
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json)
Hash identifier: MFN5EnyW+nMbEJ3rLaC/2NfWGTmJISynNYPrYTLGdf8=
Subject key identifier: 99:AF:E9:7D:D9:CA:94:C9:F7:68:32:F6:A4:E5:81:BD:E2:9C:D8:E1
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
Manifest number: 016B
Signing time: Sun 01 Mar 2026 05:52:15 +0000
Manifest this update: Sun 01 Mar 2026 05:52:15 +0000
Manifest next update: Sun 08 Mar 2026 05:52:15 +0000
Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: 6fa0OF3nRnbBF7VrL+8kno/pG5U0RIc4eP9y1GNm8aQ=)
2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G/0ezw6yoaaHjsn46sx4sKQROwS7T0PMQPxdtMKah+o=)
3: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=)
4: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: E9ObZNoyKAzjoiJfjRSwt1+kDOZ+xsFeoybdq6vQ22E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Validity
Not Before: Mar 1 05:52:15 2026 GMT
Not After : Mar 8 05:52:15 2026 GMT
Subject: CN=69a3d40f-5cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:fc:f5:b9:73:0f:ed:be:c3:6c:ad:1d:23:
65:6e:61:65:fe:20:5e:90:0c:5c:e7:11:f7:b9:b1:
bf:d1:b7:c5:dd:e4:10:c7:ff:c6:d6:3d:dc:bc:66:
8c:ce:97:97:65:33:35:ae:ca:8c:21:37:9e:e1:4d:
cd:a5:57:cf:4b:92:ce:3d:d5:d4:e1:47:b8:86:7b:
31:59:f4:b1:8d:7c:b3:59:9d:39:45:c1:b3:2f:bc:
95:0e:a0:a2:45:bb:69:6c:78:67:fc:24:b1:04:72:
97:7f:44:af:2f:9a:b7:d1:c8:65:f7:ce:3f:54:01:
6b:c7:65:b5:ca:55:3b:a3:c4:95:fc:c7:23:46:73:
60:ce:90:e7:71:63:71:7d:f9:82:31:5e:b0:8a:87:
8d:8c:1c:70:d1:63:07:ff:0f:b4:4f:55:c5:d7:4c:
a6:f2:6d:e3:ad:24:5e:fc:80:6c:a1:c4:9b:03:15:
05:f0:20:eb:33:ee:ca:dc:32:07:88:e9:e4:e7:2d:
7b:9d:d8:3d:32:93:c1:4a:42:71:d4:24:1b:1e:74:
69:21:ef:53:0c:49:8c:28:0a:40:bf:2e:a2:8a:1b:
99:a2:cd:c0:29:cd:a2:83:27:04:f7:cd:9e:20:3c:
48:39:4b:05:fd:78:3f:4e:f2:15:de:f7:7c:36:a7:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AF:E9:7D:D9:CA:94:C9:F7:68:32:F6:A4:E5:81:BD:E2:9C:D8:E1
X509v3 Authority Key Identifier:
keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:bf:3f:f1:aa:4a:1e:42:c1:71:ec:05:0d:8d:fd:e1:8f:25:
0c:2a:53:89:2d:94:cf:44:81:58:ad:e3:8e:97:58:84:39:76:
09:9b:5b:eb:29:72:83:52:4e:39:b0:37:27:6c:e7:39:d2:7a:
d9:ab:c7:32:a6:6c:1a:17:b0:5a:59:69:0e:01:85:8f:4d:99:
27:97:29:13:7a:e9:0c:2e:ed:36:23:80:fb:e8:af:f5:6f:18:
ed:57:c4:1c:cc:22:e2:9e:15:9f:44:98:22:92:c2:0d:10:6c:
47:1d:39:68:3a:ea:34:0a:aa:eb:d6:8f:76:ef:a8:2d:cb:0a:
30:08:7f:70:e2:fd:a1:f6:fc:6c:ca:53:83:fc:6e:b9:33:55:
f4:85:2c:90:67:7e:d2:a2:95:12:9a:30:6a:df:56:93:26:e6:
e0:ab:a8:a4:36:59:e1:01:73:d4:95:fe:fb:af:4e:69:0b:b0:
3c:4f:2f:d9:e1:70:2b:ae:88:4a:77:d2:0b:89:29:59:5b:dd:
1d:af:22:66:eb:ab:7b:d6:e2:70:47:1b:e7:97:06:b5:e4:bd:
ba:28:70:81:41:38:c0:9c:10:40:2f:51:cb:fe:c2:03:04:ab:
25:ca:0e:66:50:07:4d:e4:ab:a8:67:7b:a4:6e:15:12:2b:d6:
a4:fc:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:51 2026 by rpki-client