
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json)
Hash identifier: Teb6RtKWvLX15m4aJqI/azIsylYz7hTLbF4u6XZ8vRM=
Subject key identifier: F9:DC:B9:F7:FD:A4:5E:C5:37:23:E1:FA:2E:DF:F4:84:03:64:FF:2A
Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Certificate serial: 0A90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
Manifest number: 0A69
Signing time: Sat 28 Feb 2026 19:52:54 +0000
Manifest this update: Sat 28 Feb 2026 19:52:54 +0000
Manifest next update: Sat 07 Mar 2026 19:52:54 +0000
Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: b5n71IW3sAXl2oK15D7VSWRObqlE+ASdDXBHPzmxX28=)
2: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: PEGA4OC8mv05BIyz+nUXG4RC+NNc/DMmZ+NwYP8Ecm0=)
3: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: K3Jiwqbs2s6HeOThkch0vOjp6h9iTL9bb147FzB60BU=)
4: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: KV+MftwNraCF0gkNRAqYBvwtZwLwc4d8fM/ROUiYBrw=)
5: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: 8+KPASZ/M50Dm6KRLst04BpGO2ukj2WfRt4KxgVGboU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:52:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2704 (0xa90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Validity
Not Before: Feb 28 19:52:54 2026 GMT
Not After : Mar 7 19:52:54 2026 GMT
Subject: CN=69a34796-5117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:a4:cf:25:ab:b8:5a:15:6c:c1:4a:57:cc:
88:94:18:ed:c7:53:bb:24:0a:16:47:75:86:df:aa:
9e:5e:cb:34:be:fe:4e:57:19:36:6d:5d:6a:a1:98:
41:f2:e4:f2:8a:5e:b7:e4:0e:5d:ed:de:41:76:95:
74:e8:17:11:17:d3:b5:87:ae:86:03:24:e0:57:56:
f1:d6:07:45:55:bc:4d:b0:6a:52:1c:9c:39:6d:0f:
76:89:38:61:65:62:89:4f:2e:3e:f9:d9:8d:46:da:
5b:9e:66:a2:d9:37:77:94:55:16:0d:78:b2:24:44:
68:a5:80:8a:ac:22:a7:72:e5:f7:75:04:0a:dc:f3:
ae:a1:42:02:92:84:5e:08:6a:57:76:61:64:5b:73:
94:ca:62:02:e0:00:e5:c2:6a:9d:a2:03:a5:00:84:
19:8c:0c:2f:d0:c8:83:23:f3:50:7f:ab:89:6b:2c:
80:bf:c7:eb:ef:c7:07:46:e3:b9:c3:2c:c6:13:d2:
49:31:dc:8a:f3:83:36:11:67:6d:d0:fc:5e:ac:77:
fe:56:37:ef:e1:3a:e6:f9:da:99:1e:93:e3:8e:c1:
25:b9:6d:f9:8a:22:7f:cf:d9:cc:d0:0c:d3:5d:2f:
3d:4d:5a:9f:fe:82:6f:61:30:12:6d:25:3d:21:c3:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DC:B9:F7:FD:A4:5E:C5:37:23:E1:FA:2E:DF:F4:84:03:64:FF:2A
X509v3 Authority Key Identifier:
keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fe:20:4e:e2:40:27:58:80:b6:97:a7:55:63:92:20:cb:0c:
4b:d3:64:d7:c8:f0:34:4e:42:c3:5d:1a:02:73:9f:db:a3:fb:
78:4d:47:c7:af:61:b9:89:c8:cf:ab:99:57:8d:4c:06:77:4e:
1e:63:6b:10:e2:9d:0f:1f:90:c9:b0:7b:f5:8a:77:f6:bb:93:
17:ef:2b:71:91:8d:75:68:3d:c9:ff:1e:0d:00:8a:6b:08:25:
16:85:27:53:c2:11:52:cf:58:e8:04:87:a2:2f:cb:64:6d:8f:
e1:00:68:5b:50:db:63:d0:bb:bb:da:68:c6:64:07:a9:a7:0d:
1e:64:1c:00:9d:1e:5e:c9:27:df:e3:30:27:3c:7c:37:ec:80:
9c:0d:7e:cd:25:c1:5a:f8:ca:b4:cf:ab:59:de:fc:0c:27:e6:
cf:7d:be:cd:fc:9a:9e:ba:3c:f4:3b:6e:2b:06:f4:51:d1:67:
69:5d:5c:38:64:0d:82:34:cb:68:bd:6c:5d:3f:b2:7f:a1:be:
f4:b6:51:ee:9c:01:8b:b0:77:cc:29:3b:11:b6:e3:e2:01:c2:
5c:e5:77:1b:50:d4:40:cb:ab:05:67:8a:2e:46:5f:58:6b:a9:
27:9a:e3:c4:22:3f:11:96:f9:7a:a2:fc:8c:d6:cf:a2:d6:25:
a2:c9:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:15 2026 by rpki-client