
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier: OVKqFeJF7UuoMohBSoOUImsiCKdN03nG5cxeJ/438Bo=
Subject key identifier: A7:34:FB:6E:AE:DC:66:74:8F:74:C9:37:EF:76:6E:9E:24:68:6B:AD
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number: 0121
Signing time: Sun 01 Mar 2026 06:48:18 +0000
Manifest this update: Sun 01 Mar 2026 06:48:18 +0000
Manifest next update: Sun 08 Mar 2026 06:48:18 +0000
Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: YiPdh/B+500VCMgnEujbBS/Gc5UdZiJS+etFxcoQlkw=)
2: DF6D4464818211F097447962C4F9AE02.roa (hash: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=)
3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: V41vD109qFi79qtSI0V3NbHmJv38JNXS4Cmmah3H2Gs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Validity
Not Before: Mar 1 06:48:18 2026 GMT
Not After : Mar 8 06:48:18 2026 GMT
Subject: CN=69a3e132-2796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:4c:7a:ac:78:96:fe:db:61:5d:13:d6:ee:
0b:93:23:e7:10:71:ad:9f:59:49:7d:2f:8e:9a:0c:
15:f0:c6:65:19:3d:47:58:9a:c1:ea:6a:13:26:62:
b6:2b:f0:60:40:32:43:27:cd:03:a5:7f:d7:e2:1a:
b2:97:ad:38:19:e4:f8:c8:43:13:3b:86:66:81:74:
06:74:90:b6:e7:17:8c:2a:5f:4b:38:55:1d:ba:0f:
12:ed:6b:ca:92:be:88:64:f4:1e:d7:e3:35:12:a2:
88:fb:06:3e:3c:de:86:3e:b4:01:af:19:eb:24:ae:
aa:34:84:ed:4b:6f:e0:82:9e:9d:2b:8a:5b:5c:32:
d2:b1:65:41:3c:5d:40:8e:e1:5b:b3:39:66:8a:25:
8d:fb:e9:6e:0d:d1:21:a6:3d:ad:8c:60:70:67:7a:
89:9b:ce:e0:82:10:4f:dd:1f:27:81:96:32:1a:10:
08:ad:16:a1:b1:24:53:aa:05:bd:40:08:de:19:41:
e6:a8:1f:c6:1d:a3:4e:96:cc:f4:69:d7:dc:a5:1d:
cf:88:4a:b4:ad:42:27:0b:48:bf:fb:08:72:fc:94:
78:0f:1c:20:4f:45:95:3d:0f:2a:40:3c:d9:97:10:
97:aa:59:be:fa:cd:28:d5:34:cb:4e:2e:ab:b9:ab:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:34:FB:6E:AE:DC:66:74:8F:74:C9:37:EF:76:6E:9E:24:68:6B:AD
X509v3 Authority Key Identifier:
keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0d:6b:ba:26:7f:ee:4f:ad:46:1f:03:33:cc:96:4e:07:0a:
a3:63:75:05:5e:46:ce:77:6e:9d:d3:1e:7f:2e:6f:bd:7b:fc:
c1:5e:ff:55:7c:e6:a8:80:a7:c9:7b:d3:58:41:f3:ba:cb:cc:
d6:6b:bd:65:4a:2b:e3:d8:5b:3e:cf:da:da:23:e9:37:05:02:
a1:25:b9:7c:f0:a0:2b:a1:f7:b6:15:a6:45:76:b4:c5:9e:43:
44:10:f0:7f:fd:8f:64:08:a5:bb:09:c0:9c:d5:8b:15:59:36:
52:ee:17:e1:83:20:4d:6d:26:85:59:17:0a:12:a5:ad:5c:f5:
96:1b:13:5b:3a:ba:b3:b3:7e:4f:b4:d4:39:38:fe:0d:9e:eb:
17:5b:c1:53:97:d0:a1:36:be:66:e8:3e:72:5e:3e:09:ba:fd:
47:8c:bf:fe:b3:e2:22:8b:5e:75:06:ef:5f:cb:34:62:f1:ba:
31:62:58:bd:a1:19:d9:ce:72:2f:65:3d:77:2a:54:c3:47:28:
ea:07:0c:90:a9:ab:44:12:89:2b:d6:2e:2d:c1:bd:18:c5:2b:
78:cf:7b:a1:f5:ea:38:de:0a:34:db:8b:34:15:07:2a:16:0d:
4e:19:9f:22:27:e5:ea:9b:96:63:e7:7f:bd:90:95:89:2c:70:
48:82:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:43 2026 by rpki-client