
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
File: a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json)
Hash identifier: Vtt8aZdETD6YuE8sOLh2t0qDUbotGu6PQbnKGU5TBAw=
Subject key identifier: E9:AC:30:83:AE:7C:AA:2B:1D:B7:72:70:D1:73:9F:55:F9:81:5E:F1
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial: 349B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
Manifest number: 347B
Signing time: Mon 02 Mar 2026 02:57:54 +0000
Manifest this update: Mon 02 Mar 2026 02:57:53 +0000
Manifest next update: Mon 09 Mar 2026 02:57:53 +0000
Files and hashes: 1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: GTY38WYASOvUQU36Io7qVrDiOURfqecWbvYJKmz+0TA=)
2: 56C3DC822B0B11EF97C4A74AC4F9AE02.roa (hash: BfM+WJCATCxDvSbNYj9etC2USnC2s+RFYfsw7w+QlP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13467 (0x349b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Validity
Not Before: Mar 2 02:57:53 2026 GMT
Not After : Mar 9 02:57:53 2026 GMT
Subject: CN=69a4fcb2-4992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:40:14:52:18:98:86:75:50:ca:7d:c2:a7:
46:85:12:63:d4:3b:f5:7f:4b:fb:d7:d4:8f:5f:ba:
b0:68:1a:24:9e:4d:02:ab:54:a4:81:d1:9f:9c:a7:
3d:c0:5b:fa:99:18:44:1d:06:a5:59:73:01:5f:20:
15:66:40:7b:74:da:25:71:5a:08:3a:90:38:57:1d:
dc:e6:9f:e7:39:7e:9c:0a:02:a8:d9:4a:a0:ac:87:
fb:37:47:d4:8c:97:17:89:75:28:4d:89:67:92:00:
a9:82:1d:2c:49:fb:ea:29:b0:9b:2e:86:07:18:3b:
83:9a:f1:79:71:8a:e6:79:2b:50:b8:91:80:3d:3d:
f8:7d:99:7b:8f:56:4d:28:0c:5f:dc:6c:e5:27:89:
e3:de:be:33:5c:25:78:75:d2:9b:c9:2f:48:ee:d4:
38:b1:3e:fc:37:a9:49:97:3f:d9:9f:73:ed:fe:97:
cc:52:59:ad:77:56:07:a7:80:f8:ca:e9:0c:9e:bc:
88:bb:45:dc:cb:f2:de:1f:56:23:08:d5:ee:73:bc:
37:56:f7:57:fc:d2:14:24:75:47:eb:4d:7e:d9:a0:
87:45:dd:fe:38:fc:f4:ea:84:ec:92:ab:ac:2e:b0:
e5:f5:e0:5b:23:c7:1b:c4:e2:7c:25:dd:2a:06:80:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:30:83:AE:7C:AA:2B:1D:B7:72:70:D1:73:9F:55:F9:81:5E:F1
X509v3 Authority Key Identifier:
keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:23:b4:69:b1:86:8b:3c:23:63:5b:5e:9f:6c:6d:c8:3a:92:
0c:70:24:29:a4:36:1a:d3:5b:a6:6a:1f:a5:ec:4c:13:1d:ed:
e7:bb:17:95:2e:ed:02:92:a1:f9:51:b4:19:e1:dc:07:fb:79:
26:e3:85:41:b2:b3:52:98:f5:e1:e9:b0:cf:c2:53:06:6d:90:
f7:9e:09:df:65:08:b6:da:75:a7:c3:3f:38:36:b0:dc:78:0c:
61:23:57:14:dd:77:eb:8f:ca:bf:62:67:6b:b4:85:66:74:eb:
57:46:51:89:d8:bb:02:cf:86:49:ad:c8:98:40:a2:15:e7:f8:
74:8a:24:2b:18:bc:25:a6:6d:fb:70:ba:37:a2:62:d6:1d:3a:
aa:27:21:52:ef:96:98:61:1e:7d:af:0c:63:4b:3c:cc:29:01:
73:9f:d3:16:b2:2a:ea:be:0d:e8:ec:80:38:d9:d3:58:88:63:
7b:dc:0b:d3:b7:62:97:63:45:54:26:cb:04:5d:dd:d0:94:98:
bb:41:08:64:0e:be:d5:0e:1d:d1:93:61:f5:bd:2f:c1:eb:ec:
ea:c9:11:e6:c0:d0:31:6d:5a:ef:54:49:79:95:b9:78:62:c6:
37:23:c9:9d:03:b4:40:db:00:b7:fe:f6:0d:0c:a1:25:cb:44:
04:d6:ed:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:23 2026 by rpki-client