
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json)
Hash identifier: k+P/6YxbP1/bQY8rE45Gmql81aDe8n3kr1jNT31lAlI=
Subject key identifier: 72:91:41:F1:04:75:E1:C4:20:BE:1E:F1:67:73:FB:F2:31:3B:81:B2
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial: 0865
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
Manifest number: 0856
Signing time: Sat 28 Feb 2026 21:09:29 +0000
Manifest this update: Sat 28 Feb 2026 21:09:28 +0000
Manifest next update: Sat 07 Mar 2026 21:09:28 +0000
Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: DBVnSl+BVqsPUUEAXBlShHpFptqG3SXDNV9kz7XOcFc=)
2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: I43la8Jg6nTXmIQnP62meA4bUFJBXemPB0O6WT7Y9jk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149 (0x865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Validity
Not Before: Feb 28 21:09:28 2026 GMT
Not After : Mar 7 21:09:28 2026 GMT
Subject: CN=69a35989-deb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:08:ed:9c:82:51:49:e0:15:08:3c:b6:51:
12:5c:c6:92:d8:a7:c8:2f:1c:2f:f9:de:74:0d:1f:
d9:a4:6d:8a:f4:63:0a:00:03:6d:c5:d0:82:84:0e:
6f:f0:7d:7b:f7:90:dd:11:3c:60:a2:5b:75:b9:b2:
d2:e8:c1:de:7d:c1:e0:3c:21:55:0c:58:35:e2:3c:
ce:17:a4:40:7d:80:15:da:54:7c:78:75:a6:9c:b7:
26:51:34:2b:af:b0:3f:8a:ed:4d:3e:59:ae:62:00:
af:30:e6:7f:c6:44:30:07:8d:2a:23:d1:81:c0:40:
41:86:60:ff:a1:3d:37:5d:26:de:4c:b8:08:e8:e4:
74:ac:19:47:6b:6c:59:87:93:5b:eb:72:2c:01:8c:
5a:64:29:4e:05:e6:a1:67:a9:92:a6:cf:a4:5d:5d:
ee:53:1e:c5:82:5f:17:2b:c3:85:ef:53:a1:3a:ef:
3f:14:8a:6f:8a:5e:97:3e:00:51:ec:17:68:15:42:
cb:7b:75:06:4e:ad:98:34:e7:5d:f4:d2:80:4b:9b:
67:e4:84:ec:88:30:f9:e5:f7:5b:c3:3d:fe:79:c3:
27:33:9c:d5:1f:7f:24:12:02:f0:3b:87:0a:a5:2e:
c1:a0:6a:ab:c9:e8:d5:b5:a5:fb:6a:d8:27:c2:0d:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:41:F1:04:75:E1:C4:20:BE:1E:F1:67:73:FB:F2:31:3B:81:B2
X509v3 Authority Key Identifier:
keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:de:7a:0f:35:31:db:4f:70:14:c4:e8:17:32:11:ac:d5:82:
44:b7:6c:e7:09:61:96:7b:d2:cc:77:0e:b8:b2:09:bd:d6:a9:
fd:9d:73:41:0e:c9:e6:34:18:4e:32:7c:bd:95:46:25:fa:97:
39:5b:9c:0b:8a:aa:0a:0e:89:7b:73:8a:4e:c9:ab:06:b9:57:
5b:8d:68:50:27:7b:55:43:41:2f:5a:c5:a7:1f:72:05:32:e8:
15:60:8b:dd:55:74:b9:8a:80:f0:d9:c0:7c:d0:90:df:f8:06:
96:8a:e8:95:23:ef:7e:03:c5:5f:4c:44:09:c9:56:90:63:f2:
c2:b6:82:96:a3:62:ed:c0:43:b7:43:13:95:b3:50:46:b8:ad:
d8:54:ba:fb:6a:b3:bb:16:43:e3:1b:dc:68:78:26:c8:f1:fa:
b0:c7:c4:0f:0f:0d:d0:7f:ac:a4:ec:7f:f5:4f:4f:01:9d:f3:
a1:29:be:36:37:97:34:00:3e:10:1c:de:ec:53:cc:38:0b:4d:
88:8a:15:28:5f:cb:da:1f:16:a3:2a:ca:42:0f:ec:f0:51:a0:
d5:50:52:d2:c2:58:ea:56:94:fb:ba:88:49:d0:63:01:65:80:
f8:5e:fb:50:05:aa:1a:b2:ef:31:43:c2:4e:bb:b3:90:0a:f6:
2c:d4:6b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:46 2026 by rpki-client