5:0d:f1:ee:82:14:de:10:51:3f:fc:b7:
6c:d4:b8:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB
NzM0QTkyQkQwHhcNMjYwMjI4MTQzNzU4WhcNMjYwMzA3MTQzNzU4WjAYMRYwFAYD
VQQDEw02OWEyZmRjNi03OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7VS0gVMqZQmpEA5WtzRzH2aTniX5ML3/EMJKu/SRj4vimxXblEH5Ord2Yfj
dYen/6Wz8TT6bvJOfHWWDvXnjmqMeEDvbqf7lskEinCiEDF8oln/y1DEedQiqJYd
V1LAd7vpP1+/QrME3nsLtY8q11UulNECwkOZ8Rh0isGiFp7tNBot7RyhOaRVf87O
awqS7gtKzL8n+FkBy/EgKXcRNb7ilpdDl80ThvzO2y0WlbYEMvqkQ3BQBnrADvDd
BaxGnjvflFDtDMIYE8BXk/6yTSAHB7hGIG4Gcp1oZbsHrdyzzqaysMIlc1MlpUDt
byb45oDdM0sxmFhccizoQuF2+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbx79zc
/VfcjcZV+MbquJIzALiSMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE
OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr
cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm
UW9VU2E3RGNTLXFuTktrcjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAypk+D/qSJPc31tRtnEJa4z47DsOQNAFQSVX9u03bIcOrICbbX8fkMAZC0Huj
9k0sQOTwKuXW+fGN6jqX+vvPVfRmMzKESiwo9tJt2X93Yt5FQ82ohsyjLxSk6HNh
iXAM+y2ZXY575zPmQLC8t4gH3eNNW+72mHBiYVpap8VgTpAM1t6ReU/kBovTVEoY
/agWSipqKW5YeA4DwsMm47WpUyIDW1aJzvlBJcVooArO5KZzHljEx1xnRHmu2Xz7
DnYjgo4NHkKOIMsRA7zDGOhGIwV5cktfpvTRlRqjWWy2ND17B1y5cWyskLWqycIM
+EqstQ3x7oIU3hBRP/y3bNS4dg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:05 2026 by rpki-client