
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json)
Hash identifier: WupHCwqZNTCKN8m6afTy6rEfHrmbvXtIckezmBLxcPM=
Subject key identifier: 87:52:1D:76:19:C9:FE:51:39:4A:5F:30:FC:00:0F:3C:4D:6A:1E:A7
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial: 02F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
Manifest number: 02D2
Signing time: Wed 25 Mar 2026 01:05:22 +0000
Manifest this update: Wed 25 Mar 2026 01:05:21 +0000
Manifest next update: Wed 01 Apr 2026 01:05:21 +0000
Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: zB9k8YZjVgckCj7FVMGwOjEam0+C2W6PDlnoLf0ez2c=)
2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: 9ZUKLl/lkYKMx9K797F4rGfYHPAqqo67yeOpoxXdq4E=)
3: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: e3yNZFVgkQCVhCm/QmSqoyQKXUJmq53Q3jA7sKU7YTQ=)
4: BEE96BA212A811F1A54B75AE3D3D8C67.roa (hash: /SEWCKuQ68wowgWrkDXt8HCOPB77auVAxoefhm+aSXY=)
5: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: WW5v8VEKPHY5cRU6NklWON7UCKUk27Vdm5aFanhH4uA=)
6: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: 02sqYdbDRE0+Eg/3piDn9CDT+5Zx0sH2Kq685uMN8gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Validity
Not Before: Mar 25 01:05:21 2026 GMT
Not After : Apr 1 01:05:21 2026 GMT
Subject: CN=69c334d2-f824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:af:28:81:69:05:e3:94:f4:68:b0:05:a1:
6c:9a:1a:e8:f1:c3:07:ac:cc:29:0b:50:eb:82:fe:
6b:42:54:b2:aa:74:7d:69:9c:55:4d:be:78:8c:35:
a6:25:87:6e:6b:8c:ac:ba:07:9e:02:4d:a0:df:65:
33:6f:f9:ff:8d:63:6e:6f:cc:3e:65:e9:e7:16:9b:
ec:1b:8c:66:fb:93:b3:a9:33:e1:fc:c3:0c:da:fa:
18:68:f3:dc:fc:e1:7f:2f:91:10:84:e8:44:3e:1a:
73:25:50:c0:e8:e5:f8:69:d8:cd:cd:24:a5:9b:82:
ae:1c:c3:8b:6f:69:66:fa:46:66:68:02:2b:fa:ab:
60:e0:6c:94:34:0c:14:42:c0:bd:14:c6:a5:73:7b:
f0:6e:9c:26:3b:df:0b:9d:fe:b0:5a:70:84:01:59:
97:14:b2:bf:25:2f:a6:04:be:af:43:4b:40:51:b0:
0d:54:51:d4:64:dd:ec:12:fd:6f:86:af:af:cc:7f:
61:e8:d8:e7:bf:f0:ab:72:cc:68:1f:c3:49:43:d6:
c4:3a:70:f2:c7:d6:b6:c8:95:5b:f3:a8:d6:56:ef:
1d:67:55:32:b1:3d:4e:ed:0f:fe:97:b4:d5:1b:19:
fd:54:c2:84:84:66:7e:23:5f:18:3c:33:e3:08:c2:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:1D:76:19:C9:FE:51:39:4A:5F:30:FC:00:0F:3C:4D:6A:1E:A7
X509v3 Authority Key Identifier:
keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:91:56:dc:0a:0b:fb:dd:45:9f:7d:ef:14:43:6c:7b:66:0c:
d7:44:63:7c:7a:66:b2:4c:66:3b:fa:61:50:cc:e0:f6:12:d9:
71:85:cf:7a:87:c9:8e:f7:c6:5a:5c:2e:2d:a8:58:1d:b4:b5:
44:31:a5:1a:cc:4c:2b:e4:82:bf:61:48:c2:f0:67:7b:df:f9:
72:4e:d9:92:67:d5:48:46:f2:89:6f:58:92:5a:7c:1c:08:68:
85:43:af:09:8f:88:1d:17:a5:2a:f0:22:f6:b9:cf:65:07:d3:
e6:cb:9f:57:7a:38:3c:ea:14:85:99:c0:8e:02:31:a6:da:8a:
6b:9c:51:80:8b:9b:9d:b6:be:2a:ed:cb:f4:15:e3:b7:12:2e:
df:2d:0c:68:f2:dc:c5:c5:06:91:79:f6:ad:2e:09:31:4d:af:
c7:91:a4:ee:13:1e:7f:df:68:57:0e:a0:62:fe:a2:69:62:f8:
d8:3a:9d:2a:6c:8a:2b:cd:f0:45:81:48:34:b9:2a:c3:ab:81:
ad:f9:ff:64:89:ca:0e:55:46:8e:45:8b:0e:57:7e:96:de:8c:
1a:61:b6:96:9a:a8:ad:42:f1:8a:92:b4:97:23:6f:61:c1:44:
78:c3:fa:28:76:d0:4a:10:ff:98:49:38:0d:7f:5d:3e:b8:56:
48:a7:3b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:57 2026 by rpki-client