
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json)
Hash identifier: ltG0HR7Z+imk0MZGwdS19jNdVDa/1HXBQ0wQuZnuZ4Y=
Subject key identifier: 31:EE:D2:82:F8:F4:02:DD:35:19:A8:89:F9:26:D7:8B:2F:D3:A1:0F
Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Certificate serial: 0AB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
Manifest number: 0AB5
Signing time: Sat 28 Feb 2026 19:43:00 +0000
Manifest this update: Sat 28 Feb 2026 19:42:59 +0000
Manifest next update: Sat 07 Mar 2026 19:42:59 +0000
Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: Ippsi69lOGWM0dhZ30/J1IgPkbMTZ0AosnFRhujZGdM=)
2: 2F05099CEC5611F094F5171C4A6F56BC.roa (hash: l85O/s7ZtbxPlNiSUjDR70E+7B5UP7FdsX9CLjUMuOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2742 (0xab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Validity
Not Before: Feb 28 19:42:59 2026 GMT
Not After : Mar 7 19:42:59 2026 GMT
Subject: CN=69a34543-4f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:c1:14:ed:26:9e:bf:ce:57:79:b8:5d:90:
b6:3f:c7:4a:3c:27:29:52:32:14:24:c0:ac:1f:11:
d5:2b:5e:49:f5:7b:b6:95:8a:43:b2:92:9e:d1:1d:
eb:3a:35:e9:d4:f1:ef:a3:e3:4b:c6:77:7e:b5:28:
38:1e:da:8a:cb:74:c8:8d:89:9f:e7:42:72:e3:7f:
e7:44:35:57:2b:1e:40:c5:4f:6f:13:e7:ea:c4:88:
d1:78:c0:32:2a:89:80:fc:5d:9b:35:0c:91:03:d5:
29:8a:a9:93:2e:55:e9:b5:fe:4c:49:fa:65:18:51:
25:6f:53:e7:e9:5b:84:1f:7e:8c:4c:77:dd:73:74:
8a:39:43:29:4e:19:84:6b:1a:7b:7c:84:90:ea:03:
b7:e3:93:3a:ba:85:7b:8e:9f:f2:e9:eb:24:e2:63:
37:40:ff:bf:e3:01:51:24:ef:be:90:24:95:63:8a:
88:4b:7f:5c:90:4c:1d:f0:6b:6f:32:36:98:31:b6:
1b:14:7c:05:8a:2e:9a:c5:f0:d7:c6:45:58:ba:9e:
8d:c3:8a:e0:79:59:eb:b9:e4:99:49:75:3c:6c:6b:
8a:2d:2c:ea:49:19:11:a1:bc:06:63:85:ba:ae:92:
b2:cb:8c:8c:b7:41:fc:52:d9:b7:21:eb:a1:cc:a4:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EE:D2:82:F8:F4:02:DD:35:19:A8:89:F9:26:D7:8B:2F:D3:A1:0F
X509v3 Authority Key Identifier:
keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fc:52:98:82:e1:3a:f3:dd:1a:1e:62:6e:99:68:27:ab:e0:
58:78:92:bf:c8:c5:6d:4c:c4:88:8a:ea:b4:a6:f0:e0:90:c6:
cd:ad:77:49:7d:ad:52:03:2f:c7:4f:f1:33:b9:d2:d0:38:70:
47:4d:7f:4e:38:c8:52:98:f7:64:b8:eb:a5:82:01:5b:e6:bd:
96:00:84:9f:97:9d:9a:0f:1d:b5:16:b6:75:29:9a:ca:88:96:
30:c9:04:74:c0:98:70:c0:37:1a:1f:3e:f6:a8:99:b8:77:7a:
fe:6d:f5:28:9a:c0:aa:4d:5c:23:89:d5:c3:0f:ac:fd:e4:d7:
b9:ba:8c:5b:df:6f:52:4b:28:35:de:f7:85:c1:08:62:de:cb:
d7:e3:fe:4f:79:d8:34:66:44:e0:d1:e3:4d:9f:ac:d6:c2:58:
c8:0a:18:ae:f5:d9:1b:6b:0f:86:ef:4d:b2:ed:fe:e2:a2:ad:
e4:4e:1e:0e:24:99:19:19:51:4f:30:cc:01:3e:14:9a:69:9b:
76:37:69:c1:a3:41:ce:a2:98:7d:bc:fe:70:87:6e:63:3e:6c:
60:1a:f1:40:75:7a:25:c0:16:4c:6d:c3:3d:8e:d7:90:ce:a0:
cf:0c:c2:dd:67:32:6d:90:0b:4a:13:19:8e:76:57:98:f6:09:
c9:fe:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:40:25 2026 by rpki-client