
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json)
Hash identifier: EqIELoXW7zttqft4fPz+HeQ0k7DMpk3ToV30Pry2dyk=
Subject key identifier: DB:76:A0:68:DB:B6:54:B8:82:36:CE:66:32:36:9E:38:24:6D:A6:36
Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
Manifest number: 011E
Signing time: Sun 01 Mar 2026 06:48:15 +0000
Manifest this update: Sun 01 Mar 2026 06:48:14 +0000
Manifest next update: Sun 08 Mar 2026 06:48:14 +0000
Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: wRFSj8Nj+vEKH41hKgo3JO0SJuzyNyg3/fwBtGieBFs=)
2: 91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (hash: JUhKEj8SXKCy6S8oeqW1ENv6R+HMPTPZWeDqctZ/CKU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Validity
Not Before: Mar 1 06:48:14 2026 GMT
Not After : Mar 8 06:48:14 2026 GMT
Subject: CN=69a3e12f-4549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:3a:e2:c9:fe:8c:77:3e:7c:f6:85:ea:53:
19:34:92:1f:7e:2a:b8:9a:91:05:c6:c9:28:09:9e:
60:90:25:ee:89:38:36:8a:92:52:46:fb:da:43:2f:
41:0e:74:c7:08:04:18:59:05:88:39:3a:ff:94:ce:
cf:c0:b7:8c:be:0d:8e:21:ac:41:19:ea:5b:61:49:
fd:91:39:61:3f:e9:62:a1:f6:83:18:46:52:b1:9d:
e1:a3:94:8f:55:d4:61:3a:a6:0d:8e:22:9b:e4:f4:
aa:d1:35:f4:54:04:7a:97:4c:fe:02:09:2b:ac:8d:
ca:90:66:2d:bc:31:07:9e:45:b9:35:cc:fb:5b:00:
8c:90:16:2a:25:96:25:cb:cd:fe:f0:b0:99:6d:28:
7e:0f:0d:e3:67:5b:73:6a:26:bc:85:42:ec:8f:2b:
b8:0c:cd:38:2e:08:63:34:af:20:7c:b8:d7:c3:6d:
8a:b7:41:33:b2:ad:13:48:2d:e6:8a:8f:e7:6e:bb:
0f:71:46:15:2c:06:47:c3:8d:b2:f7:4b:e3:32:1b:
ac:8d:c9:aa:9d:cf:14:2d:d6:13:36:a1:ce:ac:0b:
58:3e:e3:53:20:95:07:17:e9:4a:48:71:a3:08:d6:
6b:be:d3:3f:f7:2c:7c:31:51:d4:d2:bc:da:68:3d:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:76:A0:68:DB:B6:54:B8:82:36:CE:66:32:36:9E:38:24:6D:A6:36
X509v3 Authority Key Identifier:
keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:8f:ac:20:64:7b:49:0c:ad:01:f9:a1:fa:45:71:2d:fa:f8:
10:ca:d1:b6:ba:93:1c:2f:48:12:a2:b5:f3:93:eb:e5:ac:c5:
b5:6e:43:9f:5f:f4:20:89:0b:da:51:85:ad:17:06:d1:f2:ae:
b0:fa:ef:88:f3:fe:39:0c:2b:70:3d:3a:9e:cf:9f:da:9f:93:
8c:12:5e:8d:a6:68:68:2c:fe:b7:6f:f3:30:ae:75:95:a1:af:
6e:39:0e:82:a3:fb:5a:e4:d0:fa:24:bc:5c:59:5b:63:01:a0:
43:e6:db:2f:fa:07:b6:3d:c9:25:33:67:75:0b:7b:eb:39:58:
0d:62:7b:82:26:bd:04:dc:b6:7a:9f:e4:64:5a:5f:26:19:41:
6c:21:8e:32:47:f9:54:3c:cb:e7:29:db:07:93:07:65:d4:a4:
25:77:79:ab:1a:71:dd:f4:4b:e1:6a:2f:38:53:c1:9f:ef:1b:
98:da:46:67:69:53:60:01:b2:2e:1b:60:a3:1b:f0:b9:44:05:
c9:50:62:f9:28:e5:1d:5c:17:35:5b:3b:1e:e4:72:ac:d2:ad:
ce:16:d2:cb:ef:af:a8:92:b8:d2:52:a5:53:1e:0f:c3:c6:d2:
ba:c7:e5:b5:54:5c:10:d9:92:11:2c:d1:65:ac:80:92:1f:a8:
d2:f4:f2:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZCOUExMTAvBgNVBAUTKDMyN0I4RTgzRDU0QkE2OUQ3QzM1QzZBMzQ0NDdEMUIx
QjAxMUQ5NjYwHhcNMjYwMzAxMDY0ODE0WhcNMjYwMzA4MDY0ODE0WjAYMRYwFAYD
VQQDEw02OWEzZTEyZi00NTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttI64sn+jHc+fPaF6lMZNJIffiq4mpEFxskoCZ5gkCXuiTg2ipJSRvvaQy9B
DnTHCAQYWQWIOTr/lM7PwLeMvg2OIaxBGepbYUn9kTlhP+liofaDGEZSsZ3ho5SP
VdRhOqYNjiKb5PSq0TX0VAR6l0z+AgkrrI3KkGYtvDEHnkW5Ncz7WwCMkBYqJZYl
y83+8LCZbSh+Dw3jZ1tzaia8hULsjyu4DM04LghjNK8gfLjXw22Kt0Ezsq0TSC3m
io/nbrsPcUYVLAZHw42y90vjMhusjcmqnc8ULdYTNqHOrAtYPuNTIJUHF+lKSHGj
CNZrvtM/9yx8MVHU0rzaaD3bBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNt2oGjb
tlS4gjbOZjI2njgkbaY2MB8GA1UdIwQYMBaAFDJ7joPVS6adfDXGo0RH0bGwEdlm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xQTEwNkNEMDYx
NTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBwMThOY2FqUkVmUnNiQVIy
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkI5QS8xQTEwNkNEMDYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBw
MThOY2FqUkVmUnNiQVIyV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiY+sIGR7SQytAfmh+kVxLfr4EMrRtrqTHC9IEqK185Pr5azFtW5Dn1/0IIkL
2lGFrRcG0fKusPrviPP+OQwrcD06ns+f2p+TjBJejaZoaCz+t2/zMK51laGvbjkO
gqP7WuTQ+iS8XFlbYwGgQ+bbL/oHtj3JJTNndQt76zlYDWJ7gia9BNy2ep/kZFpf
JhlBbCGOMkf5VDzL5ynbB5MHZdSkJXd5qxpx3fRL4WovOFPBn+8bmNpGZ2lTYAGy
LhtgoxvwuUQFyVBi+SjlHVwXNVs7HuRyrNKtzhbSy++vqJK40lKlUx4Pw8bSusfl
tVRcENmSESzRZayAkh+o0vTyug==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:36 2026 by rpki-client