
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json)
Hash identifier: a7Juy00BgWytciujV1JR/OW1JNF8WHDUovR3+/asvSo=
Subject key identifier: 03:A7:86:2C:21:E3:6E:A1:C6:77:98:0D:16:17:BC:6B:69:E4:CC:45
Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F
Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
Certificate serial: 1D6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
Manifest number: 1D57
Signing time: Sat 28 Feb 2026 16:10:07 +0000
Manifest this update: Sat 28 Feb 2026 16:10:07 +0000
Manifest next update: Sat 07 Mar 2026 16:10:07 +0000
Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: aIK53MXoxxAWgES4rACtUW1uqxiMCLeDQUTQSi+RHBQ=)
2: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: WdsKbuAJkGSMks+nUR19PiDJtaT3Zd7f2z8fYb9N1t0=)
3: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: 9+n7psU8Mo4bBvHvPPjtk0+kg5spLTMBx2TgDve5t00=)
4: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: HCemXuQk3lGZH+8qq2MsPKCOXAWGB82yjIwyAbHRoNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl
rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7535 (0x1d6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
Validity
Not Before: Feb 28 16:10:07 2026 GMT
Not After : Mar 7 16:10:07 2026 GMT
Subject: CN=69a3135f-8163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fa:32:92:fa:50:27:9d:3d:9b:4e:7c:c1:36:
ff:d5:35:57:82:aa:62:82:21:02:c7:04:82:02:57:
ca:8e:1f:1b:54:b8:55:37:4b:26:5e:09:6e:29:18:
b6:13:26:80:f6:30:55:7b:a1:04:4d:c0:63:f3:7b:
e6:67:63:7b:ca:82:ce:7a:68:a0:54:12:ef:34:fe:
31:47:4d:ac:6f:c9:36:c1:df:23:55:0f:45:d9:3b:
88:c2:6b:dd:eb:de:bf:6e:49:2f:60:41:f2:d0:f8:
e6:11:87:ef:45:e4:56:c6:d0:5f:56:d5:2e:17:1a:
a6:7e:5d:93:8d:b0:a8:9d:64:9d:e6:5e:73:1c:48:
7c:6e:29:72:4a:fb:50:17:f8:2e:cb:7d:e2:bc:a9:
f1:06:fa:12:d7:20:36:d1:0e:40:e2:8f:0a:e6:ef:
43:4b:f6:ee:c9:10:53:cd:77:54:5d:2b:58:23:7b:
5f:58:45:f2:f1:b3:14:25:58:51:4a:76:90:f6:34:
e7:1d:fd:ea:67:74:05:98:62:36:07:da:20:2e:dd:
4d:6c:d6:46:9b:b7:53:73:f9:27:78:20:b2:a7:19:
d4:a2:6a:1d:f6:09:a6:82:6a:e1:68:d4:31:a9:08:
2f:ea:2c:86:b4:02:9c:eb:f8:fc:1e:c0:ed:b6:ba:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A7:86:2C:21:E3:6E:A1:C6:77:98:0D:16:17:BC:6B:69:E4:CC:45
X509v3 Authority Key Identifier:
keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:9b:00:22:94:af:2b:ea:f6:1a:b2:a9:4c:f2:59:da:7a:c0:
aa:f0:66:a5:48:4f:7d:1b:6d:ba:b4:f9:cb:13:8d:fc:56:76:
82:da:9b:3c:cd:24:94:33:8a:57:35:90:af:e6:6e:42:6c:67:
ea:9e:fd:91:e9:3f:a3:fd:67:4e:2d:10:f3:ba:57:50:ce:dc:
5c:d9:bf:7b:0e:32:a2:27:1c:7b:87:13:62:37:51:5c:ec:7f:
9a:e5:8d:39:20:0b:1d:81:83:dd:01:89:c5:de:22:0f:80:81:
0d:53:f9:40:c0:89:5c:fb:0c:f4:5e:c6:5c:fc:34:0e:e0:25:
c1:63:03:f5:a8:59:2b:80:ff:97:08:f1:b7:70:bc:21:4f:0f:
ff:a5:4f:32:96:71:13:59:9e:48:70:93:63:8d:2d:20:b4:20:
00:89:a3:42:e4:23:cf:c0:c5:3f:81:d3:0a:a2:d6:07:66:dd:
88:91:41:7f:27:6d:0a:fa:c5:b0:82:d4:17:2f:e8:e6:a7:ce:
d9:f4:2b:cc:3d:e5:42:a8:d8:c9:ec:aa:49:04:9c:27:17:01:
e1:7f:35:71:f1:50:86:31:bc:08:56:d9:26:33:51:0e:35:ff:
a8:6d:c0:17:8a:dd:31:df:fb:02:15:8a:08:1a:d3:08:9e:04:
b0:93:e5:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3
MzQyRDY2MUYwHhcNMjYwMjI4MTYxMDA3WhcNMjYwMzA3MTYxMDA3WjAYMRYwFAYD
VQQDDA02OWEzMTM1Zi04MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/oykvpQJ509m058wTb/1TVXgqpigiECxwSCAlfKjh8bVLhVN0smXgluKRi2
EyaA9jBVe6EETcBj83vmZ2N7yoLOemigVBLvNP4xR02sb8k2wd8jVQ9F2TuIwmvd
696/bkkvYEHy0PjmEYfvReRWxtBfVtUuFxqmfl2TjbConWSd5l5zHEh8bilySvtQ
F/guy33ivKnxBvoS1yA20Q5A4o8K5u9DS/buyRBTzXdUXStYI3tfWEXy8bMUJVhR
SnaQ9jTnHf3qZ3QFmGI2B9ogLt1NbNZGm7dTc/kneCCypxnUomod9gmmgmrhaNQx
qQgv6iyGtAKc6/j8HsDttrqsEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAOnhiwh
426hxneYDRYXvGtp5MxFMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4
NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa
aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC
cTRMbHZyY052aTV6UXRaaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYZsAIpSvK+r2GrKpTPJZ2nrAqvBmpUhPfRtturT5yxON/FZ2gtqbPM0klDOK
VzWQr+ZuQmxn6p79kek/o/1nTi0Q87pXUM7cXNm/ew4yoicce4cTYjdRXOx/muWN
OSALHYGD3QGJxd4iD4CBDVP5QMCJXPsM9F7GXPw0DuAlwWMD9ahZK4D/lwjxt3C8
IU8P/6VPMpZxE1meSHCTY40tILQgAImjQuQjz8DFP4HTCqLWB2bdiJFBfydtCvrF
sILUFy/o5qfO2fQrzD3lQqjYyeyqSQScJxcB4X81cfFQhjG8CFbZJjNRDjX/qG3A
F4rdMd/7AhWKCBrTCJ4EsJPlJg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:00 2026 by rpki-client