
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
File: AfBcfqXyou38GDiX9YNZgrLPA78.mft (raw, json)
Hash identifier: aOB0NFOo7hk7IIviv/YYmyZRzw//dia7KACwpE6gsdg=
Subject key identifier: 9F:5B:43:41:F1:76:7F:CB:CC:F5:4E:1A:5D:EF:27:FC:3F:A9:0A:38
Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
Certificate issuer: /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
Manifest number: 0105
Signing time: Wed 25 Mar 2026 05:23:49 +0000
Manifest this update: Wed 25 Mar 2026 05:23:48 +0000
Manifest next update: Wed 01 Apr 2026 05:23:48 +0000
Files and hashes: 1: AfBcfqXyou38GDiX9YNZgrLPA78.crl (hash: nQL7zD1enIlNqAuqefsrilvlvA7YS1+uv7e7sjkD6vw=)
2: 3CA96D46FF2E11F088116B6D89EE528E.roa (hash: 9k26GgzaF7JUBXzdAr1iBX77IktY67fjp/QCPFOAclU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Validity
Not Before: Mar 25 05:23:48 2026 GMT
Not After : Apr 1 05:23:48 2026 GMT
Subject: CN=69c37165-c343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:30:e7:5e:e2:44:4d:43:f2:ed:97:69:f5:
90:ac:11:f5:be:df:3c:c8:bf:f1:aa:eb:65:90:c8:
4e:e9:31:ba:73:82:fd:f7:c6:89:e2:1d:e0:74:38:
9a:71:43:ab:8e:9a:0b:fd:da:bb:81:4c:8b:e0:56:
56:60:7f:b6:b3:86:c2:71:57:b9:f3:34:96:af:e9:
29:3d:53:3a:5d:d2:04:1e:64:15:9b:91:50:7c:85:
59:9f:59:2e:a0:87:03:72:e7:d2:17:2a:77:96:3b:
51:75:c4:ce:34:1d:80:54:b8:36:be:2a:a9:7f:ca:
93:8e:f4:ae:bd:8a:78:ba:47:ab:d8:f9:d8:6d:ab:
c4:f3:5b:e8:12:44:b9:63:91:3f:dd:1f:df:15:fd:
dd:31:c1:64:d2:41:e9:99:82:d2:f7:80:c8:95:b4:
70:a6:f7:74:88:84:5a:ec:0f:98:41:57:21:33:11:
f2:bb:5d:58:2b:b9:d6:42:c1:da:ce:cb:da:bf:aa:
7a:5a:c7:7e:cd:88:81:70:89:33:1c:07:e9:a0:56:
a8:3d:ba:ca:0e:7f:e7:a5:cc:3f:0d:00:07:be:99:
de:f4:c7:19:0e:e2:16:bd:d2:f2:fb:f8:cd:8d:f9:
00:64:2f:85:9f:f7:d0:67:ed:a3:1b:5d:7e:af:c1:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5B:43:41:F1:76:7F:CB:CC:F5:4E:1A:5D:EF:27:FC:3F:A9:0A:38
X509v3 Authority Key Identifier:
keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:e8:f0:67:50:61:32:e6:9d:d0:f5:45:b3:0a:9e:63:18:01:
5d:49:54:3c:d3:1f:f9:8a:02:cd:32:13:4f:55:6b:61:74:78:
6f:a1:54:72:1c:91:fa:56:32:f7:cd:00:f8:21:dc:3c:41:35:
0c:38:78:86:e6:11:db:0a:74:a2:cc:ea:a4:b7:21:9c:a0:47:
7e:23:34:06:1d:53:34:a4:f5:40:1e:71:1d:d2:30:51:dc:af:
4d:53:47:d7:10:f9:31:ef:e9:80:5b:66:f8:03:d9:92:38:6d:
58:af:3d:b0:80:a8:ad:0e:d9:b8:69:75:31:f6:9d:e8:c4:c5:
f2:ab:73:57:a1:50:d7:ee:60:b0:f1:d1:66:25:71:ce:99:ce:
1a:d7:7d:ff:9f:3e:e7:97:c9:f7:b4:5c:2e:f3:9d:90:67:bc:
f0:4f:c6:19:d9:9d:a5:66:80:9c:8c:5b:b0:f3:8a:82:4a:eb:
40:1a:2f:6d:9c:f1:b9:92:ec:9a:e2:e8:52:57:bb:7a:01:a9:
64:fc:2e:48:5b:6d:f7:6f:07:3e:45:91:2a:74:a9:4d:3f:eb:
2f:cd:fc:d1:1a:ce:24:f6:54:8e:e1:28:e5:91:22:88:ba:24:
e9:b2:d2:4c:cd:f3:7c:44:14:0a:ca:bb:d4:e4:74:e3:c1:30:
db:4e:22:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA5QkMxMTAvBgNVBAUTKDAxRjA1QzdFQTVGMkEyRURGQzE4Mzg5N0Y1ODM1OTgy
QjJDRjAzQkYwHhcNMjYwMzI1MDUyMzQ4WhcNMjYwNDAxMDUyMzQ4WjAYMRYwFAYD
VQQDEw02OWMzNzE2NS1jMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh04w517iRE1D8u2XafWQrBH1vt88yL/xqutlkMhO6TG6c4L998aJ4h3gdDia
cUOrjpoL/dq7gUyL4FZWYH+2s4bCcVe58zSWr+kpPVM6XdIEHmQVm5FQfIVZn1ku
oIcDcufSFyp3ljtRdcTONB2AVLg2viqpf8qTjvSuvYp4uker2PnYbavE81voEkS5
Y5E/3R/fFf3dMcFk0kHpmYLS94DIlbRwpvd0iIRa7A+YQVchMxHyu11YK7nWQsHa
zsvav6p6Wsd+zYiBcIkzHAfpoFaoPbrKDn/npcw/DQAHvpne9McZDuIWvdLy+/jN
jfkAZC+Fn/fQZ+2jG11+r8GqjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9bQ0Hx
dn/LzPVOGl3vJ/w/qQo4MB8GA1UdIwQYMBaAFAHwXH6l8qLt/Bg4l/WDWYKyzwO/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCQy9EMzVCMDgyRUE3
MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi9BZkJjZnFYeW91MzhHRGlYOVlOWmdyTFBB
NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FmQmNmcVh5b3UzOEdEaVg5WU5aZ3JMUEE3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDlCQy9EMzVCMDgyRUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi9BZkJjZnFYeW91
MzhHRGlYOVlOWmdyTFBBNzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA+jwZ1BhMuad0PVFswqeYxgBXUlUPNMf+YoCzTITT1VrYXR4b6FUchyR+lYy
980A+CHcPEE1DDh4huYR2wp0oszqpLchnKBHfiM0Bh1TNKT1QB5xHdIwUdyvTVNH
1xD5Me/pgFtm+APZkjhtWK89sICorQ7ZuGl1Mfad6MTF8qtzV6FQ1+5gsPHRZiVx
zpnOGtd9/58+55fJ97RcLvOdkGe88E/GGdmdpWaAnIxbsPOKgkrrQBovbZzxuZLs
muLoUle7egGpZPwuSFtt928HPkWRKnSpTT/rL8380RrOJPZUjuEo5ZEiiLok6bLS
TM3zfEQUCsq71OR048Ew204irw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:06 2026 by rpki-client