
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
File: 0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json)
Hash identifier: rKBhwUGAacvwSzfFmMice3j23apOJ7kP47hDMfUx2+8=
Subject key identifier: 70:87:66:B3:4F:A4:0B:01:C8:65:4F:EB:D7:31:17:48:BE:47:0F:D4
Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
Certificate issuer: /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Certificate serial: 1B04
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
Manifest number: 2290
Signing time: Sat 28 Feb 2026 15:58:15 +0000
Manifest this update: Sat 28 Feb 2026 15:58:15 +0000
Manifest next update: Sat 07 Mar 2026 15:58:15 +0000
Files and hashes: 1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: ssoSCk8qzHNGv3eVt5X1hfNLcKXZIstQngL4EBzVItQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6916 (0x1b04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Validity
Not Before: Feb 28 15:58:15 2026 GMT
Not After : Mar 7 15:58:15 2026 GMT
Subject: CN=69a31097-5647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:61:c5:a4:8d:f9:19:3b:ca:75:e3:5d:a7:
0f:3b:b8:60:6c:25:a7:d8:8f:2f:ed:4a:18:a8:d6:
d0:da:eb:0b:2a:79:c0:28:41:ac:d4:8a:55:65:15:
ee:b1:b8:1f:40:86:dc:5b:d7:14:7f:a1:15:0a:e6:
b3:ee:c6:75:97:57:f5:12:d3:94:f9:06:54:49:cf:
02:dc:08:14:62:d2:0a:db:88:5e:05:c6:5e:6d:24:
9d:41:3e:93:a6:95:56:44:3e:63:7e:d0:fb:24:ea:
7c:ab:4d:5e:29:ac:8e:57:da:8f:f6:6f:0b:66:9d:
35:1e:99:fc:56:63:16:ea:e9:40:8e:e9:32:ad:3c:
74:c6:a3:35:73:4a:7d:2b:39:6e:5c:d2:5a:52:e1:
8a:df:09:03:80:28:47:a0:95:39:1b:e5:8a:43:6b:
46:59:ea:af:d4:d9:07:3a:6b:b2:85:d5:33:3f:7c:
8f:0a:ab:5b:19:c4:c9:2c:7c:01:ff:9a:a3:e5:7f:
63:77:97:d4:5d:b0:f3:0f:cb:c1:cf:db:28:0b:68:
7d:44:27:dc:29:51:87:3f:ed:10:76:21:90:9f:bc:
5c:76:8b:26:84:0e:b2:17:c7:9f:37:b7:3b:16:46:
09:db:52:6e:a6:9b:61:9d:eb:5c:e0:4f:ba:f1:13:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:87:66:B3:4F:A4:0B:01:C8:65:4F:EB:D7:31:17:48:BE:47:0F:D4
X509v3 Authority Key Identifier:
keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:0f:a6:53:86:d4:27:ea:b5:31:63:d1:ac:d7:a6:b9:aa:58:
15:2c:57:4b:20:9d:19:44:56:5d:c9:1d:43:90:cc:4c:4d:0d:
41:00:26:86:6b:c7:6d:fb:3c:71:99:f8:0d:ea:e6:f6:ef:2b:
ba:41:86:23:a3:2c:39:a6:18:02:6d:f4:f6:2e:3b:74:7f:43:
84:51:c3:73:70:fb:8c:41:d1:80:57:30:ac:76:7e:d1:1c:8a:
59:cd:1e:a5:4c:82:e9:81:4c:8f:6e:87:48:cf:e0:5e:59:44:
cc:93:8d:bf:11:42:50:34:fe:54:01:7f:28:7b:5a:7d:d7:0e:
39:93:35:a6:17:50:85:92:ad:8b:a9:34:fd:08:20:33:ca:c6:
1d:da:26:f2:33:50:d6:2e:3b:06:e0:6f:4c:bb:0f:2d:ac:a8:
70:f7:ec:0b:a0:d1:69:fa:8e:ac:ae:0b:af:f1:c3:b9:fc:ef:
87:82:dc:4b:9c:cf:c9:02:cc:cb:ee:2d:32:da:1a:73:a3:80:
21:57:e5:a5:54:46:b9:9e:4b:81:43:7d:e9:e5:71:a7:f7:c2:
fb:f3:b6:70:45:68:44:c5:74:01:e4:92:59:d6:17:24:cc:16:
69:6b:10:9c:24:57:77:7b:9e:71:23:f2:fc:9d:2b:95:98:8f:
9f:68:8f:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKEQwOEQ4NjgxQzJCRTRENDdDMkEyOTA1NUY2NkU2ODk1
NTg0NjE3RjcwHhcNMjYwMjI4MTU1ODE1WhcNMjYwMzA3MTU1ODE1WjAYMRYwFAYD
VQQDDA02OWEzMTA5Ny01NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn49hxaSN+Rk7ynXjXacPO7hgbCWn2I8v7UoYqNbQ2usLKnnAKEGs1IpVZRXu
sbgfQIbcW9cUf6EVCuaz7sZ1l1f1EtOU+QZUSc8C3AgUYtIK24heBcZebSSdQT6T
ppVWRD5jftD7JOp8q01eKayOV9qP9m8LZp01Hpn8VmMW6ulAjukyrTx0xqM1c0p9
KzluXNJaUuGK3wkDgChHoJU5G+WKQ2tGWeqv1NkHOmuyhdUzP3yPCqtbGcTJLHwB
/5qj5X9jd5fUXbDzD8vBz9soC2h9RCfcKVGHP+0QdiGQn7xcdosmhA6yF8efN7c7
FkYJ21Juppthnetc4E+68RP3pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCHZrNP
pAsByGVP69cxF0i+Rw/UMB8GA1UdIwQYMBaAFNCNhoHCvk1HwqKQVfZuaJVYRhf3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB
MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRVZkNvcEJWOW01b2xWaEdG
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBJMkdnY0stVFVmQ29wQlY5bTVvbFZoR0ZfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRV
ZkNvcEJWOW01b2xWaEdGX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANw+mU4bUJ+q1MWPRrNemuapYFSxXSyCdGURWXckdQ5DMTE0NQQAmhmvHbfs8
cZn4Derm9u8rukGGI6MsOaYYAm309i47dH9DhFHDc3D7jEHRgFcwrHZ+0RyKWc0e
pUyC6YFMj26HSM/gXllEzJONvxFCUDT+VAF/KHtafdcOOZM1phdQhZKti6k0/Qgg
M8rGHdom8jNQ1i47BuBvTLsPLayocPfsC6DRafqOrK4Lr/HDufzvh4LcS5zPyQLM
y+4tMtoac6OAIVflpVRGuZ5LgUN96eVxp/fC+/O2cEVoRMV0AeSSWdYXJMwWaWsQ
nCRXd3uecSPy/J0rlZiPn2iPRA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:25 2026 by rpki-client