
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json)
Hash identifier: lULtr1pd+b5VZqamj5nzcNdCqg7WR1+oBA++ognoSqg=
Subject key identifier: 8E:B1:23:C6:ED:D3:DB:27:D5:67:2A:CD:8E:FE:9D:DA:58:45:FD:3D
Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
Manifest number: 02A1
Signing time: Sun 01 Mar 2026 02:21:19 +0000
Manifest this update: Sun 01 Mar 2026 02:21:18 +0000
Manifest next update: Sun 08 Mar 2026 02:21:18 +0000
Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: LErvlJ3UxGbGnl6MzyX6SUvuvXc0uRVAKwTPjaDzhmY=)
2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: XLhgRmis7uOQ8aJ9/uFiC1tdxAcEfjqgmzA7lC0wW9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl
rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
Validity
Not Before: Mar 1 02:21:18 2026 GMT
Not After : Mar 8 02:21:18 2026 GMT
Subject: CN=69a3a29e-272b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:9e:d5:98:60:aa:f2:1c:53:59:84:4a:0a:
01:f8:bd:9e:94:3b:d9:e7:45:7b:cd:b5:8b:43:ae:
95:9f:c5:41:62:a8:9f:98:48:b9:43:32:78:91:2f:
8b:67:56:07:8f:c5:91:6a:22:da:6e:1c:63:a3:eb:
7d:b9:5b:e4:63:5a:6b:0a:eb:db:6d:db:19:d0:3e:
b4:d0:70:b0:56:d3:2e:46:c7:dc:58:f4:b2:ee:1c:
80:bf:f7:07:80:47:37:95:58:55:21:5f:a2:e0:2e:
7a:20:6a:77:86:58:e6:d5:be:0c:51:ad:c2:65:04:
8f:d0:e4:bd:c0:f6:12:e1:20:b6:c9:6b:84:74:04:
5a:30:4b:bb:03:43:4f:58:27:f4:60:89:99:cd:a2:
51:5d:7d:76:e5:2d:40:c0:d3:28:f1:2f:4e:27:0b:
f5:f9:86:a7:14:02:b2:d3:25:bf:67:da:e8:1a:03:
48:31:2a:a7:b8:37:63:6f:f1:07:9a:7c:df:06:60:
1d:91:ee:50:c4:f1:06:9b:9c:e7:7a:15:7b:3c:3c:
c3:2c:be:35:77:d8:67:c1:ba:42:e5:ac:98:78:a4:
e2:96:fa:5d:a8:63:5b:2c:0a:1c:1e:94:51:2e:8b:
e3:85:50:b9:30:2d:ab:9e:8b:0f:5e:0c:3e:ff:e1:
4f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B1:23:C6:ED:D3:DB:27:D5:67:2A:CD:8E:FE:9D:DA:58:45:FD:3D
X509v3 Authority Key Identifier:
keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:49:16:82:9a:7e:1f:f5:67:67:53:32:50:67:cf:f9:6b:c8:
8c:f5:d1:b6:d9:b6:d2:72:4c:56:c1:c5:f4:57:3d:f9:f5:4b:
ea:4c:b9:c9:a3:7f:1d:79:51:7c:02:31:a6:f8:19:f5:82:ae:
16:42:fe:cd:09:b8:59:33:74:1b:d6:7a:39:7d:f5:b0:04:8e:
44:0b:17:62:0f:8b:44:9c:08:12:06:ae:2d:70:c5:79:42:c2:
28:0a:42:d0:8d:24:57:5d:6a:9d:36:bd:ca:96:29:e1:2d:7c:
26:76:cb:e7:98:a4:d7:5e:73:c0:af:25:3a:44:00:7b:21:b4:
9c:2b:46:56:9f:5d:93:7d:ae:9a:02:ff:ae:b9:41:e6:38:ce:
38:02:36:74:aa:5a:2e:ed:42:ad:38:30:3e:c8:d7:13:d2:1b:
53:33:bf:a0:06:3a:f7:42:10:09:9e:64:9b:c6:cf:52:33:e8:
ab:d6:c3:ec:74:ed:bb:3f:fe:87:fb:ca:3e:eb:ad:3d:69:cf:
c9:4c:43:4a:c8:83:9a:82:21:6f:a8:38:b7:b0:35:86:32:5d:
1a:98:29:57:4a:b3:24:a7:ea:b9:08:68:09:e5:2b:69:ef:34:
81:5c:28:16:17:f3:a9:c6:c9:cb:ac:b6:86:d8:5f:ae:91:99:
01:e7:88:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:23 2026 by rpki-client