
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier: fWiPqywkl0U+8OmoQd0Wym/6lVxMUexyKLzsyT2tj48=
Subject key identifier: ED:10:70:E6:A7:29:3D:5E:7B:0E:19:41:2F:54:6B:3C:CD:A1:FF:68
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial: 07D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number: 07C3
Signing time: Sat 28 Feb 2026 21:48:21 +0000
Manifest this update: Sat 28 Feb 2026 21:48:21 +0000
Manifest next update: Sat 07 Mar 2026 21:48:21 +0000
Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: jTLgzoGENz1W2o9h4Sr83VyWb/L+TLRn9AYXlJPqTmc=)
2: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: QcINMhPugXakfHhYWsf4t0lmoNzm+ZXfVIXhNA2VxIA=)
3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: ms/taZmD2/o24c1Khq9ZB9VElH0aqAVMPoZoMLJ7l7o=)
4: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: C9YBNy3SJzx+k9ZBQHZtbIXi++eZ8FDncm2ByZsrMrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Validity
Not Before: Feb 28 21:48:21 2026 GMT
Not After : Mar 7 21:48:21 2026 GMT
Subject: CN=69a362a5-8921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:e5:25:cc:bc:e3:28:69:c2:46:38:09:b6:
ba:15:ab:ec:ac:13:76:25:ad:82:a8:3e:be:be:87:
58:fc:94:3e:66:6a:0f:52:2c:39:fb:23:1b:15:1c:
b1:e2:db:47:e0:6d:1f:3e:fa:56:e0:35:80:0c:c9:
30:a3:9d:d8:3e:a5:a2:83:a5:13:e5:78:0e:a5:25:
83:cf:65:1d:2e:af:67:50:03:b9:ca:2c:c3:9c:d3:
06:6b:58:91:0e:a4:68:67:d5:b9:46:73:65:b2:f9:
f6:a7:65:b6:40:9d:ba:de:47:9e:9c:8a:59:a5:af:
5f:36:50:83:41:cc:a1:81:e1:9a:4e:a1:eb:02:40:
e5:12:e2:03:41:f3:71:f4:04:a6:77:02:7e:b1:e8:
34:d2:58:f3:91:9d:8f:dd:79:5b:d3:40:52:9d:bc:
40:89:7b:61:6f:94:4e:76:d7:cb:90:2c:95:41:35:
23:2f:15:15:5d:86:8f:b1:3b:a6:40:24:67:07:6a:
2e:b2:cc:c6:f2:94:b1:04:8b:87:51:2e:56:fd:4e:
79:a7:13:76:20:95:e8:c9:42:a2:52:ed:90:1c:08:
c5:f8:9b:d7:e8:1d:05:d2:8d:e8:00:b4:74:e4:cf:
7a:75:eb:d3:1e:3b:55:69:30:ef:19:90:16:9b:0a:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:10:70:E6:A7:29:3D:5E:7B:0E:19:41:2F:54:6B:3C:CD:A1:FF:68
X509v3 Authority Key Identifier:
keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:7e:00:4e:3a:68:23:db:06:52:58:10:bb:45:b6:c8:6b:02:
4d:13:c2:1f:25:52:a8:01:cd:5f:21:32:9c:20:fc:a9:72:92:
cd:0e:f0:ea:49:e5:f0:38:b1:a7:af:13:d1:37:29:df:4e:f9:
58:64:da:da:13:51:dc:8d:77:18:60:e0:9c:18:75:f9:0e:c5:
5d:41:cf:48:41:a0:cb:68:3f:3e:05:7a:16:eb:ae:36:fb:91:
2e:d4:39:b6:01:db:2a:42:12:c2:62:ee:45:20:ed:80:ca:32:
cb:e5:18:90:a2:1d:31:d5:d8:ef:7c:c6:0b:7b:d5:33:b5:1b:
ec:b9:22:7c:02:75:4c:f8:fe:5a:37:ac:05:41:f1:15:0b:23:
d6:6b:0f:22:17:c4:90:03:2e:f9:0d:cb:d4:54:9f:7b:26:48:
86:c4:5f:6f:b5:ec:fa:3e:b2:82:4e:a9:27:33:77:6b:11:2f:
4d:cd:ee:4e:49:e1:48:d4:6d:0b:11:f0:ea:c2:98:32:ae:51:
e9:ac:1c:f2:cc:05:fe:3c:97:49:10:85:cf:61:6b:8a:ce:3c:
7b:43:31:93:4d:ac:11:66:50:e1:5e:26:2a:1d:79:2f:fa:76:
ca:a0:dd:d3:1e:46:eb:bc:ab:c8:32:0e:b7:52:82:30:b8:93:
98:ad:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:56 2026 by rpki-client