
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
File: Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json)
Hash identifier: JOqsLSXVzPRoP4be8rV0UM5GkdQMnNGejcmWAexDsaA=
Subject key identifier: 22:DC:39:7C:F0:05:C6:C6:52:A0:5D:6D:58:FC:FE:AE:70:88:9C:92
Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
Certificate issuer: /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Certificate serial: 03F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
Manifest number: 03E9
Signing time: Sun 01 Mar 2026 23:46:07 +0000
Manifest this update: Sun 01 Mar 2026 23:46:06 +0000
Manifest next update: Sun 08 Mar 2026 23:46:06 +0000
Files and hashes: 1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: UVmHeXpe6aTRcR1KDGLX4zLShJrAIVSkjGbvcnpjFD8=)
2: 9233AB983ED411F0B38CCD78C4F9AE02.roa (hash: TmJRJHlikih7mVaiGT9Ey8UviADYMdHN3E98cghtS8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1014 (0x3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB2D, serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Validity
Not Before: Mar 1 23:46:06 2026 GMT
Not After : Mar 8 23:46:06 2026 GMT
Subject: CN=69a4cfbf-f6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:9c:78:81:31:ae:9c:2d:b2:cf:2d:49:6b:
98:aa:5e:d1:f0:7a:7c:a9:06:8f:44:43:09:fd:f7:
bc:10:a1:08:dc:8e:95:b9:8d:8c:1c:cb:2b:ba:d6:
dd:b1:5b:f5:2e:08:02:d1:2f:14:5e:dc:1a:fc:e3:
f7:b4:ca:51:36:a3:89:91:a6:f0:39:0e:cc:f3:77:
27:da:b6:42:88:77:ac:df:46:68:af:a5:3e:01:1e:
90:3a:25:b5:57:42:66:9f:86:d4:e4:7c:31:6b:4f:
85:c6:5b:66:8c:34:28:43:a1:0d:64:32:75:0e:65:
52:39:ad:67:1c:8b:0b:0e:69:5c:76:59:42:c2:1e:
c6:1d:fb:9e:ef:f8:89:63:7d:6c:53:cf:43:30:af:
47:33:72:4b:9a:ae:4a:f8:46:aa:ac:ae:0e:c1:97:
4a:3c:ac:b9:06:7c:49:be:0a:eb:2e:0a:8c:bf:01:
da:98:4c:f1:ec:18:ca:76:9f:2b:17:4e:87:8b:98:
c9:b3:2c:69:ab:a2:17:13:ab:08:80:e7:d9:a7:71:
91:91:59:56:76:d1:db:63:f9:2b:2a:9d:2e:3c:18:
28:8e:6c:b5:92:91:2e:61:6f:31:97:32:d2:2b:8c:
2a:47:12:da:4c:b9:a1:49:c8:3c:cb:0c:c9:8d:c7:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:39:7C:F0:05:C6:C6:52:A0:5D:6D:58:FC:FE:AE:70:88:9C:92
X509v3 Authority Key Identifier:
keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:11:be:89:a6:80:6d:83:ac:3f:83:ab:f0:a9:1f:67:8e:2e:
97:e2:e1:b4:05:35:01:5a:6a:80:67:c0:49:43:9e:84:5f:1a:
86:fb:14:cd:92:06:12:ca:43:12:98:ed:91:4e:4c:c9:04:25:
ca:45:a9:08:6f:d5:5a:f2:86:0a:ee:4b:67:06:c9:a8:ce:a7:
8e:78:37:28:d2:1d:70:ea:9c:ba:0b:e8:70:a1:a5:57:23:8b:
f4:84:25:86:67:23:13:8f:c2:1a:ff:c9:df:84:96:b4:35:e0:
79:20:54:5a:84:98:a8:61:19:9f:6b:80:85:85:91:1a:34:fe:
41:b1:16:71:a2:78:23:e2:33:74:ef:74:2a:32:00:01:ef:d2:
ef:ae:f6:e5:79:1f:74:bb:38:3c:1d:c3:bd:52:fd:65:28:1c:
60:87:e3:4d:1d:2a:f8:4c:d4:2f:a7:52:e3:52:cf:35:55:89:
7c:6c:82:55:1d:2c:25:70:51:9c:2f:8b:a4:34:4c:70:2b:df:
96:94:5f:a4:5b:20:47:2d:c8:ad:cb:95:60:2f:c3:3c:0a:2b:
0a:de:df:eb:4b:d7:ca:4c:7f:3e:43:84:0b:c0:5f:07:ba:cb:
12:97:1f:81:d3:b6:37:8b:73:b1:1b:75:c5:ab:73:40:44:13:
ce:a2:b1:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJCMkQxMTAvBgNVBAUTKDM5REQ2MzM1Mzk5RjEyQjgxOTIxMUNFOTFBQTdEQ0Y2
MkY2RDgxQkMwHhcNMjYwMzAxMjM0NjA2WhcNMjYwMzA4MjM0NjA2WjAYMRYwFAYD
VQQDEw02OWE0Y2ZiZi1mNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxP6ceIExrpwtss8tSWuYql7R8Hp8qQaPREMJ/fe8EKEI3I6VuY2MHMsrutbd
sVv1LggC0S8UXtwa/OP3tMpRNqOJkabwOQ7M83cn2rZCiHes30Zor6U+AR6QOiW1
V0Jmn4bU5Hwxa0+FxltmjDQoQ6ENZDJ1DmVSOa1nHIsLDmlcdllCwh7GHfue7/iJ
Y31sU89DMK9HM3JLmq5K+EaqrK4OwZdKPKy5BnxJvgrrLgqMvwHamEzx7BjKdp8r
F06Hi5jJsyxpq6IXE6sIgOfZp3GRkVlWdtHbY/krKp0uPBgojmy1kpEuYW8xlzLS
K4wqRxLaTLmhScg8ywzJjccB5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLcOXzw
BcbGUqBdbVj8/q5wiJySMB8GA1UdIwQYMBaAFDndYzU5nxK4GSEc6Rqn3PYvbYG8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkIyRC85NjVCRDU3RUI4
OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVyZ1pJUnpwR3FmYzlpOXRn
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kMWpOVG1mRXJnWklSenBHcWZjOWk5dGdidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkIyRC85NjVCRDU3RUI4OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVy
Z1pJUnpwR3FmYzlpOXRnYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVxG+iaaAbYOsP4Or8KkfZ44ul+LhtAU1AVpqgGfASUOehF8ahvsUzZIGEspD
EpjtkU5MyQQlykWpCG/VWvKGCu5LZwbJqM6njng3KNIdcOqcugvocKGlVyOL9IQl
hmcjE4/CGv/J34SWtDXgeSBUWoSYqGEZn2uAhYWRGjT+QbEWcaJ4I+IzdO90KjIA
Ae/S76725XkfdLs4PB3DvVL9ZSgcYIfjTR0q+EzUL6dS41LPNVWJfGyCVR0sJXBR
nC+LpDRMcCvflpRfpFsgRy3IrcuVYC/DPAorCt7f60vXykx/PkOEC8BfB7rLEpcf
gdO2N4tzsRt1xatzQEQTzqKxQQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:05 2026 by rpki-client