
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
File: _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json)
Hash identifier: 6vOecDa8tsipdRGJZ2MwYHIrYCF13xKqa8goegB8B6k=
Subject key identifier: E1:2D:08:26:95:CC:3A:C8:7D:91:FA:86:79:1B:48:B6:72:FF:3B:2A
Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
Certificate issuer: /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
Manifest number: 0286
Signing time: Wed 25 Mar 2026 01:15:05 +0000
Manifest this update: Wed 25 Mar 2026 01:15:04 +0000
Manifest next update: Wed 01 Apr 2026 01:15:04 +0000
Files and hashes: 1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: O0Jibs/farVQjXGBs8owZH1A88Llmi16ux3PWvYDstw=)
2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: NXGbpmoMOzAZwcgSz2AYwCb8kwzGpslvQ3JE0B3JbOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Validity
Not Before: Mar 25 01:15:04 2026 GMT
Not After : Apr 1 01:15:04 2026 GMT
Subject: CN=69c33719-0a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:a1:42:b8:74:63:84:60:70:48:21:93:8b:
c5:ec:0a:2f:b5:f3:46:3e:9a:d4:d6:08:db:b2:db:
2d:a5:54:53:96:3e:aa:10:a5:4c:04:21:1a:df:d6:
aa:c9:e7:ea:9b:9c:ab:26:9d:62:4e:3b:9a:a4:55:
63:87:03:8a:57:36:4f:09:df:69:51:d3:07:ff:0b:
71:6f:7d:cf:98:1a:1a:cd:d7:50:32:b6:1d:76:93:
7d:9d:b4:66:29:87:bf:df:93:94:a4:e7:b8:a4:e5:
f8:06:36:c4:3a:fd:9e:fb:d3:43:92:21:9d:48:28:
e0:c1:60:59:31:dd:55:7c:ce:41:db:6f:18:87:28:
bc:b7:9e:67:7e:22:9f:cb:87:69:d1:20:ee:87:55:
7c:61:af:f6:1c:d7:00:a0:84:2c:ec:46:88:63:f8:
64:06:4e:b2:a1:d2:f3:25:43:59:3c:70:37:09:23:
81:74:cf:c4:01:4a:64:35:45:29:fa:bc:51:93:b7:
15:47:5e:72:11:7c:2c:1c:35:72:18:87:7b:6a:a9:
66:3d:7a:40:00:f7:f1:e4:d4:ab:c2:12:77:37:01:
62:09:76:65:59:a2:ef:49:9f:43:f1:51:b5:7e:00:
5d:2c:42:9e:6a:21:c9:68:91:ec:0e:14:41:14:c5:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:08:26:95:CC:3A:C8:7D:91:FA:86:79:1B:48:B6:72:FF:3B:2A
X509v3 Authority Key Identifier:
keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:b9:5c:c3:13:9f:7c:1b:9d:f2:c4:12:14:25:f2:e2:5d:6e:
d7:81:a4:c8:50:45:b6:8e:d2:e4:2d:ad:8f:3c:7d:ac:81:d1:
7c:7f:a8:66:b9:c2:60:6d:9a:da:59:48:ca:c5:70:7a:37:d7:
41:fe:e0:76:cb:1c:62:2f:9d:2e:84:08:8b:02:3c:07:9b:1e:
66:c2:8a:ac:1d:b4:15:42:12:47:18:42:cb:59:f6:4c:c8:1d:
80:2f:d9:7e:b6:d9:32:de:a7:74:5d:59:dc:5f:2d:52:aa:8d:
40:3c:e9:3f:4c:41:5c:01:d8:60:53:b2:90:fc:dc:d4:27:26:
29:aa:41:fd:7f:4a:e1:76:12:8e:cb:0b:7d:b4:de:a9:fe:be:
cf:82:7d:35:fc:48:74:15:2b:a3:dd:81:fd:69:c2:99:b1:a7:
29:08:fe:67:48:29:ff:94:2b:77:e3:42:d9:45:62:65:81:89:
9c:2c:29:01:92:b4:c5:9f:a4:ea:66:6c:d9:53:ce:0b:5a:b5:
98:89:95:d8:72:e2:2f:46:4e:88:b3:05:5e:09:2c:bb:ee:26:
b6:46:fa:c3:1f:7b:60:7e:ae:ba:e1:39:e2:32:16:f5:87:39:
8b:85:cc:13:e3:c9:d3:9b:8a:c9:f8:6b:e3:73:35:17:8b:0a:
ee:b2:fa:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVDQzAxMTAvBgNVBAUTKEZFMkUzNTJCNDJGNzRGMTBENTc2ODM1MzAzQTJFOTc4
RTFDNDM3QjYwHhcNMjYwMzI1MDExNTA0WhcNMjYwNDAxMDExNTA0WjAYMRYwFAYD
VQQDEw02OWMzMzcxOS0wYTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwryhQrh0Y4RgcEghk4vF7AovtfNGPprU1gjbststpVRTlj6qEKVMBCEa39aq
yefqm5yrJp1iTjuapFVjhwOKVzZPCd9pUdMH/wtxb33PmBoazddQMrYddpN9nbRm
KYe/35OUpOe4pOX4BjbEOv2e+9NDkiGdSCjgwWBZMd1VfM5B228Yhyi8t55nfiKf
y4dp0SDuh1V8Ya/2HNcAoIQs7EaIY/hkBk6yodLzJUNZPHA3CSOBdM/EAUpkNUUp
+rxRk7cVR15yEXwsHDVyGId7aqlmPXpAAPfx5NSrwhJ3NwFiCXZlWaLvSZ9D8VG1
fgBdLEKeaiHJaJHsDhRBFMWZcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEtCCaV
zDrIfZH6hnkbSLZy/zsqMB8GA1UdIwQYMBaAFP4uNStC908Q1XaDUwOi6XjhxDe2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNDMC9DRkE3OUYxQTUw
M0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4RFZkb05UQTZMcGVPSEVO
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19pNDFLMEwzVHhEVmRvTlRBNkxwZU9IRU43WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUNDMC9DRkE3OUYxQTUwM0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4
RFZkb05UQTZMcGVPSEVON1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOLlcwxOffBud8sQSFCXy4l1u14GkyFBFto7S5C2tjzx9rIHRfH+oZrnCYG2a
2llIysVwejfXQf7gdsscYi+dLoQIiwI8B5seZsKKrB20FUISRxhCy1n2TMgdgC/Z
frbZMt6ndF1Z3F8tUqqNQDzpP0xBXAHYYFOykPzc1CcmKapB/X9K4XYSjssLfbTe
qf6+z4J9NfxIdBUro92B/WnCmbGnKQj+Z0gp/5Qrd+NC2UViZYGJnCwpAZK0xZ+k
6mZs2VPOC1q1mImV2HLiL0ZOiLMFXgksu+4mtkb6wx97YH6uuuE54jIW9Yc5i4XM
E+PJ05uKyfhr43M1F4sK7rL6eQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:07 2026 by rpki-client