
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier: NfHi7kdro5ZflAYzt6JE0uVI6diBr+P6SiG8uqkxoFQ=
Subject key identifier: 95:CF:C0:2F:E3:9E:86:92:67:00:D7:BF:A4:96:4B:9C:CD:18:88:70
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial: 0306
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number: 02F8
Signing time: Wed 25 Mar 2026 00:56:30 +0000
Manifest this update: Wed 25 Mar 2026 00:56:29 +0000
Manifest next update: Wed 01 Apr 2026 00:56:29 +0000
Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: xlQocG4SmevQMwCNtveT/vBfpODef/7c43mJyNDqc3E=)
2: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: bDrcCfIunOv3Ox8MoCryqHWYdLJQz+jVsJlwtnaxXwA=)
3: 834FFE88679911EEB8243436C4F9AE02.roa (hash: ME7+zEz0Jsw4n7cBlOx4YfFdzfleALyDaomuxZAGAFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Validity
Not Before: Mar 25 00:56:29 2026 GMT
Not After : Apr 1 00:56:29 2026 GMT
Subject: CN=69c332bd-9b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:90:96:fd:68:91:bc:2c:13:57:36:76:d5:
00:19:7e:3d:43:3a:3a:44:e5:66:13:9f:39:7f:3d:
3e:38:12:1b:85:fa:59:d9:76:f4:b2:d5:e9:d6:f0:
cf:8d:f4:d3:8d:92:75:4b:5d:e7:ed:be:fd:dd:88:
56:92:ba:98:5d:83:cf:39:f8:e7:d8:8d:5c:6a:21:
d8:2f:de:ea:17:ae:53:6e:63:b7:98:ca:be:35:15:
c1:e4:9e:a3:74:41:c7:ab:5b:57:3f:f2:3e:34:cb:
43:24:76:2d:31:35:09:fa:22:de:91:17:62:34:c0:
3c:5f:87:89:6f:bd:5b:18:83:3c:e1:c0:07:3c:dd:
02:ed:aa:74:43:69:c9:c1:45:4c:bf:7a:8b:b5:4f:
d8:6e:36:20:a9:12:e9:a8:6e:3f:7f:ee:a0:e4:de:
cb:dd:6a:0f:5b:65:92:c5:e9:7f:3d:cd:37:46:72:
4e:ed:d3:ea:2e:09:96:e9:33:5b:9e:7a:68:9f:18:
26:a7:5b:f3:cf:17:18:c9:a0:02:07:a8:d1:3e:0f:
d4:10:fc:0d:19:46:56:02:13:08:a9:b4:a9:ce:89:
6b:29:c6:d9:de:9f:dc:2b:21:20:8e:ef:8a:4b:64:
13:57:67:8d:67:cb:64:ae:dc:f5:95:27:e9:18:53:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CF:C0:2F:E3:9E:86:92:67:00:D7:BF:A4:96:4B:9C:CD:18:88:70
X509v3 Authority Key Identifier:
keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:90:d7:7d:9b:e3:58:3d:a9:0b:63:1b:0f:d7:ff:73:5d:f3:
b0:92:57:f6:ec:86:47:7a:7b:b7:c9:d3:90:5d:ef:3c:d3:d6:
4f:c8:ea:08:0a:99:04:44:01:b6:1e:c5:e7:0e:90:86:cc:d8:
3f:13:1a:d9:c6:84:0b:75:f5:5e:17:b0:11:cf:22:6d:5c:48:
82:21:85:07:5c:23:fc:a5:e4:78:f5:f4:dc:ff:c3:53:a9:d2:
e6:90:ef:f1:0b:0e:94:39:8b:7c:29:c2:9d:26:48:b7:28:f7:
57:b9:ec:b7:14:0e:22:e5:b9:7c:7f:2e:79:cf:4a:4b:2b:ec:
b4:33:b7:f3:11:0f:c7:6f:9d:4f:1e:6f:8c:66:46:fc:67:b4:
3a:6c:b0:38:63:39:1b:de:33:c7:57:c9:42:b2:6e:d6:06:0a:
b4:14:fd:57:bf:f9:20:52:62:6f:93:74:3a:55:51:fb:d8:e7:
62:98:b6:99:03:8e:5d:6c:c1:55:52:cd:a6:96:1b:a9:78:e1:
71:b1:fc:09:4a:ab:8a:be:38:dc:e0:51:99:de:64:11:38:fb:
96:78:99:d5:2e:a7:5c:c7:af:13:2f:94:43:32:ea:24:6f:39:
8c:21:d3:25:3a:9b:02:13:63:bc:22:ea:d1:9a:d8:e9:42:bb:
ed:00:c3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:16 2026 by rpki-client