
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
File: EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json)
Hash identifier: yOIXR/jC9oWVe2d6J04LOEFnSDvK32OEkVkt0KT4+wM=
Subject key identifier: B9:04:49:F9:3E:A1:99:A2:CC:ED:9A:C8:A8:77:A8:D9:25:8B:A3:FB
Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
Certificate issuer: /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
Manifest number: 0149
Signing time: Sun 01 Mar 2026 06:16:06 +0000
Manifest this update: Sun 01 Mar 2026 06:16:06 +0000
Manifest next update: Sun 08 Mar 2026 06:16:06 +0000
Files and hashes: 1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: 7J8PWbZajRRGCR+tmpNQ1bgeMPp2scP9cv6E/WFEl9U=)
2: 6B10AF52379A11F0B3AC7740C4F9AE02.roa (hash: rykf5EiwJxMbaGGZx16BKp2POKraZb9uuOUjLdA5j+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Validity
Not Before: Mar 1 06:16:06 2026 GMT
Not After : Mar 8 06:16:06 2026 GMT
Subject: CN=69a3d9a6-e3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:a6:6a:eb:32:d2:5a:71:32:2f:36:f9:2e:
4e:d6:af:e5:17:c2:69:30:d5:ea:1d:2b:50:d1:82:
10:4b:bc:1a:16:e3:fb:9b:41:30:9a:e0:bc:66:ea:
c9:a2:5f:8c:0d:87:98:f1:f2:c9:00:1a:4d:57:f6:
a5:b0:54:60:cd:05:dd:b8:b4:9e:f1:16:23:81:fd:
c4:ac:38:a2:a1:96:37:c3:cb:91:16:9d:8f:9e:ed:
20:fa:94:e1:59:df:f6:cb:b7:2b:56:cb:be:47:e4:
ef:82:fa:b4:e5:2c:01:6a:06:2b:c9:56:e9:1a:a3:
ff:b4:b9:a6:20:d5:f8:76:20:8f:d5:3a:e3:38:2f:
bf:29:ea:07:46:05:b7:35:d3:cd:f8:f0:e1:fb:89:
49:fe:61:e6:8f:ad:9e:01:e6:a8:77:9d:a3:d6:95:
68:e4:65:28:7f:42:34:05:13:5b:b5:a0:cd:f5:09:
16:93:26:94:7a:8a:59:69:75:cc:a0:38:23:63:19:
e1:9e:4e:81:78:a6:6a:67:03:96:ab:03:7b:d5:f8:
58:61:2d:86:03:3d:81:90:41:e4:0c:0c:42:2f:62:
6f:eb:16:ae:e9:93:5b:a6:63:1f:95:1c:f0:7b:fb:
7a:bc:54:bd:4d:15:72:13:64:ff:f0:24:3c:ff:29:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:04:49:F9:3E:A1:99:A2:CC:ED:9A:C8:A8:77:A8:D9:25:8B:A3:FB
X509v3 Authority Key Identifier:
keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e8:a2:b6:b6:4e:c9:ef:1a:ff:fb:6e:7d:47:9b:0f:f2:a7:43:
1c:9d:90:62:fd:28:d1:4d:21:2a:48:6e:f5:6c:fd:6c:cf:d5:
d8:f2:38:b0:d3:be:36:f6:00:a9:41:97:a5:05:b3:04:b8:2d:
1e:e8:f4:68:fb:ea:1a:6c:7a:92:b2:cd:66:09:a3:96:5a:37:
2d:d2:13:b0:e8:e0:2b:de:3d:4d:a8:7b:99:9c:eb:82:ac:83:
07:69:42:e7:75:7a:4d:4b:20:3e:19:aa:73:9e:cf:a9:1e:dc:
a0:bd:14:0d:ce:2d:74:96:b2:74:ae:14:e0:b5:b6:07:7f:43:
ef:7d:59:ae:da:35:dd:84:ae:fa:9b:3e:ed:eb:79:d1:f3:e4:
72:df:2c:f8:d6:d1:8a:9c:43:38:5d:47:a9:36:ba:2d:26:66:
9d:f6:a7:f8:8f:48:b0:57:92:4f:2f:cd:a9:29:d6:0c:91:7f:
a6:37:d3:3c:d0:51:53:0e:2e:65:5b:4e:46:c8:d2:ab:90:fd:
1b:30:8b:d2:11:81:b7:ad:d9:f7:d9:07:57:37:56:c4:0c:fd:
c0:9e:83:4e:7b:9c:70:4d:1f:15:1f:41:73:b1:d5:fe:85:4f:
96:b8:bc:33:98:c1:ac:07:33:fd:6b:f5:fe:b0:c4:45:a7:ca:
e5:7f:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:40 2026 by rpki-client