
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
File: fJ9yIp7REllMdyLTwhtRBeKfxIo.mft (raw, json)
Hash identifier: WAIfwocIpLxmJVUiniwAspBPorAcrycFVmE81oXhAeo=
Subject key identifier: 3A:2B:82:DE:DB:92:ED:7F:41:30:EF:9D:62:AA:C5:41:BC:E0:90:E0
Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
Manifest number: 0206
Signing time: Wed 25 Mar 2026 02:29:50 +0000
Manifest this update: Wed 25 Mar 2026 02:29:50 +0000
Manifest next update: Wed 01 Apr 2026 02:29:50 +0000
Files and hashes: 1: fJ9yIp7REllMdyLTwhtRBeKfxIo.crl (hash: bElQC0fkeRmyxbTkoeS/NGj/q+7jb03w1uU1kBHttkg=)
2: 0D99319006F011EFA8C8D445C4F9AE02.roa (hash: tl+G5ekHv2stjdoVIxoXWZP4YaNvive/+qpzZWCgzmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Validity
Not Before: Mar 25 02:29:50 2026 GMT
Not After : Apr 1 02:29:50 2026 GMT
Subject: CN=69c3489e-a9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:3f:68:23:51:16:0f:5e:47:f0:0a:70:c8:
3f:fa:47:f6:98:0f:4d:65:2b:dc:7a:9b:ef:1c:8f:
67:c1:66:c0:26:7c:1d:e2:aa:13:18:57:28:71:e3:
8d:a6:e0:9e:05:61:be:37:89:26:fe:40:02:e7:8d:
95:c1:c5:40:56:4b:fb:fc:1f:71:3c:c4:9e:1c:b5:
c3:52:14:76:4c:d7:9a:b0:ae:b1:35:9d:b8:5c:6e:
2a:18:92:3d:c9:99:7e:81:75:14:8f:9e:92:eb:6c:
65:c3:b5:44:7c:70:95:44:d6:0b:4b:00:fa:64:6f:
8e:cf:2b:34:83:4c:9e:2e:0b:6a:70:af:69:d4:12:
ac:af:c2:83:2b:6b:47:2f:6c:c6:f0:f9:65:f5:86:
7e:ee:37:dd:a4:02:28:3d:c3:c5:b0:b8:0d:4a:43:
6b:d0:e6:15:a7:c7:94:3a:21:a3:d2:ef:1f:e9:83:
ba:9e:52:e5:03:a7:8b:67:b0:41:bf:e7:bc:f2:77:
ab:40:17:27:cc:07:bf:bf:cc:50:7c:2e:9c:98:f3:
f7:92:19:d3:73:4a:51:a6:38:86:8f:ef:a7:e5:ac:
54:af:29:8b:93:a8:91:9e:18:95:ae:9c:4d:00:73:
50:9d:66:2e:38:09:6c:12:fe:92:44:72:c4:0a:8c:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:82:DE:DB:92:ED:7F:41:30:EF:9D:62:AA:C5:41:BC:E0:90:E0
X509v3 Authority Key Identifier:
keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:39:7d:0c:3b:1d:c9:0d:42:a4:a7:20:e9:fb:41:ec:f8:f9:
ea:1a:dc:58:37:06:7d:c7:cf:04:5a:2b:e3:12:b1:f6:42:c0:
9c:cc:ab:c8:e4:c5:54:99:57:dd:fb:fb:7a:24:e3:4a:49:75:
6c:27:cf:37:cc:52:49:7f:c5:69:21:d9:2f:db:d2:62:7e:b0:
b1:2e:de:23:25:23:52:1b:3c:a3:68:f5:32:76:c5:d4:ea:4d:
0d:0d:18:f0:61:d3:07:8b:80:eb:dd:7c:d6:3e:3d:06:d2:d1:
96:dd:5d:e7:c3:c2:96:00:6e:09:f3:08:b2:03:f3:4d:d5:2a:
e7:41:9b:07:3a:b9:70:c8:ac:51:00:2c:53:79:c6:8e:54:24:
49:35:d4:0a:c0:4b:0a:59:de:df:f3:c1:a1:40:95:20:2d:d7:
b7:8c:e9:59:e6:4a:62:16:6e:fe:61:dc:42:56:ab:1c:71:a3:
ce:e6:7c:ab:25:4c:09:79:4b:2d:06:43:47:2c:c9:3c:64:c1:
68:c9:89:6d:4c:92:18:56:07:66:c3:fe:fa:88:60:7f:9d:a4:
f7:6e:6e:96:6c:a5:66:ea:96:f6:9c:a9:b2:56:67:89:23:82:
c6:87:23:33:7d:35:61:f9:1f:e5:99:e5:4a:8f:56:11:28:73:
cf:73:7d:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc3QUQxMTAvBgNVBAUTKDdDOUY3MjIyOUVEMTEyNTk0Qzc3MjJEM0MyMUI1MTA1
RTI5RkM0OEEwHhcNMjYwMzI1MDIyOTUwWhcNMjYwNDAxMDIyOTUwWjAYMRYwFAYD
VQQDEw02OWMzNDg5ZS1hOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlvs/aCNRFg9eR/AKcMg/+kf2mA9NZSvcepvvHI9nwWbAJnwd4qoTGFcoceON
puCeBWG+N4km/kAC542VwcVAVkv7/B9xPMSeHLXDUhR2TNeasK6xNZ24XG4qGJI9
yZl+gXUUj56S62xlw7VEfHCVRNYLSwD6ZG+Ozys0g0yeLgtqcK9p1BKsr8KDK2tH
L2zG8Pll9YZ+7jfdpAIoPcPFsLgNSkNr0OYVp8eUOiGj0u8f6YO6nlLlA6eLZ7BB
v+e88nerQBcnzAe/v8xQfC6cmPP3khnTc0pRpjiGj++n5axUrymLk6iRnhiVrpxN
AHNQnWYuOAlsEv6SRHLECoyAxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDorgt7b
ku1/QTDvnWKqxUG84JDgMB8GA1UdIwQYMBaAFHyfciKe0RJZTHci08IbUQXin8SK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdBRC9DRTZDMjM3QTIw
QTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVsbE1keUxUd2h0UkJlS2Z4
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZKOXlJcDdSRWxsTWR5TFR3aHRSQmVLZnhJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzdBRC9DRTZDMjM3QTIwQTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVs
bE1keUxUd2h0UkJlS2Z4SW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1Dl9DDsdyQ1CpKcg6ftB7Pj56hrcWDcGfcfPBFor4xKx9kLAnMyryOTFVJlX
3fv7eiTjSkl1bCfPN8xSSX/FaSHZL9vSYn6wsS7eIyUjUhs8o2j1MnbF1OpNDQ0Y
8GHTB4uA69181j49BtLRlt1d58PClgBuCfMIsgPzTdUq50GbBzq5cMisUQAsU3nG
jlQkSTXUCsBLClne3/PBoUCVIC3Xt4zpWeZKYhZu/mHcQlarHHGjzuZ8qyVMCXlL
LQZDRyzJPGTBaMmJbUySGFYHZsP++ohgf52k925ulmylZuqW9pypslZniSOCxocj
M301Yfkf5ZnlSo9WEShzz3N9nw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:10:45 2026 by rpki-client