
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json)
Hash identifier: n9Q4DEyZB16VldmF438EYI5xzUpfEl5lLnurzc7aLas=
Subject key identifier: 44:9B:18:D1:E9:D4:A5:34:52:45:49:EE:E6:FB:2C:86:6C:E3:DF:2D
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
Manifest number: 0294
Signing time: Sun 01 Mar 2026 02:23:22 +0000
Manifest this update: Sun 01 Mar 2026 02:23:22 +0000
Manifest next update: Sun 08 Mar 2026 02:23:22 +0000
Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: BdL8yHT5cnM1aq/q8Fjy67053r/EMSHrCSyB2O7JIYk=)
2: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI=)
3: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: NR8OS1L1YDEOVGgB6cb2fttAqoXgsKVRMpQfg5GvzjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Validity
Not Before: Mar 1 02:23:22 2026 GMT
Not After : Mar 8 02:23:22 2026 GMT
Subject: CN=69a3a31a-4d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:23:da:22:9f:a2:17:fb:a5:44:c0:a1:7a:14:
85:52:7e:9c:65:9e:a1:f7:39:5e:74:49:21:49:b4:
67:c8:1c:c5:77:f3:df:3a:45:8e:59:9d:63:bd:b9:
c2:8e:2a:12:e0:61:bd:b9:dc:b9:b5:f6:fa:60:f3:
5f:de:b5:dc:90:65:09:b5:07:c7:ef:29:43:eb:c8:
ec:ab:68:0e:9a:07:5a:b8:07:bd:20:63:5d:09:df:
a1:31:b0:0a:02:98:48:41:e8:1b:eb:54:04:4b:db:
c8:dc:0f:4e:a7:f5:6c:23:88:e5:e5:e2:f9:e3:13:
13:ed:2a:82:ce:88:ba:29:b3:69:45:c4:b3:74:91:
c0:28:25:05:97:d8:a4:75:28:ef:e0:c5:bb:15:f6:
db:5d:1a:8e:fa:7d:66:7f:2f:80:96:5f:3b:12:1d:
95:36:9f:87:11:23:bc:f5:3b:9f:c7:da:eb:25:83:
5c:6d:6e:f6:77:66:88:ad:0a:c0:a3:75:48:e4:99:
14:16:c4:b0:db:a5:95:4a:6e:57:6c:20:84:6a:36:
ec:5d:39:a6:79:71:bb:95:40:67:c4:45:15:de:77:
04:73:1e:b2:79:7d:f0:2c:df:e0:29:10:fe:fa:84:
b9:a1:99:ab:64:ce:2d:72:ce:15:73:81:7d:65:de:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9B:18:D1:E9:D4:A5:34:52:45:49:EE:E6:FB:2C:86:6C:E3:DF:2D
X509v3 Authority Key Identifier:
keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:b1:d8:7d:df:0b:82:e6:ba:3d:ac:07:41:e3:d1:87:f9:71:
46:95:04:08:a3:d0:7f:48:ac:41:12:92:0f:f1:7b:56:df:0b:
46:5f:7f:ba:86:fa:d0:97:bd:11:ad:34:4f:79:f3:7b:99:4d:
0c:39:c3:af:f7:63:a3:00:20:4f:ee:da:ee:56:56:5a:32:9f:
d7:32:e9:33:0f:f4:a8:ab:97:cf:17:4d:29:65:aa:b3:97:d3:
bb:38:8e:a8:97:49:7b:c6:b0:55:1f:6a:20:78:e7:1d:8d:f9:
b7:b1:d3:ae:ee:4a:79:d6:83:c3:12:ef:98:e2:7c:df:62:57:
35:d1:67:24:36:b4:28:86:22:11:1c:55:26:6b:e7:f6:09:3b:
34:7a:ff:47:01:21:9d:eb:f0:80:77:6e:4e:c1:f8:0f:7a:43:
e0:f2:2a:01:5b:fe:fe:5b:ec:0a:4b:27:21:20:94:f3:cc:e6:
59:81:64:ce:0e:a6:57:a1:ce:57:36:f8:1c:4e:0e:78:71:1f:
5a:e2:43:11:93:33:4d:6a:51:68:8c:a7:a6:79:56:4e:7c:52:
0a:91:4e:3d:d9:db:0e:c7:46:ab:4e:7d:a8:48:a9:57:c0:d8:
ec:dd:ee:8c:13:5f:63:42:62:3a:11:f3:51:3a:3b:99:d1:f3:
7f:25:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:40 2026 by rpki-client