
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json)
Hash identifier: 06yGerVktmqdd2U6ff0dwqj9jZi/omUZH0arhNcf46c=
Subject key identifier: 7C:53:CF:56:EC:DB:39:19:2A:40:9A:9B:E4:4D:50:E4:4D:D4:8C:F0
Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79
Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
Manifest number: 0231
Signing time: Mon 02 Mar 2026 02:00:05 +0000
Manifest this update: Mon 02 Mar 2026 02:00:02 +0000
Manifest next update: Mon 09 Mar 2026 02:00:02 +0000
Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: 6tS4c8Lq1DzH1YmErQ+CJsve5WTWXNYqdL0d6u6YYfU=)
2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: zxKqdb0zMWCK7O7b2gTDy0Tlsn+WOImUW+TSuWVYasI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl
rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:59:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679
Validity
Not Before: Mar 2 02:00:02 2026 GMT
Not After : Mar 9 02:00:02 2026 GMT
Subject: CN=69a4ef25-6e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:e6:2e:22:2b:7f:d6:b6:da:77:f8:d0:c5:
c4:09:7f:45:de:e8:c3:9d:fc:24:7c:9b:e4:30:a4:
6e:a5:6f:7f:36:db:5e:c0:e4:6c:36:67:6c:0e:41:
27:9e:72:3a:cc:77:74:e8:df:2d:b3:ec:c7:30:75:
a9:77:62:cf:f4:75:c1:f6:78:3f:44:40:ee:7c:c3:
ba:66:ad:e4:f9:58:f6:3c:37:4c:dd:bc:4c:5b:73:
15:67:63:c9:f4:bf:2b:de:13:a5:fd:1d:ba:38:86:
c7:bd:23:c1:c5:70:ab:4e:10:8c:b8:a1:cf:bd:d2:
9a:0e:1a:7e:63:94:20:23:19:bf:a2:8a:62:7b:5f:
b3:78:61:3d:69:af:1c:2b:93:52:12:c2:ff:a8:8c:
f2:42:35:3d:fc:c5:4b:97:ab:3f:b2:7e:8b:30:1e:
f9:4f:f3:38:dc:65:46:05:e9:26:67:59:bb:d3:e4:
ee:97:c8:51:2b:63:2f:62:57:73:78:0c:30:4c:a5:
a1:2a:7e:9e:5c:8b:3a:bf:d5:b9:e0:06:e6:57:3c:
33:12:86:b3:ad:77:83:13:1b:9b:34:2f:ab:04:b2:
21:05:bf:ce:b1:b1:74:45:56:24:6f:d0:47:d9:cd:
a7:9e:8b:6d:3a:aa:10:21:d5:e2:d8:f3:ad:6f:8f:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:CF:56:EC:DB:39:19:2A:40:9A:9B:E4:4D:50:E4:4D:D4:8C:F0
X509v3 Authority Key Identifier:
keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:99:ba:51:9f:7a:2f:bb:05:b1:fb:e1:81:fe:57:f1:0c:ee:
ef:9a:81:69:bc:21:9a:f0:b3:fb:bf:d7:45:c4:78:fd:d3:6d:
74:86:3d:c9:74:48:c5:f5:ed:e2:a3:2d:88:7c:9c:6b:c2:69:
5e:82:69:63:c5:08:56:f1:be:bf:c8:44:0b:d4:c7:a0:2f:77:
c3:97:69:c2:49:c2:34:e0:9a:d4:22:65:2e:62:20:f2:2e:96:
c3:b3:69:37:6d:10:c3:e4:5b:f8:c9:72:3d:1a:ed:b0:82:dd:
73:f1:89:86:29:01:14:48:24:90:70:30:29:64:f0:30:b2:2a:
92:fb:80:b9:b0:c5:e6:bb:1f:3f:1d:a9:6a:81:24:1c:d3:50:
bf:98:35:5a:83:20:d4:3c:37:f0:73:28:06:3b:1b:cf:21:6d:
2c:94:4d:d0:5e:56:d9:6b:66:32:4b:0a:b4:52:ab:67:26:2c:
6e:51:27:f3:2b:8b:e1:24:60:30:f1:a0:a4:17:e7:b9:d3:5b:
e0:9f:72:07:b6:d4:8e:59:a8:21:27:d5:07:fb:fb:a9:96:ed:
fc:2f:e8:44:94:3f:83:02:0d:06:19:00:eb:c4:63:63:0c:7f:
14:32:9a:0e:20:e9:e8:22:29:72:4f:97:0c:17:46:86:a1:d3:
34:45:e7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:05 2026 by rpki-client