
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json)
Hash identifier: kQ9nof9A+yna5siajXh49we2rNMnmixyDLFfu+wEb18=
Subject key identifier: B4:30:55:72:1E:3D:03:14:DA:10:87:25:0F:FF:37:56:9C:A6:99:23
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial: 031B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
Manifest number: 0305
Signing time: Wed 25 Mar 2026 00:57:40 +0000
Manifest this update: Wed 25 Mar 2026 00:57:39 +0000
Manifest next update: Wed 01 Apr 2026 00:57:39 +0000
Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: R3HnWm5EptRX94EPFm+Q++KW5FKisdo6BJXtvXqTMIw=)
2: 97FE22F2DA4B11F0BA2C614F91D3641D.roa (hash: meSaXfy9Mn0t+YNYp1oUPT5CPQbfKIf4ebcPD5fFufY=)
3: F2FD03E4CB3211F08B73F33CC4F9AE02.roa (hash: XbDlXjkT6B/0pKZNJe/T0DRFMQ69K8sgLZCTuOzQfWs=)
4: 1BB90D46DABA11F0A08D9BA06CD3641D.roa (hash: 7sE/4U476Hc/mgcr6agMQHrBpEwfsvBVQ9XVXdE0iPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 795 (0x31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Validity
Not Before: Mar 25 00:57:39 2026 GMT
Not After : Apr 1 00:57:39 2026 GMT
Subject: CN=69c33303-1eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:78:23:14:e8:f5:e8:06:89:16:d1:d7:0d:
8e:2a:62:6d:0a:50:d5:28:39:ff:7f:90:6d:72:ab:
91:31:cb:b5:dd:30:5a:15:cd:16:4e:23:a0:5f:cf:
b7:44:18:c3:bd:12:0a:e3:9a:d9:ba:33:c2:ba:fd:
7a:b5:ee:18:de:08:13:33:76:10:fa:80:1a:31:12:
e3:57:60:39:81:64:3c:ba:34:bd:d0:00:29:8b:15:
2a:0e:a9:82:d6:c1:4f:7b:88:81:1b:78:ec:9a:c8:
2e:06:79:5c:1a:a3:ad:c7:6f:13:2a:55:2d:e0:9f:
7f:5b:f2:fe:6c:6b:d0:f4:25:42:fe:d5:2c:fd:93:
aa:96:20:dc:6b:33:09:a9:8a:59:5d:9c:09:fd:61:
0c:d3:bc:b3:0f:70:3e:36:03:c7:2d:1b:25:f8:24:
4c:9a:51:a5:6b:e6:ac:3d:4d:89:c0:b6:6a:94:46:
e8:f7:32:8a:4c:75:24:e4:84:2e:d9:8d:bd:10:5b:
01:45:68:00:9e:a1:35:31:fa:4a:43:0e:c8:ce:fa:
d3:3f:11:6d:c3:e2:65:2f:3a:74:38:28:4f:25:fd:
bb:3c:5a:d3:8a:01:f1:3f:71:87:2b:76:41:4b:8c:
21:11:a6:d1:e3:df:3d:ee:93:7c:4f:f8:ce:b8:e7:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:55:72:1E:3D:03:14:DA:10:87:25:0F:FF:37:56:9C:A6:99:23
X509v3 Authority Key Identifier:
keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8b:fc:86:22:a4:0b:d8:ab:31:f7:52:21:5c:c1:50:6d:6b:
e2:7b:43:c6:27:55:d9:c3:d1:6b:4c:1f:54:f7:7f:8b:68:ff:
c8:a5:67:dc:39:c3:e8:a2:0f:27:08:9a:fc:d7:5f:73:72:9a:
39:a3:92:77:bd:2b:28:02:ca:7f:5b:97:17:2b:2a:64:92:03:
04:ca:5c:45:4d:58:81:0b:f6:0d:da:10:d1:93:50:f2:6c:c3:
33:54:51:b2:14:99:d3:b5:ba:4b:26:de:c1:1c:e9:a2:9e:d7:
3d:3c:97:d3:45:48:69:24:a8:1b:9c:21:f4:d5:d4:cf:d4:68:
b3:19:63:40:77:22:97:ef:95:94:a3:d6:45:52:29:5a:a0:f8:
f0:de:a5:8e:8d:5e:a5:72:c1:b3:e5:eb:f9:83:f6:3e:6c:cf:
ec:8c:d1:eb:12:9f:b1:ba:56:f2:47:1b:1c:b9:48:fd:15:3c:
d3:f9:ae:91:98:aa:82:3b:62:b9:f0:c5:5d:9c:84:38:79:a0:
f1:62:8d:c6:0b:41:a1:d6:c2:63:dd:0a:4a:34:24:9d:9c:b9:
f0:d1:52:04:4f:98:04:ca:93:b1:b3:db:f3:49:4d:71:a3:93:
19:7e:7c:67:30:df:45:01:68:9d:d5:66:1e:45:a2:5b:10:6a:
9d:19:77:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:27 2026 by rpki-client