
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json)
Hash identifier: dL2ywEz9U8K1YCQur+nAQM3s3aGxRz577+aF/lYdN3I=
Subject key identifier: A0:3D:8A:02:9A:37:98:BA:8E:00:F6:D3:8B:16:26:22:1B:29:B7:EF
Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
Manifest number: 0208
Signing time: Sun 01 Mar 2026 03:46:33 +0000
Manifest this update: Sun 01 Mar 2026 03:46:32 +0000
Manifest next update: Sun 08 Mar 2026 03:46:32 +0000
Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: 3zASI8+8hOKZNk6znUctyO493Xi2+/ly2pRs6dgM7RM=)
2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: SdXEUbD7bDMQhTYpbl9h+rsPxGL65X2f3Ma+s3etM2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl
rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Validity
Not Before: Mar 1 03:46:32 2026 GMT
Not After : Mar 8 03:46:32 2026 GMT
Subject: CN=69a3b699-5836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:ac:1e:21:33:56:5d:1a:95:ce:a5:69:e8:
8a:22:c4:50:cd:ff:c1:bf:ff:43:aa:3c:27:ce:e3:
34:3f:e2:d0:fb:9a:72:b1:19:e2:2f:1c:57:7d:e1:
7f:9f:31:0a:00:08:ef:17:ef:1b:d9:84:f7:63:16:
a3:4f:44:50:c9:04:6d:1d:e2:9d:7c:1a:4d:62:69:
86:1a:ce:82:5e:7f:72:21:8e:2c:7c:ee:d2:3c:0d:
7c:c8:b2:56:b4:45:e6:cd:d9:59:3a:ba:86:a0:e2:
55:2b:2e:39:14:34:cc:fe:1f:0b:ab:76:d2:40:93:
03:25:25:6b:2e:1c:13:18:59:d5:96:86:96:4e:52:
7c:b0:3c:24:1e:cc:9a:4a:bb:82:61:29:d1:e2:6a:
98:fe:07:e2:c9:2e:d0:3e:99:ff:01:2b:22:fd:48:
6e:5e:b9:87:55:23:81:33:ef:d9:ee:c3:cb:b1:74:
19:83:f4:3e:59:ce:9e:f1:56:a7:e9:a2:6d:5b:3a:
e6:db:32:00:58:36:a1:e2:4c:c1:bf:20:e5:dd:4f:
09:1e:ac:f1:50:68:83:1b:50:bd:6c:81:14:4d:cb:
40:a1:05:7f:b6:b6:cd:9d:b8:9a:09:df:d2:2d:cc:
6d:0e:ef:77:30:f9:bc:6e:ad:da:ee:4c:84:e9:a8:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3D:8A:02:9A:37:98:BA:8E:00:F6:D3:8B:16:26:22:1B:29:B7:EF
X509v3 Authority Key Identifier:
keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:76:72:ba:f8:83:ac:3f:f1:53:58:f4:bc:97:26:07:94:23:
d6:4b:74:66:d7:8c:1a:83:15:5d:39:df:67:98:7c:0a:3b:52:
19:b7:ba:fc:f2:49:fb:3a:11:03:e2:8a:9b:12:a0:69:4c:51:
ff:71:98:97:03:ea:27:7c:b5:42:be:e4:2d:71:b1:64:e2:34:
90:56:b2:03:ad:74:09:71:2b:3a:99:2e:ec:58:19:27:d5:65:
0c:e0:55:9e:9e:fb:6f:47:02:bf:7e:1e:91:26:53:8a:4f:7e:
0b:f1:0b:ef:68:43:db:60:99:52:2e:27:fd:9f:e9:a9:3f:45:
61:84:41:64:ea:6e:01:bd:87:c0:5a:82:8e:a7:97:97:ed:f5:
1f:38:f2:bc:09:fa:ff:28:55:36:85:71:c2:dc:f2:4c:58:33:
20:61:ef:59:9e:13:00:3c:0a:fb:20:39:1e:d3:1f:b2:89:8c:
fe:b2:1a:74:b4:e8:cb:a4:c3:2b:b8:04:ec:a9:5d:15:ee:3b:
7e:ec:fc:93:c6:1f:e0:13:3c:f6:97:62:ad:df:54:63:64:76:
37:d9:88:c5:21:58:25:ad:5b:53:f7:ee:cd:af:90:65:40:a5:
dc:85:0c:67:10:91:e2:78:d4:2e:bd:5a:62:8b:9c:1b:18:ae:
d5:51:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:46 2026 by rpki-client