
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.mft
File: taxoaa_ZUfiX3UqnJWT78qNW2Es.mft (raw, json)
Hash identifier: OtjOCXvc2m/CLNfIVR4X4e+5Km4puOqwjHSKPpgC0aI=
Subject key identifier: 7A:0C:FE:F6:BF:52:D0:D5:A7:74:39:34:E8:17:34:8C:FE:4F:7A:2C
Authority key identifier: B5:AC:68:69:AF:D9:51:F8:97:DD:4A:A7:25:64:FB:F2:A3:56:D8:4B
Certificate issuer: /CN=A91F5C0D/serialNumber=B5AC6869AFD951F897DD4AA72564FBF2A356D84B
Certificate serial: 0715
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.mft
Manifest number: 0709
Signing time: Sun 01 Mar 2026 22:23:52 +0000
Manifest this update: Sun 01 Mar 2026 22:23:51 +0000
Manifest next update: Sun 08 Mar 2026 22:23:51 +0000
Files and hashes: 1: taxoaa_ZUfiX3UqnJWT78qNW2Es.crl (hash: FT4y2aWB8bG6bjoFfCZksClENkBF05QTR/pockRH6h0=)
2: F9D4AAB87DA911EB8532A559C4F9AE02.roa (hash: ZMWp3dWY1CbXEe6G5LscKnLOBbYifcrQfdwprxXyho4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.crl
rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5C0D, serialNumber=B5AC6869AFD951F897DD4AA72564FBF2A356D84B
Validity
Not Before: Mar 1 22:23:51 2026 GMT
Not After : Mar 8 22:23:51 2026 GMT
Subject: CN=69a4bc78-efbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:ae:4a:bd:7b:26:3e:6a:79:95:21:3a:50:
d8:cf:e1:6d:47:a4:d5:8d:33:39:0d:02:fa:74:da:
3a:4b:ca:16:91:48:8e:96:8a:30:60:0d:59:2a:18:
fd:71:cb:fa:0f:da:9e:45:23:4f:af:4e:2a:e3:44:
7a:ad:06:2c:86:45:a8:44:5d:59:9c:b5:bc:20:00:
f8:9a:4e:02:d3:52:48:4b:b5:66:b1:93:a4:43:e0:
b5:9b:eb:13:67:87:f8:e9:d0:8e:ff:10:df:76:1c:
60:3f:29:32:99:03:a5:d6:cb:47:80:11:1b:e6:65:
ef:7a:38:35:e8:3f:c9:73:25:70:fd:ac:19:76:bd:
40:b9:0f:b2:f1:13:8f:6a:e3:d2:3f:6e:f5:c2:96:
70:fe:8c:4d:24:e0:f0:0c:e0:e5:cf:54:06:97:61:
e3:38:c3:85:6b:54:a1:98:cd:b4:27:76:13:08:af:
0d:25:20:01:72:75:22:cf:7c:6b:44:6d:8d:62:74:
31:cf:b2:f9:82:18:60:b2:ad:63:c4:4f:54:2e:73:
ee:33:fd:1e:3e:b7:29:4b:d4:9e:59:26:f2:e3:be:
44:48:a6:9e:5b:45:1d:62:13:c1:07:02:59:7c:0e:
cf:33:49:f3:ab:40:91:f8:1e:cd:82:20:3b:ae:0a:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0C:FE:F6:BF:52:D0:D5:A7:74:39:34:E8:17:34:8C:FE:4F:7A:2C
X509v3 Authority Key Identifier:
keyid:B5:AC:68:69:AF:D9:51:F8:97:DD:4A:A7:25:64:FB:F2:A3:56:D8:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:5c:bd:a0:07:4e:e6:3c:f1:e0:de:93:8a:0c:32:d0:cd:a3:
5d:f0:ee:3d:a2:e4:a8:48:26:1c:6b:4e:a0:c5:d9:e3:6d:ec:
c8:1e:6a:94:84:f8:b5:e4:6a:00:17:20:f3:45:1e:4a:9b:e8:
3d:45:71:b4:de:e8:33:06:8f:06:31:f6:4c:99:a3:04:5a:11:
0c:5d:f7:7e:19:7f:d7:f3:df:80:db:0e:3d:c4:e9:2e:39:2c:
85:6a:34:e8:8a:92:2a:b5:5a:8f:f4:2b:b4:5d:3f:cc:19:21:
d1:a0:d2:a7:ae:a0:a8:d6:29:7e:9e:c1:76:99:f3:76:a1:f1:
ae:df:b4:38:4a:46:64:c1:b6:82:43:f7:d6:91:5a:ce:3f:6a:
1d:9f:ca:29:4c:3b:08:9a:e3:82:5a:4c:fa:29:04:fb:0e:d5:
7c:3d:e7:01:d7:47:74:dc:d3:38:1e:cf:29:d0:ac:a3:04:7a:
5f:d0:bb:03:f4:3e:79:56:b4:2d:15:cf:6c:d3:7c:89:81:f2:
01:d4:b2:e5:d5:eb:68:31:8a:f7:a6:c9:23:10:1e:87:21:05:
39:ce:e7:50:e1:79:a0:24:e1:c3:4b:fc:97:12:45:7b:2b:fb:
2a:11:8c:26:8f:70:91:11:1d:c7:1e:0c:3a:5c:53:26:a1:da:
4c:2f:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:04 2026 by rpki-client