
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json)
Hash identifier: RSQ6Ygd3KFxevL61czQqgDn/nGLgEo+RbYWlffOMUls=
Subject key identifier: 12:A3:69:02:4E:04:1B:76:60:3A:AF:95:40:5B:46:1B:F5:60:F4:B8
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 05E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
Manifest number: 0594
Signing time: Sat 28 Feb 2026 23:57:26 +0000
Manifest this update: Sat 28 Feb 2026 23:57:25 +0000
Manifest next update: Sat 07 Mar 2026 23:57:25 +0000
Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: 1+DxlRrdbq4Ru3n0g8rrTXSjDwizdweCgLuNhqdwOig=)
2: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: nvoUCeUtNN6twUNDBUIX0E4iA8NMAqyx8jNRKHl5bfA=)
3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: SEr4PJ60y1yO0foMNSDEzhwfTOZFwf2aVzBOFAua4Tk=)
4: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: ho8mXIaMXg/kpiU3lPBhzCtAR5cs5yaLrSDXmN5oC7g=)
5: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: EuzdOPVDaf8auKQiaWdvQrQRLq/UiRFFDXSFrfgMcLk=)
6: 905F258E24F211EEA0863328C4F9AE02.roa (hash: 1wMopcofA5pR+ig8hsntFoj8vhLi0CJD7Zv75HCYoxc=)
7: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: M4oSgTg6MqWYK44UU1mkqZ9zHUyLCWaMW4a06g2PKYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1508 (0x5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Feb 28 23:57:25 2026 GMT
Not After : Mar 7 23:57:25 2026 GMT
Subject: CN=69a380e6-a463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:88:aa:cc:69:2a:31:e9:5d:89:94:32:19:
b2:56:10:40:86:8d:9b:96:91:a3:bd:9d:66:c3:c1:
21:9d:a4:6d:cf:67:2e:4b:79:76:e9:88:05:5c:3d:
79:ec:72:17:bd:fb:02:ea:59:9d:89:95:e0:5b:54:
17:7b:8a:f0:fe:0c:1e:77:3a:c7:00:1d:c9:e8:11:
5d:99:5f:d1:c0:b8:3d:64:b7:fb:bf:4c:44:75:30:
8e:a5:36:50:93:b2:07:dc:33:c5:0d:6b:1c:09:d2:
11:68:82:14:b5:a7:80:5e:20:bc:fd:ef:dd:59:c4:
9b:2f:03:1d:c7:eb:11:be:96:45:0e:ec:d8:38:98:
30:66:5f:ae:7a:b3:38:38:db:81:1d:56:43:c7:96:
f2:f5:4d:47:47:e6:ed:98:36:24:12:6a:0e:87:7a:
34:43:bb:04:ac:d1:aa:4f:79:0d:10:99:ac:8d:5b:
6a:0e:72:7b:89:0f:c2:f5:e2:17:89:16:29:ec:49:
d1:f1:c6:e3:57:ea:e4:4c:54:33:2c:6d:98:0e:2d:
94:6f:5f:39:8d:8d:79:c0:21:a5:fe:28:48:c4:af:
29:b4:77:5e:87:57:2a:ca:ae:bb:67:cd:3e:03:7a:
cc:c3:29:67:f6:19:df:40:b1:4f:97:40:2a:d8:5c:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A3:69:02:4E:04:1B:76:60:3A:AF:95:40:5B:46:1B:F5:60:F4:B8
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:98:77:4e:2b:85:9c:4c:91:ec:de:f4:d1:9a:62:38:b7:
65:03:5b:05:8c:56:d0:04:30:1b:bc:a7:2e:d5:9f:dc:dc:f0:
3f:09:9e:ed:ce:25:cd:59:c9:69:1f:76:d5:26:26:dc:d8:f4:
57:8c:2f:0f:ba:5c:0e:c0:d9:b4:02:d3:da:07:6a:b3:b7:b3:
b2:31:54:b3:ee:f2:8f:91:a2:9e:bb:bc:ec:9a:72:5d:01:39:
a2:11:25:07:96:a6:ab:6c:ba:2f:32:c8:eb:f8:df:a0:7b:99:
73:d3:e6:55:f1:bc:e7:ba:92:2c:08:05:19:37:e5:6c:15:73:
c7:7e:e3:f6:40:24:8c:e6:f3:9e:b1:27:54:5c:ca:be:99:25:
4b:4e:bf:2b:46:35:c6:f6:5b:8c:52:76:55:e0:c7:cd:ab:bb:
a8:cb:69:3f:f6:ec:a9:2d:92:b8:79:e4:00:3c:8a:15:67:2a:
bf:df:10:a1:ef:17:16:84:d5:88:4e:0d:02:de:1c:11:dd:50:
b5:75:94:4a:83:dc:91:3e:88:58:70:87:44:d2:3e:36:7a:aa:
bb:d2:a7:7a:29:42:8e:40:a1:d1:05:ca:b6:6e:78:00:8d:eb:
b5:08:dd:f9:2f:67:23:49:d8:94:5a:52:1f:65:ea:d1:f6:cf:
8a:4d:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:18 2026 by rpki-client