
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
File: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json)
Hash identifier: Y2g/OLPwI9bWMGFqR5QmJab63wdslXmKLjxnR1b3uY4=
Subject key identifier: 6D:B7:5B:F2:D3:1F:95:61:50:45:9A:94:F8:73:E5:68:01:D8:ED:D6
Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Certificate serial: 0592
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
Manifest number: 057F
Signing time: Tue 24 Mar 2026 22:58:16 +0000
Manifest this update: Tue 24 Mar 2026 22:58:16 +0000
Manifest next update: Tue 31 Mar 2026 22:58:16 +0000
Files and hashes: 1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: upmiuhJumkOoRNNxzXg/Ntlncm5O05IxJQtxesAfESc=)
2: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: mFoBkWfLh0LGrOinTzXA38KoXXGaCtnMvz2q3N7gfu8=)
3: F719961A1A8611ECB908E939C4F9AE02.roa (hash: 6Zu4L1ezgqlBaAtZaZeJDXKxjpiSp79xQrfuVaBXNZ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1426 (0x592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Validity
Not Before: Mar 24 22:58:16 2026 GMT
Not After : Mar 31 22:58:16 2026 GMT
Subject: CN=69c31708-e268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:b3:10:45:6c:24:7a:90:2b:42:91:13:b6:
b2:1c:a4:85:87:d7:92:ea:8a:8d:d3:cb:ab:14:3f:
64:d5:48:fc:bd:fe:1c:51:c8:65:40:dd:b5:5d:40:
1e:ea:3d:c1:98:f9:49:6e:4f:03:93:70:39:4f:be:
97:ed:85:2f:2c:68:20:3b:a1:8b:f1:14:5a:41:f0:
cf:36:5b:11:5c:15:ca:3b:5c:2e:b5:ac:aa:8d:c4:
7a:d9:80:c0:dc:26:2e:a4:e0:66:7d:09:3b:38:39:
91:cf:a7:fc:26:0c:31:85:c0:59:f2:f4:40:3f:a9:
74:07:a3:be:09:4e:31:d4:06:8c:4a:77:d9:ec:6e:
b6:32:58:ae:7b:b5:b6:e2:f4:3d:a8:1b:63:7f:8a:
d7:c2:d3:e2:2f:74:45:10:d3:d9:ec:98:7b:81:84:
90:fb:cf:35:fa:60:b6:44:c4:55:7a:ce:69:70:23:
73:21:84:2c:de:c8:e0:59:31:bf:9f:0e:f6:c4:70:
1c:84:fa:55:a4:11:e3:bf:ce:3a:6d:61:a4:b6:44:
e6:13:df:0b:ad:a1:a1:ae:ee:1e:d8:93:06:68:70:
4d:eb:bf:25:e7:72:06:db:87:3b:d4:41:99:77:d3:
39:99:21:88:ec:96:c8:94:16:69:40:3c:d4:cf:b7:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B7:5B:F2:D3:1F:95:61:50:45:9A:94:F8:73:E5:68:01:D8:ED:D6
X509v3 Authority Key Identifier:
keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ca:11:04:ef:93:12:55:d8:33:ea:46:f5:23:57:e7:e5:5b:
fb:10:f2:e3:17:81:b9:cc:e4:11:65:e7:c0:b3:86:25:01:46:
e2:a9:1e:dd:94:fd:ca:7b:e5:26:20:60:5e:dd:b0:14:38:43:
72:63:65:a8:cd:ec:f0:2b:70:18:2e:ec:1a:95:f1:af:29:70:
da:64:8f:76:06:e7:36:d0:c1:32:89:8a:f4:4a:3b:63:ad:5d:
56:ce:af:8b:5b:09:b8:e0:6c:7b:e0:a9:26:97:fd:e3:6a:1a:
e2:22:50:6b:da:29:af:4b:38:2a:1d:bd:4f:86:52:77:64:5a:
68:84:26:ed:d1:03:69:49:b4:e7:33:df:6d:7b:2f:d4:00:c8:
99:47:a5:7f:de:d3:11:5f:05:09:30:31:94:f6:fc:84:32:33:
de:d1:93:15:b8:90:80:74:41:7a:4b:97:44:2c:4f:30:c7:24:
1a:ef:96:a5:dc:61:42:6d:a2:96:83:64:1e:ac:59:c2:bf:b6:
94:5c:fa:b8:30:3d:f5:50:2c:cb:a1:a7:76:5f:6d:d9:dd:52:
12:5d:a5:4f:62:39:7e:67:87:f8:b1:cc:cb:35:94:7b:17:8d:
d0:da:ee:76:39:7f:2c:40:25:03:3f:71:a4:64:82:56:42:52:
43:16:95:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2
MTg3N0FEOUYwHhcNMjYwMzI0MjI1ODE2WhcNMjYwMzMxMjI1ODE2WjAYMRYwFAYD
VQQDEw02OWMzMTcwOC1lMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumWzEEVsJHqQK0KRE7ayHKSFh9eS6oqN08urFD9k1Uj8vf4cUchlQN21XUAe
6j3BmPlJbk8Dk3A5T76X7YUvLGggO6GL8RRaQfDPNlsRXBXKO1wutayqjcR62YDA
3CYupOBmfQk7ODmRz6f8JgwxhcBZ8vRAP6l0B6O+CU4x1AaMSnfZ7G62Mliue7W2
4vQ9qBtjf4rXwtPiL3RFENPZ7Jh7gYSQ+881+mC2RMRVes5pcCNzIYQs3sjgWTG/
nw72xHAchPpVpBHjv846bWGktkTmE98LraGhru4e2JMGaHBN678l53IG24c71EGZ
d9M5mSGI7JbIlBZpQDzUz7cxbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG23W/LT
H5VhUEWalPhz5WgB2O3WMB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB
ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTQxQi82OUY2QjdERTFBODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJL
NExkdkVlQTNMT2xoaDNyWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAccoRBO+TElXYM+pG9SNX5+Vb+xDy4xeBuczkEWXnwLOGJQFG4qke3ZT9ynvl
JiBgXt2wFDhDcmNlqM3s8CtwGC7sGpXxrylw2mSPdgbnNtDBMomK9Eo7Y61dVs6v
i1sJuOBse+CpJpf942oa4iJQa9opr0s4Kh29T4ZSd2RaaIQm7dEDaUm05zPfbXsv
1ADImUelf97TEV8FCTAxlPb8hDIz3tGTFbiQgHRBekuXRCxPMMckGu+WpdxhQm2i
loNkHqxZwr+2lFz6uDA99VAsy6Gndl9t2d1SEl2lT2I5fmeH+LHMyzWUexeN0Nru
djl/LEAlAz9xpGSCVkJSQxaV7w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:56 2026 by rpki-client