
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier: bK71pyWrakZKphQ/W+5RcNp2m7obZV+Z1WyKfcjbSBk=
Subject key identifier: F0:6C:B4:94:6A:04:16:ED:8E:A6:98:DC:2B:8F:A6:F3:18:12:48:5C
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number: 0D03
Signing time: Sat 28 Feb 2026 19:21:31 +0000
Manifest this update: Sat 28 Feb 2026 19:21:31 +0000
Manifest next update: Sat 07 Mar 2026 19:21:31 +0000
Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: pp/xxBVVbmV3QE+hOPZKsk2jqHO8xtIg5ytsxlvZX68=)
2: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: fNb48r4M+gfLXajaKFGp8VWXxugH32v0si+d8iboCho=)
3: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: aDdJ1zHHJM2Pp/llY4+TjUByw8VD+3beZi6B31AyTJ8=)
4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: EO+r4YCRXrWQGjZoJ/CD1KsxdVzlBHVNlbdYh39PLSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Feb 28 19:21:31 2026 GMT
Not After : Mar 7 19:21:31 2026 GMT
Subject: CN=69a3403b-103f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:53:10:b9:53:e8:66:66:10:a0:54:ed:d4:
7d:fe:dd:71:01:dd:6f:13:7c:c8:3a:f0:48:0d:e4:
1f:41:2b:1f:87:81:f0:75:30:7f:c7:31:d8:e2:82:
31:db:01:51:6a:1b:7a:2e:af:2b:ab:ec:a1:c6:72:
27:50:c3:40:4d:12:da:2c:39:9a:d2:69:db:ce:c2:
0b:44:99:bf:ef:be:7e:4a:75:ef:df:ca:5b:f9:ca:
31:13:b6:48:cc:48:f7:15:40:2e:bb:9e:66:d6:0f:
84:9c:a8:7d:4c:cf:30:05:4f:c8:2e:6e:51:ea:03:
70:b1:f7:b3:9b:bc:68:56:53:7a:18:4d:a3:82:f9:
34:68:9b:1a:8c:af:c1:0e:81:c9:19:ca:b3:ee:8b:
fa:37:c8:e4:11:fc:a9:0e:ef:0a:bd:77:fc:57:51:
c2:f3:40:76:49:d3:d9:b5:4e:c1:ad:7f:3b:c2:df:
f2:26:fc:c7:e3:ec:a3:56:47:df:c9:37:6c:5f:20:
d5:64:16:36:58:24:8c:62:b2:32:78:55:cd:45:b2:
4a:99:3d:22:d7:70:f5:d0:8d:ed:eb:5b:ab:eb:1a:
0e:6d:ce:c8:ea:03:bb:88:a3:7d:e5:6e:95:27:ed:
bf:b1:5c:78:04:40:67:09:9e:21:f2:e5:f1:26:74:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6C:B4:94:6A:04:16:ED:8E:A6:98:DC:2B:8F:A6:F3:18:12:48:5C
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a3:d0:35:32:e4:3f:48:80:2b:b3:6d:df:64:dc:64:8e:a5:
ed:45:4b:36:a7:65:92:c9:82:77:83:fd:9c:98:32:44:2d:32:
59:e5:4f:ff:3a:24:5d:c0:30:2e:38:65:32:ec:43:b6:09:fc:
df:b4:0a:e0:0e:63:dc:1c:c6:a5:4d:66:0b:f8:31:d7:7e:bc:
48:65:27:86:cd:2c:1d:11:24:f3:bb:ac:c9:6b:ae:b9:4f:44:
f7:c9:37:01:57:81:60:80:5a:4a:3e:44:33:b1:25:52:4e:bb:
6c:f6:40:46:3b:2b:eb:ac:ee:bb:58:42:7c:9a:5c:f4:63:6a:
77:11:08:db:40:2e:98:47:fb:63:41:3c:8b:66:45:5e:e9:1c:
16:d4:41:6f:3c:ad:1e:91:49:a8:d9:7c:52:96:40:71:e1:10:
a3:66:94:05:b8:7f:ab:d1:58:c3:fd:71:e1:24:58:e0:a7:98:
6f:12:12:b5:c2:30:68:f6:1b:5a:41:c6:a9:01:d9:66:cb:29:
33:c9:0f:8a:ac:6f:ab:e4:34:9a:03:9b:a2:25:34:d1:b1:3c:
0b:30:13:ea:67:fc:cd:f1:23:a4:ac:31:43:f8:28:04:78:7b:
cd:51:35:5f:4a:e1:e4:35:5c:7a:da:e2:83:ff:a9:d5:74:db:
18:21:73:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFGNEIxMTAvBgNVBAUTKEFENzFERUMxMzg5QjE0QTAxMjAwMTA3Njk5MUY1OUFC
RTJDQUIxRTYwHhcNMjYwMjI4MTkyMTMxWhcNMjYwMzA3MTkyMTMxWjAYMRYwFAYD
VQQDDA02OWEzNDAzYi0xMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmYhTELlT6GZmEKBU7dR9/t1xAd1vE3zIOvBIDeQfQSsfh4HwdTB/xzHY4oIx
2wFRaht6Lq8rq+yhxnInUMNATRLaLDma0mnbzsILRJm/775+SnXv38pb+coxE7ZI
zEj3FUAuu55m1g+EnKh9TM8wBU/ILm5R6gNwsfezm7xoVlN6GE2jgvk0aJsajK/B
DoHJGcqz7ov6N8jkEfypDu8KvXf8V1HC80B2SdPZtU7BrX87wt/yJvzH4+yjVkff
yTdsXyDVZBY2WCSMYrIyeFXNRbJKmT0i13D10I3t61ur6xoObc7I6gO7iKN95W6V
J+2/sVx4BEBnCZ4h8uXxJnSy7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBstJRq
BBbtjqaY3CuPpvMYEkhcMB8GA1UdIwQYMBaAFK1x3sE4mxSgEgAQdpkfWaviyrHm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3
MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZLQVNBQkIybVI5WnEtTEtz
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JYSGV3VGliRktBU0FCQjJtUjlacS1MS3NlWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUY0Qi84NDg1OEY2QTQ3MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZL
QVNBQkIybVI5WnEtTEtzZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL6PQNTLkP0iAK7Nt32TcZI6l7UVLNqdlksmCd4P9nJgyRC0yWeVP/zokXcAw
LjhlMuxDtgn837QK4A5j3BzGpU1mC/gx1368SGUnhs0sHREk87usyWuuuU9E98k3
AVeBYIBaSj5EM7ElUk67bPZARjsr66zuu1hCfJpc9GNqdxEI20AumEf7Y0E8i2ZF
XukcFtRBbzytHpFJqNl8UpZAceEQo2aUBbh/q9FYw/1x4SRY4KeYbxIStcIwaPYb
WkHGqQHZZsspM8kPiqxvq+Q0mgOboiU00bE8CzAT6mf8zfEjpKwxQ/goBHh7zVE1
X0rh5DVcetrig/+p1XTbGCFzOQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:37 2026 by rpki-client