
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json)
Hash identifier: gQbb3gQu+vCOnieoD4TkV4+dtAAhRxEi0LRh1Mdgfv0=
Subject key identifier: BA:37:96:0C:01:39:05:13:D6:6B:DD:42:43:54:5E:4B:82:05:9C:21
Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Certificate serial: 2337
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
Manifest number: 2328
Signing time: Sat 28 Feb 2026 15:51:26 +0000
Manifest this update: Sat 28 Feb 2026 15:51:26 +0000
Manifest next update: Sat 07 Mar 2026 15:51:26 +0000
Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: GlpkW0aQQ0Egq96rVXVLEEtxJXyAsn4gsoozFcs6XKI=)
2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: +yqS5ARpGMGBWr2MyFGiajoFZUJV/KOEs+STzodgJKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9015 (0x2337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Validity
Not Before: Feb 28 15:51:26 2026 GMT
Not After : Mar 7 15:51:26 2026 GMT
Subject: CN=69a30efe-f56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:93:b1:05:56:15:03:98:ef:55:71:e8:50:
47:23:0e:31:fc:96:5e:3b:e0:2c:45:75:41:7b:49:
52:0f:39:63:b8:a3:fc:fb:3e:fe:03:d0:70:d1:94:
0a:b6:2b:23:65:98:e4:43:38:97:5f:08:dd:bd:18:
7b:0b:d0:c0:36:4e:ca:b2:32:aa:97:fd:b3:b9:eb:
9e:35:67:21:b7:36:6a:b7:0d:aa:99:c9:e5:f0:6d:
77:2d:6f:a7:3d:d9:9a:d4:53:43:35:f8:8c:4d:1b:
92:52:e8:06:00:1b:9e:91:95:15:a3:09:1a:49:28:
3c:56:00:d3:fc:d0:3a:c0:78:d2:dd:4f:d8:5f:76:
cb:23:91:1c:40:0d:d0:9b:64:f4:cc:b8:e0:17:a3:
d4:8e:98:6d:15:38:69:67:d2:6f:85:43:f6:cc:6d:
3d:67:ac:94:15:6a:44:75:78:61:ad:41:bc:ea:5f:
e5:64:cb:52:19:83:84:bc:58:1e:8f:72:eb:c9:c8:
d5:ea:46:d9:61:3a:ba:c7:6e:c3:b9:cf:df:ea:a2:
27:5f:10:a8:33:fa:a6:c5:68:9e:df:5f:bf:a8:ba:
81:9d:76:a4:94:d3:35:7b:e9:bd:9e:54:62:ac:12:
58:0d:0c:4d:62:23:20:59:4d:6a:3d:fe:10:b6:84:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:37:96:0C:01:39:05:13:D6:6B:DD:42:43:54:5E:4B:82:05:9C:21
X509v3 Authority Key Identifier:
keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:b6:04:9f:73:9d:24:11:29:d4:c1:07:ac:c5:45:4e:68:15:
33:9e:31:7f:af:fc:a8:f6:8c:b2:2c:11:ab:71:c9:c4:b1:aa:
8e:55:f0:fe:88:bd:ef:55:9e:b0:57:bb:2c:c8:34:66:38:23:
7d:77:12:30:21:49:6f:67:3d:94:f6:c0:e4:2b:ca:a7:da:c6:
33:ae:d4:be:5b:02:6e:7b:5f:44:95:62:bf:75:0f:8c:25:4b:
2b:fe:b4:7f:4a:48:1f:67:3d:d7:49:af:f4:a4:36:c9:6e:7a:
27:b7:9b:aa:65:b7:67:44:d7:47:c0:b6:da:21:a3:6f:91:64:
76:ec:ad:22:54:e7:02:fd:7c:23:93:58:36:61:1d:e3:00:30:
d4:59:7c:77:b3:42:a8:2a:cf:b7:69:d0:78:6b:f3:e8:81:0b:
30:64:84:33:a9:6e:9e:02:8d:7d:60:31:7b:b9:de:64:7f:94:
96:62:93:c3:3f:aa:b8:f0:46:49:a5:dc:57:73:93:47:d3:7e:
e1:ae:50:d3:20:fb:7e:10:44:da:69:87:51:2f:8a:bd:9d:e6:
35:03:af:11:df:80:f4:04:f9:16:ab:59:e2:98:8c:a2:3f:a9:
c1:d6:f5:98:a3:d1:cd:04:d3:84:10:72:72:aa:9b:69:25:2c:
b0:65:74:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:15:44 2026 by rpki-client