
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json)
Hash identifier: vqZN5JN7SWkqjtysTLT9r20fdlvdNHWRnHMm68Q0uK4=
Subject key identifier: B8:34:B2:29:AA:39:3A:08:A4:26:83:22:C9:20:50:11:63:10:A1:9F
Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Certificate serial: 06E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
Manifest number: 06C5
Signing time: Sat 28 Feb 2026 22:51:46 +0000
Manifest this update: Sat 28 Feb 2026 22:51:45 +0000
Manifest next update: Sat 07 Mar 2026 22:51:45 +0000
Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: WIPgFSYncPyAjjNGnr4bFXwFw0crUfEyPfKRu/pC2IY=)
2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: PpKFWk6KmjxKIvF56S4zdBDIhEJZ75O9lLtU1EofBGk=)
3: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: 0vGTcpuvRVQ6ID4N/ELWkho0tK91ayeZRZwrkhy3tok=)
4: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: duu5jyaOetXoA6LHYOr3LW/0De81Dp3hOGGcc/9mOtU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Validity
Not Before: Feb 28 22:51:45 2026 GMT
Not After : Mar 7 22:51:45 2026 GMT
Subject: CN=69a37182-af70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:a1:2f:e7:ea:20:23:ad:d1:3f:3f:9e:7d:
24:cf:41:0b:74:7f:fb:08:c9:57:83:0c:9c:c5:aa:
fa:16:16:16:4a:36:e0:58:d4:0c:bc:8d:49:04:10:
e5:f1:a4:db:22:91:70:e3:e5:54:4c:8d:45:20:40:
04:92:06:d5:1c:6c:94:18:d8:53:45:52:7f:0d:e0:
6b:99:06:bc:a5:8a:d6:ea:d0:86:bf:83:c5:74:19:
9e:0a:78:16:d3:dc:49:98:f1:25:ac:32:6a:a6:22:
66:21:71:14:63:b5:95:5d:ac:73:60:bd:ce:61:dc:
c7:d5:b7:d1:23:70:66:ba:5e:8b:78:2b:13:8e:bf:
b8:e8:25:67:91:ff:d7:f9:70:e3:f5:9a:a1:b5:2b:
1c:12:80:8b:54:05:12:99:42:e4:71:28:f1:9c:92:
eb:24:9d:ff:37:fa:e9:df:fd:82:10:f6:43:f4:75:
b0:5a:5f:01:88:cb:3e:89:a7:6f:8a:89:9d:8d:3d:
aa:52:49:ca:75:9f:82:3e:5d:f0:8d:8f:64:9b:08:
58:c7:5d:a1:f6:a6:e1:a1:0a:c6:68:89:19:3f:8e:
af:d7:6b:7c:79:66:80:6f:91:e5:98:1a:7d:1e:8a:
75:1f:f5:73:14:ce:66:9c:a8:1f:f4:8d:39:0e:d9:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:34:B2:29:AA:39:3A:08:A4:26:83:22:C9:20:50:11:63:10:A1:9F
X509v3 Authority Key Identifier:
keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:89:2e:49:af:be:24:1b:c5:8a:ae:ff:fd:1f:57:47:0d:29:
fd:40:5c:96:27:1a:e9:53:af:07:2c:fe:a1:03:63:5f:47:04:
1d:65:3e:96:c3:94:cb:1b:ec:23:24:c3:40:9f:b4:6b:46:9a:
56:99:4e:19:99:3c:fc:eb:b0:0d:c1:fa:c6:15:73:04:32:ae:
2c:af:fe:91:53:6f:ed:c1:ba:9a:41:82:f0:75:5f:93:9c:49:
88:a9:58:fe:48:72:bc:d7:fb:16:99:5b:f5:97:18:02:82:33:
30:a8:d0:68:3e:31:c5:0e:2f:ee:aa:fd:8b:a8:0f:e4:3a:43:
4b:1e:fe:63:e1:b0:d3:80:32:0a:c5:c7:d0:a8:63:9a:de:4e:
ec:de:ca:d0:78:eb:d7:04:75:e3:68:38:59:d6:9a:b7:54:88:
e7:71:61:10:09:23:92:f5:2c:c9:8a:8c:e0:b4:f1:ba:32:2b:
a7:88:d0:95:d8:21:ab:6d:45:4a:8c:8d:6a:71:3e:73:d3:07:
4a:2c:2a:65:e6:dd:41:37:aa:d5:b4:7d:5f:74:01:a8:45:49:
03:3f:91:91:3d:dd:c3:62:ab:b4:45:e5:be:38:e0:58:c0:e3:
e4:93:9a:6f:5a:a7:49:dd:c4:b6:65:3a:5b:12:85:9a:46:e5:
f8:23:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:39 2026 by rpki-client