
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json)
Hash identifier: r+ie6Exi/Bc5lk6D3tUUo/rhtR+2QyHlUcm6CjEMENk=
Subject key identifier: C5:EC:06:A7:E1:BE:E4:74:36:9A:E8:91:B3:E6:34:7A:15:49:06:AD
Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Certificate serial: 02D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
Manifest number: 02CD
Signing time: Sun 01 Mar 2026 02:15:25 +0000
Manifest this update: Sun 01 Mar 2026 02:15:24 +0000
Manifest next update: Sun 08 Mar 2026 02:15:24 +0000
Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: ikmMDwpMspzoqHjOvy3opL+HNY3eOKnkSTjL3kjagGM=)
2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: CmoWwpOX0ZtQP0TpsfmBf+dkQcEijEjnpKnGYsZwLNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725 (0x2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Validity
Not Before: Mar 1 02:15:24 2026 GMT
Not After : Mar 8 02:15:24 2026 GMT
Subject: CN=69a3a13d-193d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:25:25:aa:5b:01:6f:35:06:0e:ae:27:db:
8d:82:11:d2:03:21:5b:87:f3:6a:91:22:96:86:7b:
e6:95:73:af:58:29:4c:83:b3:90:b1:89:6e:ee:b8:
a8:7d:56:55:eb:e0:6d:3d:3e:d6:b7:50:cf:82:46:
4c:5f:09:d2:f1:62:12:29:3f:36:28:ba:af:70:95:
0d:05:ac:f9:81:45:a8:65:2f:fb:22:11:4d:b4:09:
5e:4a:05:2f:78:89:5d:91:62:eb:0c:0a:34:ee:e3:
5c:f3:cb:4d:1c:d5:71:95:22:c9:4a:6c:81:df:a2:
2f:0e:0d:71:06:b1:6c:20:18:25:80:d5:10:ef:50:
eb:cf:88:ee:37:90:03:c8:4c:92:3c:b0:1b:24:9b:
05:5a:eb:c7:5d:49:31:c7:fb:84:2e:6f:b2:8b:dd:
5c:39:a8:b2:ae:ce:34:8b:46:0e:85:49:83:ef:2b:
4b:eb:48:8e:6e:b5:14:b2:00:8e:02:d5:a7:99:d8:
f3:dd:46:ed:dc:9f:78:4f:b6:08:ef:ef:66:3c:cf:
1f:91:83:ee:c7:d9:08:09:8b:99:33:6d:3c:70:fe:
97:04:e6:7c:1c:3b:6c:db:c1:f0:5f:15:e1:b3:77:
59:91:b3:17:81:4b:97:9e:c7:61:c7:55:e2:19:1d:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:06:A7:E1:BE:E4:74:36:9A:E8:91:B3:E6:34:7A:15:49:06:AD
X509v3 Authority Key Identifier:
keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5a:81:d8:0d:51:5d:16:b9:80:b5:68:00:f3:0a:53:49:09:
bd:28:14:60:a8:57:2b:2a:25:72:61:92:7d:be:9c:65:df:4a:
21:3c:28:02:31:b6:d6:eb:ff:e2:fd:95:48:39:6f:99:00:e8:
57:b1:3b:df:55:21:db:35:85:e6:64:b5:4e:59:69:2b:9b:d5:
41:d9:5b:ac:94:f4:da:0a:bc:d4:a1:34:10:9c:0f:c5:47:44:
1b:df:cd:ae:a9:92:88:79:ed:18:75:07:c2:aa:71:da:68:33:
d3:8b:3b:41:6a:b4:d9:f1:4c:71:5b:28:cc:f9:a3:c7:38:bc:
62:23:a8:22:fa:9b:a6:ad:d7:0b:e5:7c:97:5e:0b:24:85:00:
aa:dc:3d:1b:db:3a:e7:2e:9c:73:94:7d:7b:da:31:b8:83:f5:
e0:b8:76:7f:69:94:94:f2:90:1a:86:d2:90:64:82:6b:d1:0d:
3d:84:dd:0e:37:00:86:ec:f4:2d:a8:35:0f:b6:6e:78:c2:89:
4c:ed:eb:73:6d:be:72:b4:43:7b:08:e7:e6:e5:42:be:e4:30:
7d:d2:dc:16:3d:3b:12:d0:4e:39:58:f3:08:52:b6:5c:3c:93:
a4:f9:30:af:6e:d0:3b:4c:df:46:4c:bd:19:e6:c8:98:2a:84:
71:ab:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:41 2026 by rpki-client