
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
File: o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json)
Hash identifier: Qx6jgVwu9nGdZtyjSytJp8RU6FbrkTJK8S3QLC91E/U=
Subject key identifier: 8D:B3:D2:F9:5F:E3:54:E9:FA:9B:AF:5A:AC:68:C7:6B:98:29:EE:0C
Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
Manifest number: C5
Signing time: Sun 01 Mar 2026 08:05:38 +0000
Manifest this update: Sun 01 Mar 2026 08:05:37 +0000
Manifest next update: Sun 08 Mar 2026 08:05:37 +0000
Files and hashes: 1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: kakd/XWhWt7q47KGoNoiQeEWRE+8wW6zef7rvgaBlxU=)
2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: VpW1ss/FISZUa4YxltnTH36k8qN9hgV+vDjB+vqrTUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Validity
Not Before: Mar 1 08:05:37 2026 GMT
Not After : Mar 8 08:05:37 2026 GMT
Subject: CN=69a3f352-cf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:a9:c1:62:fd:fa:cc:41:51:b6:6c:f1:79:
fa:be:85:a5:e0:07:e9:f8:a9:20:0d:45:a5:c8:01:
3f:a6:c1:51:aa:cd:b8:3b:b0:0f:05:15:69:fe:02:
cf:6c:35:0a:d8:19:f9:3f:00:c8:35:c8:84:a8:5e:
19:b6:5e:97:a2:c6:90:12:fd:25:45:11:53:4b:34:
bd:21:0c:87:2c:79:d6:ba:b2:91:91:0f:0a:df:34:
d5:a5:c7:a0:b9:20:5b:42:5a:f3:db:d9:98:a4:3b:
33:40:48:7f:2d:94:82:a2:16:5f:a0:74:08:cf:f3:
2d:29:80:82:de:88:6a:72:cf:e3:60:7b:a8:6b:9e:
61:bd:4e:5c:e1:96:20:26:a9:bc:1d:3e:41:5b:0a:
79:c6:75:fa:17:f0:de:31:d5:61:83:de:d5:a7:69:
96:e2:14:32:56:cb:01:e2:2a:92:da:4f:92:8b:29:
f1:1d:15:64:1b:38:fc:30:6c:6f:15:0f:8d:92:5a:
02:83:f2:fc:53:40:ae:18:b4:16:8b:66:df:ef:a5:
7a:ef:32:18:11:d2:60:4a:a9:1e:35:3a:f0:75:95:
ad:13:8d:ae:28:80:61:cf:29:4f:cb:44:46:c8:23:
2c:a4:39:55:d0:36:ad:72:93:dc:1f:11:bb:f4:de:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B3:D2:F9:5F:E3:54:E9:FA:9B:AF:5A:AC:68:C7:6B:98:29:EE:0C
X509v3 Authority Key Identifier:
keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3a:d6:d9:7f:09:cc:61:ec:20:03:e7:13:70:b6:c0:cf:f0:
13:2b:aa:c8:09:79:fa:cb:80:0d:da:01:bf:35:2a:ca:f0:ab:
c4:bb:5c:bd:03:a2:8f:22:a9:fc:eb:47:10:ee:f2:8e:98:7d:
b6:a8:01:82:98:0f:6c:98:0c:f2:5b:e4:51:c8:2a:99:79:b5:
34:0a:4e:94:fc:de:63:ee:d7:a1:01:fa:ac:ba:87:0f:c2:f5:
15:01:89:62:06:c6:76:ef:1d:61:15:0b:87:16:ea:da:2a:d5:
2e:17:11:e7:26:81:73:78:72:2f:31:1a:71:88:c4:37:21:ca:
0d:c5:c2:da:e6:ab:1c:32:76:ed:f1:d0:df:68:b9:0a:03:b6:
08:4c:b4:1b:b1:1d:64:0b:7f:a2:82:9d:2a:bc:a1:89:f2:c6:
a8:d9:ea:9d:86:77:f0:a9:68:d5:8e:0c:c6:a6:e1:7b:85:e7:
99:41:1b:32:b9:a2:47:b2:ca:3f:8f:ca:8a:95:f4:1d:56:25:
d8:b8:c8:1f:53:63:60:49:b9:70:f1:26:b0:6d:7e:74:98:bb:
b9:b1:bd:75:b1:8d:56:92:de:3c:1a:43:c3:16:54:67:dc:0d:
99:3a:bb:97:30:bd:63:a4:b6:ff:31:13:4f:b1:a9:01:71:28:
f2:2a:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:53 2026 by rpki-client