
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
File: P80_M6jgglw55KhM1pOVpvKwYUg.mft (raw, json)
Hash identifier: FdFjUyi+kQwHCnuuwAfUJ7Aqex+3AlRJ2VCRzn4XJLc=
Subject key identifier: E1:BF:B8:DF:25:B0:7B:2B:2D:C5:87:B7:F3:5D:83:90:67:A8:02:E2
Authority key identifier: 3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48
Certificate issuer: /CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
Manifest number: 0259
Signing time: Wed 25 Mar 2026 01:38:51 +0000
Manifest this update: Wed 25 Mar 2026 01:38:51 +0000
Manifest next update: Wed 01 Apr 2026 01:38:51 +0000
Files and hashes: 1: P80_M6jgglw55KhM1pOVpvKwYUg.crl (hash: lJvZcNv4oj7g71Xg7PUigfvAbem4CSraWROyKfK2X4I=)
2: F67C04568FE011EDA9919C57C4F9AE02.roa (hash: GPLhGbq9QSxla1GiW0PwGoa1umY2CgsEamSgpbhImgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl
rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4120, serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
Validity
Not Before: Mar 25 01:38:51 2026 GMT
Not After : Apr 1 01:38:51 2026 GMT
Subject: CN=69c33cab-ddf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:ee:6d:c6:b9:14:48:37:0c:ae:e4:85:87:
20:3a:16:fa:e6:19:df:43:d3:d5:31:64:e6:ab:dc:
1e:f4:0d:15:2b:74:64:c5:8c:0f:5c:39:d3:d1:1b:
9d:29:93:e5:9a:ce:cb:e6:75:dc:28:3f:c8:4f:b5:
0f:b0:8a:e4:72:68:55:89:e3:55:7c:97:c8:cc:43:
0b:1e:da:d9:ca:6a:91:be:a6:7f:66:b7:79:8b:9a:
d1:f3:31:37:bd:08:80:6c:63:c9:5c:5e:50:ec:92:
0d:56:2e:85:ba:84:81:42:cd:d4:78:e8:71:42:8a:
f8:37:79:f1:55:30:f3:65:8c:36:48:8f:f5:00:f6:
b0:a4:de:7f:f5:a1:ee:f2:3c:cc:91:ba:c1:9e:2a:
a9:77:93:c6:8c:92:74:4c:9f:f2:77:82:44:10:51:
ce:4e:79:3b:f2:d4:e2:21:c3:df:95:b2:6f:9d:5a:
57:ba:73:ff:8c:76:69:90:ae:3d:be:bd:b0:b2:a2:
77:34:7d:a7:58:1a:7a:b3:ba:43:ef:a4:3c:ff:54:
65:b8:4a:ab:c6:95:6f:79:35:66:31:c5:12:14:fc:
1f:1b:51:50:33:64:a7:8c:60:44:49:c9:2e:ae:2e:
e5:7c:f5:89:88:59:85:bf:20:c8:02:a3:a4:fd:f0:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BF:B8:DF:25:B0:7B:2B:2D:C5:87:B7:F3:5D:83:90:67:A8:02:E2
X509v3 Authority Key Identifier:
keyid:3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:dc:d7:5b:94:fa:4f:2a:a7:ad:6b:0f:03:ad:82:d0:ef:
85:8d:3e:fa:69:00:fb:00:a6:f7:c9:a8:f3:9e:19:15:55:40:
e8:ee:db:e0:d2:6d:27:fb:01:2d:a0:23:a1:c7:80:77:f8:47:
14:11:b4:00:b2:9d:7b:c9:c2:17:61:c6:91:fb:25:e9:5a:26:
e5:09:34:02:7d:41:ef:04:06:53:4b:e2:dd:8d:72:32:93:ba:
c1:9b:e4:c4:97:d2:87:8f:10:a5:70:11:5d:48:d8:bf:a1:7c:
d5:c9:db:33:3b:29:47:e8:17:23:74:70:4d:ae:70:8c:ac:99:
61:6c:88:1f:12:54:22:02:d5:6a:69:7b:35:52:ac:b4:b7:2a:
96:b0:ed:88:a1:b6:d7:8a:fd:86:85:7c:a3:db:88:34:c5:28:
16:da:c1:28:56:84:ee:54:0b:30:23:04:48:07:fc:e2:11:a2:
4a:6a:82:87:c8:27:7d:da:33:c2:61:33:b5:a4:a0:05:3e:f8:
a0:6d:63:e0:e0:68:36:3f:cd:73:27:ea:bf:7f:c1:b5:27:30:
f8:38:c9:f3:8b:38:fc:cd:f9:b0:5e:d7:c3:bf:5f:f0:ef:bd:
93:10:64:cc:79:de:96:4f:a1:8a:80:bd:c8:63:46:a9:2a:6d:
30:7f:2d:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxMjAxMTAvBgNVBAUTKDNGQ0QzRjMzQThFMDgyNUMzOUU0QTg0Q0Q2OTM5NUE2
RjJCMDYxNDgwHhcNMjYwMzI1MDEzODUxWhcNMjYwNDAxMDEzODUxWjAYMRYwFAYD
VQQDEw02OWMzM2NhYi1kZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtjrubca5FEg3DK7khYcgOhb65hnfQ9PVMWTmq9we9A0VK3RkxYwPXDnT0Rud
KZPlms7L5nXcKD/IT7UPsIrkcmhVieNVfJfIzEMLHtrZymqRvqZ/Zrd5i5rR8zE3
vQiAbGPJXF5Q7JINVi6FuoSBQs3UeOhxQor4N3nxVTDzZYw2SI/1APawpN5/9aHu
8jzMkbrBniqpd5PGjJJ0TJ/yd4JEEFHOTnk78tTiIcPflbJvnVpXunP/jHZpkK49
vr2wsqJ3NH2nWBp6s7pD76Q8/1RluEqrxpVveTVmMcUSFPwfG1FQM2SnjGBEScku
ri7lfPWJiFmFvyDIAqOk/fCc6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOG/uN8l
sHsrLcWHt/Ndg5BnqALiMB8GA1UdIwQYMBaAFD/NPzOo4IJcOeSoTNaTlabysGFI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDEyMC83NkE1ODg0RThG
REUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2dsdzU1S2hNMXBPVnB2S3dZ
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4MF9NNmpnZ2x3NTVLaE0xcE9WcHZLd1lVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDEyMC83NkE1ODg0RThGREUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2ds
dzU1S2hNMXBPVnB2S3dZVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEN7c11uU+k8qp61rDwOtgtDvhY0++mkA+wCm98mo854ZFVVA6O7b4NJtJ/sB
LaAjoceAd/hHFBG0ALKde8nCF2HGkfsl6Vom5Qk0An1B7wQGU0vi3Y1yMpO6wZvk
xJfSh48QpXARXUjYv6F81cnbMzspR+gXI3RwTa5wjKyZYWyIHxJUIgLVaml7NVKs
tLcqlrDtiKG214r9hoV8o9uINMUoFtrBKFaE7lQLMCMESAf84hGiSmqCh8gnfdoz
wmEztaSgBT74oG1j4OBoNj/Ncyfqv3/BtScw+DjJ84s4/M35sF7Xw79f8O+9kxBk
zHnelk+hioC9yGNGqSptMH8tqg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:46:32 2026 by rpki-client