
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json)
Hash identifier: 9VN8KG6x846T2wHu9DLbsKCzroxbcpUvqEriNH4SAck=
Subject key identifier: 77:D2:E9:46:15:0D:01:B6:9E:40:1B:EF:9F:4F:98:43:38:13:48:ED
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
Manifest number: 01C5
Signing time: Fri 27 Mar 2026 03:17:01 +0000
Manifest this update: Fri 27 Mar 2026 03:17:01 +0000
Manifest next update: Fri 03 Apr 2026 03:17:01 +0000
Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: 4WsFiRuIpiq3P+SERO0Xm/DKD37gbr6Tw+L94RB1KgA=)
2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: zNUB+vibuX3nQWmpbN4PBwL7Sq5HwZSp7xD/bsaKx34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Validity
Not Before: Mar 27 03:17:01 2026 GMT
Not After : Apr 3 03:17:01 2026 GMT
Subject: CN=69c5f6ad-1913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:35:31:96:57:c7:58:ab:57:17:1a:f3:23:
cd:b4:09:ee:06:b5:11:5f:d3:68:95:62:b1:81:5a:
8e:2b:c6:3d:df:e7:5b:ad:7f:78:02:dd:4a:37:f4:
5c:0e:1e:b2:30:73:33:22:d6:38:87:53:dc:82:ed:
ea:bd:f3:59:79:7f:52:8c:8b:57:80:8d:18:31:d6:
1a:c9:f0:3a:f4:92:30:01:22:0b:33:df:73:b4:ff:
d8:a5:fb:20:ae:8a:19:79:a3:94:1c:5d:93:82:10:
16:cc:fd:b0:09:aa:a3:60:9d:48:d5:31:6c:64:3c:
21:41:a6:a5:9f:1e:ce:f9:9d:ad:aa:af:db:ed:03:
ec:3f:6f:1d:21:ce:b1:2f:b4:dd:87:bd:c3:cb:2d:
48:a3:1e:b6:8e:92:f0:76:b7:89:82:d8:32:2d:5d:
5b:9b:2f:1d:20:f8:a3:e1:a7:8f:d8:19:fb:d2:84:
40:54:16:e3:43:60:1a:31:b7:f0:75:99:98:e8:44:
bd:21:18:d2:5e:02:ac:23:cd:73:f0:ba:59:e9:c3:
db:19:90:84:79:6c:9c:6e:af:f2:ac:ca:d1:46:8e:
3a:9a:81:e7:53:05:10:f2:1d:30:9a:c9:3a:4b:16:
fe:1d:47:2d:46:f8:1c:03:5d:02:0d:f4:8e:e4:76:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D2:E9:46:15:0D:01:B6:9E:40:1B:EF:9F:4F:98:43:38:13:48:ED
X509v3 Authority Key Identifier:
keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:80:5b:fd:a8:35:99:a6:bb:8d:c9:93:f9:54:88:0c:d1:34:
1c:fe:17:ea:5d:1f:9b:7b:09:21:af:8d:13:01:04:5e:b5:16:
68:9d:c9:bc:6e:c4:f7:8b:e8:73:db:90:3e:7a:05:b6:c8:45:
cd:8c:a3:c8:50:9a:10:1b:93:35:48:6b:15:0f:26:41:51:26:
fd:a7:e4:8f:da:57:6b:7d:c3:f5:67:ad:d7:a4:2d:5c:8e:a1:
71:a6:10:c9:91:cc:04:a7:0e:c2:fc:2c:9a:0c:94:7d:0d:33:
20:b3:9b:cd:b9:d2:d5:fb:6e:21:c0:d4:b7:5e:b1:6c:07:92:
1f:1c:31:49:cf:97:85:d5:96:bd:e2:4a:0c:01:b5:bb:db:96:
9d:76:20:84:24:8c:8d:92:c1:12:79:cb:fd:8b:25:5e:ab:84:
1a:ba:01:a9:22:b0:f7:74:a9:41:ad:13:d5:ff:7d:44:16:3f:
12:e7:3e:96:d1:18:0a:d7:f0:39:03:54:6c:2d:6f:a3:07:16:
ab:79:35:6b:81:d8:fe:ca:2c:1e:39:16:be:79:8c:0d:c1:21:
48:e9:17:92:27:82:b6:0d:9c:e4:76:85:53:e4:5a:c4:ed:24:
fd:4d:26:5c:c9:68:12:81:de:fb:e0:5d:77:f9:5b:27:ee:e6:
30:46:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:50 2026 by rpki-client