
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json)
Hash identifier: al7lOyiKHbmSvJxDk+mQztl+74Endv4zkez4dtUkcuU=
Subject key identifier: 08:3F:2C:02:C2:FD:09:86:A1:18:38:34:17:4E:42:3F:40:74:EA:46
Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
Manifest number: 0213
Signing time: Wed 25 Mar 2026 02:14:53 +0000
Manifest this update: Wed 25 Mar 2026 02:14:52 +0000
Manifest next update: Wed 01 Apr 2026 02:14:52 +0000
Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: +Wu64O90MHqS4s7vcW91/BvhA0uQ1ZC4akCtPO9I/6s=)
2: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: weDayyeYutvx0b8e1SLUbhE0mFruNtfvUzk0Kx4AkzY=)
3: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: hT0A2KRW/3QOLTyxBn8Un7aA6iluT3rc/l0TDSw8688=)
4: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: d03oC9NyvqRx8U/l5SE7fqdhkjTewkYgCSF6lgvXCMc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl
rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Validity
Not Before: Mar 25 02:14:52 2026 GMT
Not After : Apr 1 02:14:52 2026 GMT
Subject: CN=69c3451d-dee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:3f:dd:51:f8:fb:2d:1f:2a:78:8c:85:a4:
10:f4:78:51:50:44:35:a2:77:f6:20:c0:9d:eb:55:
ce:b0:4c:40:50:46:30:bd:06:01:5f:80:89:63:02:
19:a4:4d:9c:2c:fa:3d:50:d5:50:50:ad:dd:3c:a5:
08:4f:68:e9:66:a7:cc:f4:3b:06:a3:a7:de:29:9f:
d8:09:f6:76:3b:7d:e6:0c:e5:37:1d:c5:9f:b6:f9:
1a:3a:00:27:13:fb:3b:0d:0e:3d:5b:36:86:e9:83:
0d:2b:b6:b8:6f:af:1f:8f:80:6d:01:a2:45:da:af:
cc:d3:8e:72:95:45:c0:f3:90:4a:ce:25:35:c4:a9:
99:b6:6c:ce:64:b9:13:23:5e:d8:1c:c0:bf:af:e2:
42:79:eb:fb:34:02:f0:26:21:ae:5b:90:70:54:6b:
61:f6:05:ac:21:fb:3e:24:77:42:e8:5f:67:1c:ee:
58:94:71:8f:c1:ea:68:46:12:99:4b:58:26:06:4e:
20:37:2e:88:29:c1:08:83:2b:26:45:ff:39:71:aa:
64:44:c6:34:cd:84:1c:58:7e:e0:47:f8:41:42:4d:
6e:21:34:8f:6f:07:76:b2:34:21:2c:86:f2:5b:61:
03:b9:19:17:c8:18:53:a7:1c:77:39:21:d8:40:1e:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3F:2C:02:C2:FD:09:86:A1:18:38:34:17:4E:42:3F:40:74:EA:46
X509v3 Authority Key Identifier:
keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:eb:bb:ab:a2:1c:4d:92:e0:a1:98:f5:ff:9d:dc:5d:13:54:
8d:d8:a3:07:53:a6:d6:3a:3a:fd:7c:67:42:04:5e:61:72:d0:
af:7b:1c:05:45:a6:1c:fd:0b:5f:cf:37:40:92:1e:5f:13:b0:
85:84:01:63:db:9a:8a:06:27:49:02:33:76:40:4a:b8:21:01:
a1:66:43:71:9c:d0:d4:47:76:da:2f:ba:b4:00:29:54:67:3e:
63:7f:92:3d:b7:8b:3b:9c:a7:48:97:79:a6:11:19:b2:f2:af:
6b:ec:2f:c4:55:66:98:04:c8:47:e3:81:bf:ef:a6:67:6e:67:
fb:7e:b0:5e:63:7e:fd:1f:0c:94:bc:f0:df:06:1b:2a:14:e9:
a6:7d:b9:bf:52:ab:01:a3:f7:79:e3:6a:6f:1e:54:de:b4:55:
b9:a1:eb:29:1a:23:34:8c:8d:51:ac:f2:c6:f2:64:69:1a:78:
07:30:05:73:82:e4:29:b1:97:57:60:bb:96:ff:ee:77:3a:58:
b2:2b:9d:9f:aa:7d:d2:82:6d:aa:c8:77:83:77:6b:c0:26:29:
45:75:98:a6:fb:0a:b4:79:cd:15:f8:26:e0:1f:f4:4e:2d:66:
dd:3e:0c:05:6d:94:29:22:c3:63:6a:28:86:fb:ce:bc:45:52:
1d:fd:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:02 2026 by rpki-client