
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json)
Hash identifier: RqaYRtKooze85A6z6WDzIprUqQ4OHQ4fyQvjv8HAAqI=
Subject key identifier: 26:01:27:95:E6:8B:77:13:6C:76:BA:47:69:7B:BB:80:93:9E:FD:81
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 321698CAA0C66ACBD9D36B1C01B5DAF7A4429256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
Manifest number: 0840
Signing time: Mon 02 Mar 2026 00:00:01 +0000
Manifest this update: Sun 01 Mar 2026 23:55:01 +0000
Manifest next update: Tue 03 Mar 2026 00:59:01 +0000
Files and hashes: 1: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: 5aJsFTN5WVk2jtdVogk5NRRrHpQ+Tk7PnLOl1z1Mgek=)
2: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=)
3: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=)
4: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=)
5: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=)
6: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=)
7: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: nFZaUBwOUfoVPATlNk3ap16Eq0qCE4edWxVeq94Eur8=)
Validation: OK
Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 00:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:16:98:ca:a0:c6:6a:cb:d9:d3:6b:1c:01:b5:da:f7:a4:42:92:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Mar 1 23:55:01 2026 GMT
Not After : Mar 3 00:59:01 2026 GMT
Subject: CN=26012795E68B77136C76BA47697BBB80939EFD81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a6:a8:e2:ca:b7:bc:bf:27:1d:d7:b3:66:4d:
bf:39:5a:59:cd:cf:53:f2:a0:df:69:fb:9d:61:5f:
5d:60:af:a2:d0:63:71:dc:aa:38:28:d5:f2:14:b6:
3c:ff:7f:9d:d4:47:c5:96:1f:b3:b5:e3:7f:1c:a9:
4e:7d:b4:51:66:98:f4:1d:d8:d8:02:9d:96:23:40:
7e:e4:77:d0:24:cc:38:f1:4b:dd:fc:41:51:ff:86:
c1:8b:e7:d7:20:24:88:8b:a5:e4:ba:ed:b1:9a:06:
3b:e4:d6:6e:e7:9c:4e:80:87:e2:68:d9:6b:44:db:
56:b8:63:9d:39:26:27:3b:a9:53:92:f2:24:5f:e5:
6a:60:ec:0f:e4:a4:f0:7e:1a:cb:09:56:a6:56:ec:
0f:f0:6e:3f:c4:90:b9:59:31:81:0d:11:2d:e1:08:
41:73:23:aa:ed:f8:97:b6:00:38:6d:bc:72:33:3f:
b8:11:60:3d:64:5f:59:4b:2c:db:5c:92:98:f4:8c:
92:d1:ae:36:98:6a:44:69:ca:49:2e:6a:66:79:65:
36:c2:fe:f6:a9:c8:72:13:7d:af:14:88:5b:9d:be:
cc:2f:31:41:bd:17:8b:66:97:04:9b:e7:20:a6:4a:
78:2b:2c:f5:32:1c:f8:9b:64:9f:51:d0:50:34:d7:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:01:27:95:E6:8B:77:13:6C:76:BA:47:69:7B:BB:80:93:9E:FD:81
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:15:a4:5c:1d:1d:f8:55:1d:7f:be:2e:13:3e:1e:d3:7d:d2:
09:fe:61:fe:9a:92:dd:7d:56:4c:ec:8d:56:d6:5b:4e:2c:c8:
a5:41:7b:de:27:af:b4:01:64:f4:c8:7f:56:2f:08:cb:3b:e3:
83:78:72:47:ae:a9:fd:b5:28:0a:a7:7d:8e:c5:ef:23:0f:67:
a5:33:57:9d:86:49:51:e7:ca:76:00:28:00:e3:9c:be:21:b0:
e0:b7:f7:a5:df:b9:8f:8c:fc:3d:1d:24:2d:6c:4e:0b:41:8b:
3b:10:42:07:21:46:87:32:8a:f0:36:3a:d3:23:25:55:91:dc:
cc:70:72:11:3c:1d:30:90:ae:36:9f:c3:ec:04:fe:55:51:72:
0d:f2:38:4d:d1:8f:9f:e3:a9:e0:d4:80:90:26:11:d4:46:8c:
b9:36:79:e7:e7:5c:ee:cb:0a:de:22:8a:f9:ab:07:c1:82:75:
6c:7a:f7:c7:3c:10:52:81:7c:d3:69:be:14:16:ac:3e:17:02:
7a:27:bc:b4:40:fd:b8:e7:e3:7e:3f:02:b4:db:80:aa:bf:33:
b9:b8:28:bd:1e:f5:5f:24:0f:cf:e9:f5:58:da:e9:04:c9:f8:
45:54:cc:30:72:49:48:14:0d:89:95:7f:a1:38:d7:33:5c:16:
43:a9:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:28 2026 by rpki-client