
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
File: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft (raw, json)
Hash identifier: lQITwmHorPcgPw9LdcFsdDbWJ84Ak8Lr6gZGgEWbYkw=
Subject key identifier: BF:B5:E6:EA:2C:2D:A4:7B:55:AF:29:E3:D7:59:FD:D1:10:FA:C9:82
Authority key identifier: 42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E
Certificate issuer: /CN=A91F9BB3/serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
Manifest number: 26
Signing time: Mon 02 Mar 2026 03:00:54 +0000
Manifest this update: Mon 02 Mar 2026 03:00:53 +0000
Manifest next update: Mon 09 Mar 2026 03:00:53 +0000
Files and hashes: 1: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl (hash: kJPKntgt2mQfeod+gHBpXM91LWmE4CV0fPcrs9TSwMY=)
2: DB9D3A1AE24411F0BBC3E4F5716F56BC.roa (hash: K7ygeFaOktfvGPimdsYX4harp9rcvQigOPGo1t1xgTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl
rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9BB3, serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E
Validity
Not Before: Mar 2 03:00:53 2026 GMT
Not After : Mar 9 03:00:53 2026 GMT
Subject: CN=69a4fd66-7975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:e4:d6:d3:2e:59:63:93:23:25:5f:f6:cf:
90:79:4d:ab:ae:37:1b:15:97:72:0e:72:ea:ec:32:
92:23:84:7d:4d:d3:ab:6d:bd:22:49:43:91:d6:d7:
aa:2d:9b:eb:1a:24:88:63:4c:18:fd:fa:9a:5b:60:
c7:2c:18:39:a9:70:f4:66:36:96:99:83:ff:6a:cb:
3d:b8:85:e6:1a:f4:6f:85:be:1e:a0:9b:92:c0:1a:
2b:33:41:96:56:69:74:8b:93:97:fa:12:fd:ee:d8:
9f:1a:3b:86:9a:9c:5a:0c:d9:70:06:c6:cf:e7:fe:
ba:b3:20:e2:b2:6e:a3:83:1f:84:dd:a0:a5:e8:82:
5f:14:16:6d:16:34:91:d3:82:98:8e:13:36:37:01:
76:70:c4:70:50:b7:cb:be:f0:c4:72:50:2b:32:45:
85:2e:21:22:69:ea:53:fd:44:d4:00:78:e7:e7:0d:
95:7a:56:e6:37:d8:82:85:b1:56:96:1d:ac:c9:73:
f3:8d:24:95:cb:f1:e8:fe:3d:79:7e:f9:8b:14:46:
84:21:c0:7d:e9:c8:d9:11:78:1e:c1:1a:7b:d9:53:
4a:57:20:64:00:c6:f8:55:e0:0d:b6:42:0c:42:cd:
2b:46:0f:09:3f:21:ca:57:c7:e4:cd:9b:bc:c1:36:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B5:E6:EA:2C:2D:A4:7B:55:AF:29:E3:D7:59:FD:D1:10:FA:C9:82
X509v3 Authority Key Identifier:
keyid:42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:94:2b:37:2c:0d:56:4d:ae:4c:0e:09:ef:98:d4:5a:5b:9c:
0c:bf:1e:1e:7d:6b:ce:bb:42:af:bc:25:fd:75:09:06:3b:93:
89:5d:e1:17:e0:a2:d4:1e:d9:1e:d1:60:0d:dc:62:8f:c4:d7:
a4:c5:4d:dd:5f:03:ae:fb:8d:74:72:cf:bf:a4:a5:22:bf:74:
fe:a8:87:a8:30:70:67:5c:04:f3:20:8a:12:47:85:02:8e:8d:
ee:d7:05:2e:18:2a:2a:50:41:6c:b6:9d:7a:19:f0:2f:a5:f1:
6b:fc:b7:f3:7a:87:73:89:9f:97:33:78:48:58:3c:24:ca:f7:
f1:87:4f:23:7f:2c:ea:48:52:82:6c:27:79:ca:37:55:c4:ab:
13:0d:2b:e9:53:4c:10:8e:55:4f:42:b5:30:72:4c:3e:f6:ef:
72:49:d5:ab:55:c4:81:4e:5e:fc:35:43:44:bd:ac:1e:23:15:
4b:4a:fb:c1:89:af:10:3e:49:a4:08:6f:fe:d3:dd:9c:02:a9:
0d:2f:02:68:07:47:09:09:d2:23:38:7c:21:c0:97:23:a7:90:
6a:e6:6a:02:33:b1:ec:47:aa:de:b7:aa:59:62:2f:a0:8a:29:
3e:7d:92:ef:c4:14:c5:90:97:07:1a:0b:5e:83:ad:17:20:a6:
65:e6:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:55:16 2026 by rpki-client