
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier: z/W4NFZ+pGwfI99eueV+QVq0xxAAk17lieZEn+oF8K4=
Subject key identifier: A4:2D:92:A9:B1:65:12:EF:41:83:72:27:2B:21:4E:3A:C2:CC:E5:D3
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number: 01E3
Signing time: Sun 01 Mar 2026 04:09:54 +0000
Manifest this update: Sun 01 Mar 2026 04:09:53 +0000
Manifest next update: Sun 08 Mar 2026 04:09:53 +0000
Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: JW/a7n5V7j7XZkelrdf30iiwumKgUa2QIMS8ovFE8V4=)
2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: m1n+fMnb/ADNpdU1kcDXhgieJ7VTBfqDuhZU4DVN5dI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Validity
Not Before: Mar 1 04:09:53 2026 GMT
Not After : Mar 8 04:09:53 2026 GMT
Subject: CN=69a3bc12-6615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:58:db:22:dd:70:40:f1:80:f9:93:02:93:
24:30:d5:93:3e:c9:8c:43:06:3a:2f:a3:56:b0:90:
81:7f:3e:d1:20:a0:42:42:e0:55:98:a2:74:27:f4:
0d:cd:cc:8f:bd:02:e3:98:33:a5:92:ed:8f:38:5c:
53:54:4e:a0:dd:a9:1c:6d:93:e6:cc:27:18:09:0e:
2f:82:6e:2e:66:2c:c9:cd:c3:db:59:96:4d:cc:7c:
e9:f3:79:62:69:a4:ea:b0:0b:cd:c7:90:9f:07:33:
16:a2:17:35:cd:e8:63:0f:62:74:47:79:04:b2:e9:
e1:7c:5b:b4:99:b3:28:b3:f3:5f:5c:09:6c:ba:1c:
81:d5:10:26:b8:35:e9:5b:62:df:a5:f3:9d:ba:29:
86:24:e9:ad:50:7f:e7:01:0e:42:7f:95:4a:72:51:
b2:8f:d8:02:0d:33:d7:cf:dc:70:b3:78:81:cd:4e:
15:f3:89:e9:4d:c1:9f:d3:61:a3:26:6f:45:4c:62:
79:3f:ae:c6:61:37:e9:8c:4a:01:c5:bb:bd:09:a7:
5c:d1:f9:1e:cb:01:88:4d:b0:36:b4:c0:a3:2e:8a:
48:bf:03:aa:78:b4:e8:a9:77:fb:1f:41:dd:7b:5b:
de:82:4d:aa:8c:01:cd:a3:ab:cc:aa:28:67:b5:ee:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2D:92:A9:B1:65:12:EF:41:83:72:27:2B:21:4E:3A:C2:CC:E5:D3
X509v3 Authority Key Identifier:
keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:71:65:30:b4:42:33:95:9b:bd:a1:fd:3c:13:8a:de:bd:fe:
68:ce:a2:46:9c:7f:2f:bf:4d:7c:fc:61:6b:ce:9b:ab:38:e2:
62:a1:9c:e2:d3:55:1d:2d:52:c6:ad:36:45:77:b7:0c:cf:9f:
df:80:eb:79:b2:47:60:7e:af:d0:53:29:fd:2d:0a:22:cf:5f:
1b:09:db:99:6d:13:47:1b:ce:aa:ba:63:ec:ac:61:fe:29:29:
3f:f2:a5:0b:8c:55:36:d3:c5:4c:16:8d:eb:f0:f6:61:cb:f1:
19:c2:ae:b8:0a:24:60:a5:d6:11:ab:e5:d8:7b:7e:ca:a7:45:
4b:24:e2:c6:91:b0:bc:53:f2:94:bf:68:ec:a1:92:18:74:83:
5a:4b:c9:ae:86:44:32:10:06:17:ce:4d:ba:6c:8a:1a:d9:68:
e8:33:0f:a9:af:b5:14:8f:31:d0:f3:bb:8f:6b:a8:91:a0:90:
84:8c:08:f8:f9:79:5f:34:a1:ea:43:fc:04:85:84:e8:d2:26:
2e:06:dc:86:50:7e:a5:d9:e6:b9:62:e0:ab:47:e0:5d:11:65:
64:83:e4:35:c4:21:46:25:cf:95:59:88:06:8c:6a:a0:7a:e2:
a7:26:d8:08:73:8f:a3:71:6b:d2:50:9b:21:56:71:44:be:3a:
78:01:47:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4
MURBNEIzMUMwHhcNMjYwMzAxMDQwOTUzWhcNMjYwMzA4MDQwOTUzWjAYMRYwFAYD
VQQDDA02OWEzYmMxMi02NjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0/ZY2yLdcEDxgPmTApMkMNWTPsmMQwY6L6NWsJCBfz7RIKBCQuBVmKJ0J/QN
zcyPvQLjmDOlku2POFxTVE6g3akcbZPmzCcYCQ4vgm4uZizJzcPbWZZNzHzp83li
aaTqsAvNx5CfBzMWohc1zehjD2J0R3kEsunhfFu0mbMos/NfXAlsuhyB1RAmuDXp
W2LfpfOduimGJOmtUH/nAQ5Cf5VKclGyj9gCDTPXz9xws3iBzU4V84npTcGf02Gj
Jm9FTGJ5P67GYTfpjEoBxbu9Cadc0fkeywGITbA2tMCjLopIvwOqeLToqXf7H0Hd
e1vegk2qjAHNo6vMqihnte5C7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQtkqmx
ZRLvQYNyJyshTjrCzOXTMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx
RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq
M2E1amRsWlBqVmFCMmtzeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsHFlMLRCM5WbvaH9PBOK3r3+aM6iRpx/L79NfPxha86bqzjiYqGc4tNVHS1S
xq02RXe3DM+f34DrebJHYH6v0FMp/S0KIs9fGwnbmW0TRxvOqrpj7Kxh/ikpP/Kl
C4xVNtPFTBaN6/D2YcvxGcKuuAokYKXWEavl2Ht+yqdFSyTixpGwvFPylL9o7KGS
GHSDWkvJroZEMhAGF85NumyKGtlo6DMPqa+1FI8x0PO7j2uokaCQhIwI+Pl5XzSh
6kP8BIWE6NImLgbchlB+pdnmuWLgq0fgXRFlZIPkNcQhRiXPlVmIBoxqoHripybY
CHOPo3Fr0lCbIVZxRL46eAFHBA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:49 2026 by rpki-client