
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json)
Hash identifier: gjwQNSaR8zDPOsCAbKyoKbSau6qibjeIG1sqqw+J0s0=
Subject key identifier: F3:32:12:48:82:47:69:21:E2:B6:99:9D:B0:D2:13:AA:D5:43:DB:84
Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
Manifest number: 01CC
Signing time: Sun 01 Mar 2026 04:25:33 +0000
Manifest this update: Sun 01 Mar 2026 04:25:33 +0000
Manifest next update: Sun 08 Mar 2026 04:25:33 +0000
Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: rdt174IwN9rYv3kJzpFVaJX8W756OQHSejJd0Bux3Cs=)
2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: vLaYuuYnarn+LGPGR9ZLrnHgOaNMvO/0VgOiG0azlng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Validity
Not Before: Mar 1 04:25:33 2026 GMT
Not After : Mar 8 04:25:33 2026 GMT
Subject: CN=69a3bfbd-78ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:5d:f8:2b:87:37:63:ac:54:75:01:9b:9c:
3a:7e:97:2b:04:c0:61:9f:a0:ff:f8:a7:97:7a:98:
bb:81:ce:f5:06:22:da:5a:ed:86:0d:4b:5d:5b:04:
8c:ba:8b:d3:79:5b:3f:35:db:bb:b3:5e:7d:58:bc:
b6:06:3f:c6:5b:46:dd:3a:6f:54:5b:2c:ac:a1:66:
41:04:da:7e:6d:6e:ff:fe:61:74:77:cb:ec:11:17:
3f:36:b8:04:0d:db:0b:de:ec:cf:e9:bd:89:39:c3:
ac:6d:7c:e7:84:83:9a:43:a7:8a:dc:b7:4b:05:63:
15:d7:a6:be:94:a6:0a:5c:97:24:45:30:cd:b8:57:
e6:8a:49:25:4d:e2:02:c1:b1:15:85:ea:1c:67:92:
fc:2e:1a:73:f1:8e:62:40:eb:75:a6:b5:72:30:f4:
99:36:74:76:91:39:41:25:58:6e:b8:f1:90:76:af:
13:1a:33:87:c1:ed:10:57:cf:51:80:9d:cc:2f:79:
21:0d:4e:f4:48:b4:af:52:7c:10:71:f1:6b:57:d8:
80:6c:3d:62:96:ef:37:9e:86:e8:ba:b8:af:76:a1:
a1:eb:21:8e:aa:e1:b8:26:49:56:7d:cd:b9:ab:61:
e3:79:20:58:f2:f9:96:00:be:41:ad:74:61:ac:bb:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:32:12:48:82:47:69:21:E2:B6:99:9D:B0:D2:13:AA:D5:43:DB:84
X509v3 Authority Key Identifier:
keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:82:b2:78:49:8d:c2:b7:88:a1:e6:a2:8a:60:85:ce:9a:f6:
29:30:6e:f7:30:e0:3c:94:56:d5:01:18:89:52:d4:71:13:6a:
77:cf:5b:0a:f9:87:35:6e:00:b9:3c:36:1c:b5:ee:88:d7:d3:
cb:02:86:04:ea:60:70:4d:dc:7b:a9:62:ac:1d:fe:88:b6:10:
f5:da:19:22:6a:e2:82:57:0a:eb:b5:51:99:61:da:61:22:b2:
60:1e:d4:71:12:02:48:90:04:1d:a5:2e:3b:31:c1:9e:7f:59:
fa:8a:e1:62:bd:03:36:80:d7:ad:de:46:5c:2f:52:13:c4:e7:
0a:05:04:e2:28:09:6d:7a:17:3c:7d:29:87:b2:3b:c7:5e:21:
4f:b9:d3:80:da:4d:75:d2:6c:9d:f1:b3:24:75:47:57:47:dc:
23:44:32:9e:6b:35:32:c7:8f:26:c2:ae:13:92:3f:b5:03:4e:
33:df:66:07:4c:2c:ad:ff:26:e4:bc:7e:47:bd:7a:51:55:18:
be:c6:03:93:7a:e4:0c:b1:9f:2c:31:32:23:03:25:9a:65:5a:
31:5e:7c:f4:89:a9:5d:40:0f:7b:f0:08:43:7f:5d:70:dd:2e:
f3:df:f5:0d:fb:5f:09:d2:88:4a:b0:51:b3:78:8f:0b:c7:a6:
3a:f3:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:46 2026 by rpki-client