
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
File: AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft (raw, json)
Hash identifier: Zbjbc1edc59XfJd6XE2ygRM6LJAMfWIeiiSlEN9STTc=
Subject key identifier: 43:7E:64:A7:B0:C8:89:8D:4D:AA:64:7F:59:5B:B5:9C:E4:B2:96:35
Authority key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
Certificate issuer: /CN=A91FFBAF/serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
Manifest number: 38
Signing time: Sun 01 Mar 2026 09:55:54 +0000
Manifest this update: Sun 01 Mar 2026 09:55:54 +0000
Manifest next update: Sun 08 Mar 2026 09:55:54 +0000
Files and hashes: 1: AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl (hash: 7kmfPe584AhVdUcfOT3E/t+8rxhqZXoQ19eFB1yG3wo=)
2: C7200E0EC37D11F09171F578C4F9AE02.roa (hash: E6omI9lqZzM/PwLCS0UMdFdpwNRWOrVUdR04/HJ2Es8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Validity
Not Before: Mar 1 09:55:54 2026 GMT
Not After : Mar 8 09:55:54 2026 GMT
Subject: CN=69a40d2a-aa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:f7:27:a9:95:70:89:a9:d1:b9:cd:d3:c2:
e3:50:0d:72:8a:84:79:b3:60:64:28:52:0f:0d:f6:
e0:70:ce:c5:de:24:94:b9:13:0d:03:0e:8c:23:29:
c7:0c:41:6a:5e:98:5a:04:d4:d5:cf:32:1a:63:b6:
35:76:ee:93:3b:20:9f:ab:cc:13:79:32:02:0e:b7:
99:24:3b:9f:63:24:12:83:3d:81:df:0e:a6:a3:d3:
d5:89:cc:b6:cb:77:92:e7:c2:af:f8:f6:05:10:a4:
a6:6e:b7:97:13:fb:ca:f5:c0:24:2e:18:69:a9:3d:
a6:91:7c:84:3e:11:c2:e6:37:db:a3:19:17:fd:c8:
bf:04:84:ff:52:4c:c9:51:d6:0a:a4:f0:6e:00:00:
24:b1:13:4a:b7:a9:16:5b:73:48:de:41:71:52:02:
87:90:e1:7b:a3:e9:ed:0f:72:f5:ea:e9:00:33:8e:
6a:0f:0c:19:8e:0b:22:49:88:7d:3f:7c:c3:72:e7:
8c:47:cc:a2:3b:e1:ec:b7:04:30:ac:aa:89:c9:3e:
cf:7d:b4:d1:f8:5a:f0:2b:8b:23:bc:67:c9:4f:c5:
00:a5:b4:19:1c:29:d9:69:11:46:c4:6e:1f:ea:48:
7d:a3:14:b1:cb:2d:6c:e8:9d:fb:cb:76:52:db:c3:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7E:64:A7:B0:C8:89:8D:4D:AA:64:7F:59:5B:B5:9C:E4:B2:96:35
X509v3 Authority Key Identifier:
keyid:00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:4f:8a:16:35:37:ab:20:e4:e4:c2:ae:6d:87:08:02:a4:81:
0a:b4:00:a7:46:a3:c7:16:30:42:af:5c:74:f6:4f:49:43:c4:
08:95:dd:03:af:ae:5d:ad:00:3a:ee:85:4c:d2:94:c6:1b:0b:
a1:b4:77:ed:37:82:a4:88:79:62:61:67:5b:c5:54:5a:95:c1:
42:93:4d:60:df:01:f4:bf:e6:6c:c1:15:13:14:26:f1:c2:18:
b3:a1:97:83:07:e1:68:69:b9:10:c7:2f:8d:c3:5d:2a:7e:9d:
e6:d3:e1:67:57:e2:49:e9:66:8d:7d:d7:2b:43:a9:9b:69:1a:
1c:89:cb:af:de:04:73:c6:85:89:7c:12:dc:61:3d:0d:59:3b:
04:24:a4:ed:70:fa:9a:09:a2:df:ec:30:a4:0a:1e:a7:3b:3e:
36:79:36:c3:d9:b7:ba:0c:46:8e:65:e3:11:25:79:8c:a7:01:
af:bf:ea:ca:66:24:02:0a:4c:1c:53:4c:2b:d5:cb:2e:33:cd:
26:49:e5:60:76:75:9d:6f:60:b9:d7:11:a7:70:a3:f3:36:e8:
25:d4:da:2d:30:60:29:38:e7:0e:ff:f6:d3:6c:0e:ab:1a:05:
9f:76:fd:42:e2:da:e0:be:2a:8f:38:45:8c:0f:e9:99:84:f7:
c2:3a:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:53 2026 by rpki-client