
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier: kZsRvyMbGfqG/yrxRnN4RZIATtiNnVTS6JWi7TI5Pio=
Subject key identifier: D1:20:45:31:E9:D4:92:52:5E:77:97:CE:CA:06:03:F5:C7:F2:99:F6
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial: 071D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number: 070C
Signing time: Sat 28 Feb 2026 22:24:41 +0000
Manifest this update: Sat 28 Feb 2026 22:24:40 +0000
Manifest next update: Sat 07 Mar 2026 22:24:40 +0000
Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: IJCJHku56/8RphmQWFxLqI7T1fra+LuwFxZ94LC0Ejg=)
2: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: tYXj2bMl7MaKxL6ygpAW6mqtyVQwQZ+Bu+BYsWPtUdc=)
3: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: cbGv9Az0WV6nTGgrUjq6cjPrkcXLiewtavxh7ffNibo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Validity
Not Before: Feb 28 22:24:40 2026 GMT
Not After : Mar 7 22:24:40 2026 GMT
Subject: CN=69a36b28-bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:8e:07:b0:b5:ad:85:e4:df:af:e9:58:03:
b4:c5:b2:3a:58:71:18:75:55:34:08:eb:3c:14:d4:
85:7c:bb:2c:d8:62:93:a5:fe:2a:51:e6:da:69:ea:
15:f9:83:e5:64:46:01:c3:c0:6c:58:15:1b:fc:f5:
f9:96:42:04:bc:56:56:bf:b3:d9:a5:37:71:0f:60:
bf:7a:71:89:de:fc:a6:bd:20:76:0b:4a:52:5b:11:
ab:4d:4b:83:70:d9:59:49:82:9f:60:24:47:15:74:
50:60:cc:aa:05:92:d3:9d:ca:00:6f:49:7a:d2:08:
21:20:4a:bb:cd:93:8d:5c:89:c1:13:33:d0:db:01:
31:e0:77:49:30:14:0d:6c:32:27:f1:4c:43:92:ad:
b1:8d:cd:9d:a9:60:95:2a:9b:71:c9:2a:84:b2:60:
56:57:6f:ca:1b:98:19:28:32:60:e1:b5:7d:be:9d:
a5:0d:e3:41:53:8e:57:57:37:eb:d8:25:a2:a5:5a:
16:c8:0b:76:7e:46:bc:a9:13:75:3f:48:de:45:8b:
c1:23:67:7a:1c:83:50:90:b2:44:d8:fa:d9:a0:56:
91:1a:17:85:30:e7:ac:5f:c7:3a:75:56:ca:1c:cd:
70:07:b9:2f:8f:c1:f6:2c:4d:c4:d9:d4:4f:17:95:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:20:45:31:E9:D4:92:52:5E:77:97:CE:CA:06:03:F5:C7:F2:99:F6
X509v3 Authority Key Identifier:
keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ff:5f:88:cb:2a:3f:0e:6c:df:3f:85:52:e7:2b:84:05:41:
5b:8b:54:9c:4e:b9:05:63:08:cf:b1:a6:46:50:6c:f0:64:42:
7a:61:49:a8:08:6c:8a:d0:f3:5d:78:6f:1f:57:6e:df:26:10:
7e:53:cc:3a:ca:05:85:43:96:de:fa:4c:3d:42:be:b7:bf:07:
c1:ff:72:89:2e:da:84:d7:ec:33:d0:24:d3:ee:2c:97:14:3e:
8d:ff:69:cd:58:83:6f:ce:0d:9c:36:d3:cd:bd:67:ad:21:ac:
52:0e:8c:b9:2e:68:80:ba:83:a4:95:1a:85:f0:7a:b2:5e:ac:
e7:e0:83:ca:f4:53:87:2b:ca:ea:18:9d:51:03:f2:1f:6c:d1:
7f:1f:23:97:cd:85:00:dc:81:43:e5:05:b6:55:ce:ba:f7:ff:
55:ab:bf:f2:7a:29:d1:60:b3:d6:64:5a:1d:f3:5d:f5:21:4d:
63:85:f1:6c:14:ba:bf:96:30:51:ea:ec:e5:cc:a3:9b:fa:ae:
ca:93:1b:84:14:a6:ca:c4:af:3a:be:49:d1:7e:d8:d2:4b:f1:
97:0f:6f:a0:53:10:ec:df:63:4a:eb:01:31:11:c3:14:08:ae:
a6:89:7e:35:30:b4:54:fb:8a:be:e5:a8:b6:33:c3:41:39:98:
70:97:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:06 2026 by rpki-client