
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier: wl+dCCz+3rPcBQ5us7NgcYoy39AP8fpVlYGof3hlE5c=
Subject key identifier: 60:F1:41:85:E1:46:61:E6:22:F6:9B:AC:F7:A6:36:00:C9:EC:F1:52
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial: 0296
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number: 027A
Signing time: Wed 25 Mar 2026 01:30:19 +0000
Manifest this update: Wed 25 Mar 2026 01:30:18 +0000
Manifest next update: Wed 01 Apr 2026 01:30:18 +0000
Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: H+8y/Adideh89TOBJ3bJwpN3+1mlMylMGfwAdnEZbFU=)
2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=)
3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662 (0x296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Validity
Not Before: Mar 25 01:30:18 2026 GMT
Not After : Apr 1 01:30:18 2026 GMT
Subject: CN=69c33aaa-605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:1c:8f:66:7f:a0:dd:2d:bc:dc:6b:68:cf:
a5:79:8f:df:bb:67:d0:47:87:0b:83:09:03:91:49:
cf:ba:fd:ba:41:8d:d9:6d:93:ee:4a:87:68:b1:a1:
3a:a9:d1:53:a7:79:70:60:73:2d:84:f8:f1:3a:97:
43:0b:11:79:35:08:e6:f6:f5:9f:14:7d:f1:06:8c:
7c:bb:26:60:4a:69:6b:44:02:42:18:98:bc:b0:a1:
4f:d7:00:24:0c:0b:5c:de:95:e6:70:ee:76:3b:16:
23:d8:e9:27:b0:73:a0:90:60:9c:83:a7:47:ef:a6:
66:7a:f7:6a:c6:d5:57:3b:18:2c:a1:ef:83:dd:1e:
e4:bb:43:e8:44:2e:a7:01:7d:92:3a:c8:5c:18:fb:
f2:41:b9:ac:31:09:1e:52:fd:ca:bf:15:9c:80:18:
88:6d:5b:a9:46:ed:8e:da:54:17:98:26:1a:ff:e3:
35:f1:fd:04:dd:36:fe:56:0e:e7:7d:02:26:58:7b:
45:d1:f8:13:bb:46:80:31:e6:5d:37:bb:e4:65:a4:
61:76:8f:64:07:44:90:9b:85:b2:19:13:1f:24:1e:
9d:d1:9d:79:e7:db:80:f0:08:81:89:72:e4:7b:3f:
bb:51:7d:6d:66:22:c5:3b:67:d5:76:64:0f:91:79:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F1:41:85:E1:46:61:E6:22:F6:9B:AC:F7:A6:36:00:C9:EC:F1:52
X509v3 Authority Key Identifier:
keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2c:a0:05:09:75:5e:c4:a0:11:d2:46:1a:af:a3:c6:82:fc:
a6:af:da:69:e2:54:03:c3:73:19:22:ef:cf:06:05:d7:92:58:
35:25:40:85:c8:36:f3:73:5a:f3:2f:ee:9a:7f:5e:1b:d3:cc:
7f:3d:34:79:46:ea:81:87:b0:d4:ec:3b:2d:17:26:cb:e1:48:
64:03:c1:af:fb:ce:36:4f:88:21:46:de:84:4d:54:0b:96:76:
56:0b:d7:1d:f7:b3:3b:e1:3d:9b:31:28:3f:63:40:26:57:a1:
5f:eb:e6:d3:e3:b7:09:f1:53:3a:d3:73:41:6a:ec:5c:f6:78:
e8:36:15:f0:52:29:61:98:6d:aa:45:1a:fd:08:c4:a0:e8:4d:
07:7f:9c:13:38:61:5b:28:00:6d:c1:6f:cc:36:bd:3e:db:1b:
5b:8c:83:ef:a2:75:9c:bb:55:80:e9:65:2f:a6:4d:3f:ed:44:
2b:45:61:d9:a1:b4:3e:bc:1a:20:dc:f9:7a:ea:0c:2a:60:f8:
f7:d5:7e:ba:f3:09:48:9f:6a:da:e4:88:ac:14:90:63:cb:d0:
40:1a:3b:9f:36:c5:df:65:08:38:25:a7:76:b6:4a:a7:82:1c:
e9:e1:11:e5:4f:bf:a9:ec:a5:05:6a:de:9f:e8:0f:f4:c0:fe:
cc:71:e0:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4
QkQ2QUQ4MUYwHhcNMjYwMzI1MDEzMDE4WhcNMjYwNDAxMDEzMDE4WjAYMRYwFAYD
VQQDEw02OWMzM2FhYS02MDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1HQcj2Z/oN0tvNxraM+leY/fu2fQR4cLgwkDkUnPuv26QY3ZbZPuSodosaE6
qdFTp3lwYHMthPjxOpdDCxF5NQjm9vWfFH3xBox8uyZgSmlrRAJCGJi8sKFP1wAk
DAtc3pXmcO52OxYj2OknsHOgkGCcg6dH76ZmevdqxtVXOxgsoe+D3R7ku0PoRC6n
AX2SOshcGPvyQbmsMQkeUv3KvxWcgBiIbVupRu2O2lQXmCYa/+M18f0E3Tb+Vg7n
fQImWHtF0fgTu0aAMeZdN7vkZaRhdo9kB0SQm4WyGRMfJB6d0Z1559uA8AiBiXLk
ez+7UX1tZiLFO2fVdmQPkXks9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGDxQYXh
RmHmIvabrPemNgDJ7PFSMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3
RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx
b2gxZzR0d3lxYmlMMXEyQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfSygBQl1XsSgEdJGGq+jxoL8pq/aaeJUA8NzGSLvzwYF15JYNSVAhcg283Na
8y/umn9eG9PMfz00eUbqgYew1Ow7LRcmy+FIZAPBr/vONk+IIUbehE1UC5Z2VgvX
HfezO+E9mzEoP2NAJlehX+vm0+O3CfFTOtNzQWrsXPZ46DYV8FIpYZhtqkUa/QjE
oOhNB3+cEzhhWygAbcFvzDa9PtsbW4yD76J1nLtVgOllL6ZNP+1EK0Vh2aG0Prwa
INz5euoMKmD499V+uvMJSJ9q2uSIrBSQY8vQQBo7nzbF32UIOCWndrZKp4Ic6eER
5U+/qeylBWren+gP9MD+zHHgZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:57 2026 by rpki-client