
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
File: T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json)
Hash identifier: T5qxj39tet/GKyRA/fao1zgWm8SokkbsOQvMxtVYFYs=
Subject key identifier: A4:EE:22:B9:0E:2C:18:4E:3D:D8:D5:8E:E7:44:67:92:D8:98:08:AF
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial: 03EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
Manifest number: 03C1
Signing time: Mon 02 Mar 2026 00:05:01 +0000
Manifest this update: Mon 02 Mar 2026 00:04:59 +0000
Manifest next update: Mon 09 Mar 2026 00:04:59 +0000
Files and hashes: 1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: h63hz00magRfHkWJH0mX8ZWDBFn0E/BO+VeiJZIm7dE=)
2: D9750E78F01111EFB1720645C4F9AE02.roa (hash: +LCGNb0OB4VM+Whp1njiiWEGwYQwA6NaUQIys14iy+4=)
3: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: RE9x/m6mlo2vJzH32XxtuTi0P6Gpv9n9izH4NHfwP6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1003 (0x3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Validity
Not Before: Mar 2 00:04:59 2026 GMT
Not After : Mar 9 00:04:59 2026 GMT
Subject: CN=69a4d42d-7138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:9c:32:c1:a5:91:be:6f:29:74:a3:b3:ce:
01:97:60:a0:31:3d:4b:00:75:94:aa:dd:83:09:22:
58:70:86:f0:eb:ce:9d:92:7e:77:29:4b:8a:dd:58:
89:3c:83:c3:1f:fc:b3:f7:03:d2:38:68:84:57:82:
9a:83:8d:86:46:59:8b:b5:78:7c:48:fb:0b:2d:1d:
78:40:70:f0:d1:2f:2c:4d:5d:49:5e:83:de:98:18:
2b:87:2c:2d:63:87:cf:2f:ef:d3:8b:cb:5d:e1:b6:
45:98:fc:f5:94:48:2c:84:e3:58:5f:84:16:f3:d5:
2d:2e:6e:c0:1e:58:9b:88:a8:65:2e:93:0a:c3:ad:
f9:cb:6e:e9:78:a7:fd:81:90:d2:15:2b:d1:d3:4e:
09:8a:73:90:6f:0f:7b:3f:fc:a8:54:79:21:ef:07:
16:9f:56:4a:a9:7a:bc:04:5b:39:8d:db:b1:d1:f2:
28:a3:79:fa:b2:29:ce:01:79:0f:02:e7:d2:a2:f1:
47:1d:be:ad:0e:d3:1d:8c:6f:cd:4f:c7:cf:ab:1a:
1a:17:1a:36:6c:de:57:69:15:91:b2:ed:73:f2:8b:
5e:73:68:3e:5d:23:d4:1e:e7:d0:16:ce:a8:b4:1d:
73:bb:dd:ed:98:85:72:0a:65:96:59:34:51:f6:98:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EE:22:B9:0E:2C:18:4E:3D:D8:D5:8E:E7:44:67:92:D8:98:08:AF
X509v3 Authority Key Identifier:
keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:bd:51:94:7c:b6:de:c6:55:af:01:24:4e:45:91:43:6b:
8b:6d:a6:64:e9:c0:68:1c:e8:92:95:0a:84:f6:81:44:9b:47:
46:3c:ff:8d:68:64:f4:21:c2:69:cf:09:2d:7b:58:3c:ed:5c:
d0:8f:f6:d6:70:81:86:b6:be:5b:9a:7b:84:de:79:63:8e:f2:
84:79:a8:bf:42:3f:91:26:94:a3:4a:2d:38:35:90:61:ad:13:
3c:74:0e:da:3a:2a:53:79:b4:9b:6e:85:c5:92:ef:ba:6e:98:
47:43:a3:a6:c4:5f:b1:a6:27:1a:fe:86:b4:c5:3f:66:c8:f3:
a6:31:ae:30:b2:c7:77:23:4b:ef:9f:8e:78:2b:57:3c:88:a9:
5f:02:02:80:69:eb:c5:86:45:17:f4:f8:20:f9:13:15:09:79:
0a:85:4b:4c:1b:ec:19:dd:87:9a:12:55:de:92:2f:df:20:f5:
53:a4:ec:9e:5f:8a:e4:12:47:0d:53:16:5b:92:22:81:d6:35:
c7:0b:f7:28:fb:c9:f3:c0:db:cd:f7:15:53:d0:da:d3:70:25:
b3:7f:e0:9b:30:2a:77:37:c4:b7:e5:91:e8:54:db:dc:91:b6:
f9:5d:97:3a:e1:45:36:0c:6d:66:7b:74:3b:54:7a:35:81:a1:
d9:93:0b:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMzQTUxMTAvBgNVBAUTKDRGRjUyODQ3MjE1QzRBMjJFOUYxMTQ5RTZDQkZFREY3
NEQ2MUNFOEIwHhcNMjYwMzAyMDAwNDU5WhcNMjYwMzA5MDAwNDU5WjAYMRYwFAYD
VQQDEw02OWE0ZDQyZC03MTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoH+cMsGlkb5vKXSjs84Bl2CgMT1LAHWUqt2DCSJYcIbw686dkn53KUuK3ViJ
PIPDH/yz9wPSOGiEV4Kag42GRlmLtXh8SPsLLR14QHDw0S8sTV1JXoPemBgrhywt
Y4fPL+/Ti8td4bZFmPz1lEgshONYX4QW89UtLm7AHlibiKhlLpMKw635y27peKf9
gZDSFSvR004JinOQbw97P/yoVHkh7wcWn1ZKqXq8BFs5jdux0fIoo3n6sinOAXkP
AufSovFHHb6tDtMdjG/NT8fPqxoaFxo2bN5XaRWRsu1z8otec2g+XSPUHufQFs6o
tB1zu93tmIVyCmWWWTRR9pjpMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTuIrkO
LBhOPdjVjudEZ5LYmAivMB8GA1UdIwQYMBaAFE/1KEchXEoi6fEUnmy/7fdNYc6L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xMTg3MDk3MkQ0
RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1NpTHA4UlNlYkxfdDkwMWh6
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RfVW9SeUZjU2lMcDhSU2ViTF90OTAxaHpvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzNBNS8xMTg3MDk3MkQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1Np
THA4UlNlYkxfdDkwMWh6b3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVji9UZR8tt7GVa8BJE5FkUNri22mZOnAaBzokpUKhPaBRJtHRjz/jWhk9CHC
ac8JLXtYPO1c0I/21nCBhra+W5p7hN55Y47yhHmov0I/kSaUo0otODWQYa0TPHQO
2joqU3m0m26FxZLvum6YR0OjpsRfsaYnGv6GtMU/ZsjzpjGuMLLHdyNL75+OeCtX
PIipXwICgGnrxYZFF/T4IPkTFQl5CoVLTBvsGd2HmhJV3pIv3yD1U6Tsnl+K5BJH
DVMWW5IigdY1xwv3KPvJ88DbzfcVU9Da03Als3/gmzAqdzfEt+WR6FTb3JG2+V2X
OuFFNgxtZnt0O1R6NYGh2ZMLhg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:12:26 2026 by rpki-client