
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json)
Hash identifier: 5uwfN4Sk2+youbsK/1BZjPVvTmYzXBBMYxFMtoDqTo0=
Subject key identifier: 8B:BB:B7:26:6A:34:0D:FB:FE:B5:52:06:1B:98:11:F1:AC:63:E8:BC
Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Certificate serial: 0CC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
Manifest number: 0CB5
Signing time: Sat 28 Feb 2026 18:34:04 +0000
Manifest this update: Sat 28 Feb 2026 18:34:04 +0000
Manifest next update: Sat 07 Mar 2026 18:34:04 +0000
Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: Mf2jtdGalkflomDAXbK84SJW+krAK6NwY3DwNVkUW/Y=)
2: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: oiRTxf178GSVajMFJOV88czGN0g9LsEQwe3fVsmhNYs=)
3: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: I8xUhuaKZwm6lPAAKATroItwpWXb2vxsxqVz/BIgbyE=)
4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: MSG4IEJD21Lg46cXlyVsJXQNoEWSJs0ZdoCdo0HPe4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3272 (0xcc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Validity
Not Before: Feb 28 18:34:04 2026 GMT
Not After : Mar 7 18:34:04 2026 GMT
Subject: CN=69a3351c-14f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:e3:ac:7a:65:05:8b:38:b8:6d:d2:84:eb:
6e:6c:62:bd:60:3f:1d:8c:0b:50:31:0e:64:40:c4:
63:77:a9:81:82:93:59:e9:9b:2d:60:a9:f8:19:1e:
ee:25:64:a4:d6:e5:9b:b5:6b:2e:cc:07:10:6b:a8:
5d:37:09:f1:ba:e3:e5:9b:86:d9:d8:ef:f2:b0:03:
3b:4d:67:e8:61:26:54:c5:73:37:36:3f:55:6b:79:
b7:6c:ba:62:8d:4a:02:4f:15:c8:36:b8:df:01:c8:
fb:68:f3:77:b6:0f:18:32:a1:9f:22:da:ff:f5:30:
44:65:9d:fc:36:70:59:fe:c5:03:eb:66:3f:52:0e:
09:7e:c1:c2:89:f6:5e:2c:a0:5c:a9:70:0d:cd:c5:
89:6a:f4:53:22:e4:ee:ca:9d:08:29:ad:d7:59:4a:
d2:fb:64:e6:b6:63:0d:8d:1c:02:cf:9d:dd:33:a6:
9f:90:58:46:c8:be:af:e9:07:86:14:9d:c0:f5:12:
a4:d8:17:ea:9f:a5:f8:f5:01:1a:0b:5a:23:2e:79:
fc:aa:7c:1e:fa:e8:34:a5:2f:b0:1c:19:27:00:0b:
bf:bc:02:5c:34:65:1d:e6:3f:f4:c8:3f:25:d1:47:
2c:93:b0:30:3e:1b:cc:99:31:2b:a2:a3:94:8a:95:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BB:B7:26:6A:34:0D:FB:FE:B5:52:06:1B:98:11:F1:AC:63:E8:BC
X509v3 Authority Key Identifier:
keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0e:20:0f:67:bb:c9:ae:fa:a0:bc:e0:29:fc:d3:d4:46:87:
e8:55:f5:3f:0e:9f:58:e1:4c:c3:24:45:46:a0:68:d7:17:85:
10:1a:38:f1:f1:8b:a3:51:ba:6c:ab:1b:11:63:a8:ac:b4:df:
b8:60:4f:0f:2a:6e:0b:e5:42:f9:8b:59:b3:a0:98:50:62:9c:
c8:66:9e:e8:cc:d7:67:bf:6c:b3:9f:1e:ea:ba:1c:cd:28:53:
af:4c:d0:e8:fa:fd:56:7a:3c:bc:d2:6f:4e:95:d4:d0:cd:85:
f0:40:31:1e:7f:dc:6b:c9:7b:8a:b9:3e:52:c0:9e:6f:a8:32:
40:64:86:41:6c:ed:ab:35:26:91:53:04:ed:29:ea:81:c1:de:
9f:26:80:a1:52:af:35:4b:fc:fc:22:ad:35:fc:94:72:de:f4:
84:07:55:cd:2e:8a:ff:b2:06:32:26:cc:08:f4:7c:b5:45:4b:
42:dc:1a:99:33:93:98:b3:a9:d8:f6:78:33:ff:7c:b9:77:e7:
ef:a9:a2:8d:e4:f6:6b:ab:f3:62:b7:35:f0:11:93:ba:d2:0a:
24:a1:34:60:8b:59:76:2c:7c:04:d3:96:9d:3b:1c:69:e7:67:
3c:d2:45:bf:7b:96:36:d1:5f:59:d3:6f:8f:f7:53:aa:ed:f4:
8d:5a:5f:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG
RkI1QjczQjEwHhcNMjYwMjI4MTgzNDA0WhcNMjYwMzA3MTgzNDA0WjAYMRYwFAYD
VQQDDA02OWEzMzUxYy0xNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi5/jrHplBYs4uG3ShOtubGK9YD8djAtQMQ5kQMRjd6mBgpNZ6ZstYKn4GR7u
JWSk1uWbtWsuzAcQa6hdNwnxuuPlm4bZ2O/ysAM7TWfoYSZUxXM3Nj9Va3m3bLpi
jUoCTxXINrjfAcj7aPN3tg8YMqGfItr/9TBEZZ38NnBZ/sUD62Y/Ug4JfsHCifZe
LKBcqXANzcWJavRTIuTuyp0IKa3XWUrS+2TmtmMNjRwCz53dM6afkFhGyL6v6QeG
FJ3A9RKk2Bfqn6X49QEaC1ojLnn8qnwe+ug0pS+wHBknAAu/vAJcNGUd5j/0yD8l
0Ucsk7AwPhvMmTEroqOUipWNfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIu7tyZq
NA37/rVSBhuYEfGsY+i8MB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5
RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0
cFN0cElubWtMRXJfdGJjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADw4gD2e7ya76oLzgKfzT1EaH6FX1Pw6fWOFMwyRFRqBo1xeFEBo48fGLo1G6
bKsbEWOorLTfuGBPDypuC+VC+YtZs6CYUGKcyGae6MzXZ79ss58e6roczShTr0zQ
6Pr9Vno8vNJvTpXU0M2F8EAxHn/ca8l7irk+UsCeb6gyQGSGQWztqzUmkVME7Snq
gcHenyaAoVKvNUv8/CKtNfyUct70hAdVzS6K/7IGMibMCPR8tUVLQtwamTOTmLOp
2PZ4M/98uXfn76mijeT2a6vzYrc18BGTutIKJKE0YItZdix8BNOWnTscaednPNJF
v3uWNtFfWdNvj/dTqu30jVpfdQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:33 2026 by rpki-client