
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
File: MFikabZ9AwcsLYo4Xp8qq7oTTis.mft (raw, json)
Hash identifier: QZbkwiDpgIDRSwjm13ku4fxvJSfZgyJ/JkLnZ8+/OKk=
Subject key identifier: B4:D5:D8:73:0E:AC:47:DA:71:BA:0B:52:CE:B1:F7:4C:D6:4B:2B:CD
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 07D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
Manifest number: 07A4
Signing time: Tue 24 Mar 2026 21:17:09 +0000
Manifest this update: Tue 24 Mar 2026 21:17:09 +0000
Manifest next update: Tue 31 Mar 2026 21:17:09 +0000
Files and hashes: 1: MFikabZ9AwcsLYo4Xp8qq7oTTis.crl (hash: IsEVAXyE1bwMavQ/14fxWBkgnoGMheUSmtiKt8OyQao=)
2: 62884F1AB6CC11EF84CBC45FC4F9AE02.roa (hash: AXDH2N6IFT5Fud9AQTkuO+onQ48n5ZtmHoBIWEhfafk=)
3: B791EB5251A811F08D434B5BC4F9AE02.roa (hash: Yv4gel1CvyBk9MP04CS6oXlyji+0CdFjC5TBaKzGRfE=)
4: 7CA749FCF63E11F080BDB1B6646F56BC.roa (hash: u2rDocooyxiz9s72SCuMZgdQBeeYVSQpawmphR3YaZo=)
5: 446CB34270E711F083707432C4F9AE02.roa (hash: kZy79YthAxUXnqeeWJ0YITudamfKZP7o+VZk50JTteM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Validity
Not Before: Mar 24 21:17:09 2026 GMT
Not After : Mar 31 21:17:09 2026 GMT
Subject: CN=69c2ff55-2ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:2e:7d:1a:74:d7:23:e9:4a:2d:0e:6a:9f:
0a:9a:b6:4e:4b:40:9f:6b:26:fe:0b:c9:43:30:c4:
aa:63:39:c5:41:10:c3:81:f0:a4:38:3d:8f:db:8c:
be:04:56:2b:5f:e9:36:9d:5a:00:f4:d8:51:cd:62:
f5:7c:ae:e0:cc:6b:b1:22:f8:07:1b:21:a3:61:93:
8a:48:a8:f0:79:f9:74:34:f5:63:d9:50:33:6d:ae:
d1:0a:7f:c7:b3:54:57:75:f4:e1:2c:16:74:e9:22:
23:45:cb:29:70:ad:aa:2a:a9:19:84:89:28:7f:ed:
e7:69:c4:64:9a:fd:80:f0:ad:df:d8:5f:7f:79:b2:
e3:2b:ba:0f:2f:04:86:d0:6d:34:4e:fe:f0:b6:4d:
a4:bb:c4:1d:4a:88:df:c3:10:b5:12:83:96:d0:74:
64:29:c0:9f:41:36:d8:c2:1a:0c:a4:06:fe:d5:c2:
a2:24:60:69:3d:d5:eb:b1:fb:4a:92:19:54:ad:f7:
52:a7:39:14:a6:90:be:1a:b5:56:b0:f6:4f:00:85:
01:94:f9:cb:61:09:71:17:96:1c:9c:eb:8f:a2:ec:
df:fa:a1:31:38:9a:27:2c:78:74:07:96:47:8d:11:
b6:fc:e7:3f:a9:e7:da:f6:cf:08:fc:31:47:6d:80:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D5:D8:73:0E:AC:47:DA:71:BA:0B:52:CE:B1:F7:4C:D6:4B:2B:CD
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:37:35:77:f8:67:f6:01:66:d7:73:6c:6f:bf:6b:24:93:a1:
31:06:56:9b:cd:18:c8:9e:04:40:c5:25:0f:c9:6e:31:de:b7:
8d:b7:11:6c:a9:92:62:91:58:7e:5e:40:c1:73:3f:bd:3c:eb:
88:4f:6f:6f:be:67:a4:a7:ee:53:81:97:f2:f0:66:d4:d4:e7:
7d:04:6e:2b:ec:42:5b:15:de:58:fb:5a:c0:1a:b2:d5:20:92:
22:4b:f4:74:f1:e2:90:5e:37:4e:ee:1b:3a:45:e8:b1:91:b5:
ca:92:10:d7:b5:56:62:aa:e2:0a:d3:91:ab:c8:cf:5d:1c:e4:
ac:e5:3a:3c:29:73:74:bc:1f:cf:5d:b3:96:69:fc:35:30:f2:
79:48:26:e6:88:b2:6c:47:52:d4:ea:86:0c:c5:6d:86:95:60:
82:ab:b8:70:af:55:a0:c4:1b:70:11:73:28:fc:35:f0:27:82:
52:7b:30:9b:20:a5:c3:a7:df:77:ae:31:7f:5d:4b:b5:a9:22:
95:ad:47:cd:31:9a:d7:83:7d:29:4d:22:a9:08:58:f2:45:e2:
b5:1f:3e:0a:05:91:f8:ed:69:e7:23:8c:be:b5:67:45:70:6b:
80:77:fc:c6:a4:31:db:1a:84:59:47:35:69:e7:fb:ef:68:b6:
15:6e:72:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjk2NjUxMTAvBgNVBAUTKDMwNThBNDY5QjY3RDAzMDcyQzJEOEEzODVFOUYyQUFC
QkExMzRFMkIwHhcNMjYwMzI0MjExNzA5WhcNMjYwMzMxMjExNzA5WjAYMRYwFAYD
VQQDEw02OWMyZmY1NS0yYWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnkufRp01yPpSi0Oap8KmrZOS0Cfayb+C8lDMMSqYznFQRDDgfCkOD2P24y+
BFYrX+k2nVoA9NhRzWL1fK7gzGuxIvgHGyGjYZOKSKjwefl0NPVj2VAzba7RCn/H
s1RXdfThLBZ06SIjRcspcK2qKqkZhIkof+3nacRkmv2A8K3f2F9/ebLjK7oPLwSG
0G00Tv7wtk2ku8QdSojfwxC1EoOW0HRkKcCfQTbYwhoMpAb+1cKiJGBpPdXrsftK
khlUrfdSpzkUppC+GrVWsPZPAIUBlPnLYQlxF5YcnOuPouzf+qExOJonLHh0B5ZH
jRG2/Oc/qefa9s8I/DFHbYC4iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTV2HMO
rEfacboLUs6x90zWSyvNMB8GA1UdIwQYMBaAFDBYpGm2fQMHLC2KOF6fKqu6E04r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTY2NS82RDBEMTJCODRC
RjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3Y3NMWW80WHA4cXE3b1RU
aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01GaWthYlo5QXdjc0xZbzRYcDhxcTdvVFRpcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTY2NS82RDBEMTJCODRCRjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3
Y3NMWW80WHA4cXE3b1RUaXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqTc1d/hn9gFm13Nsb79rJJOhMQZWm80YyJ4EQMUlD8luMd63jbcRbKmSYpFY
fl5AwXM/vTzriE9vb75npKfuU4GX8vBm1NTnfQRuK+xCWxXeWPtawBqy1SCSIkv0
dPHikF43Tu4bOkXosZG1ypIQ17VWYqriCtORq8jPXRzkrOU6PClzdLwfz12zlmn8
NTDyeUgm5oiybEdS1OqGDMVthpVggqu4cK9VoMQbcBFzKPw18CeCUnswmyClw6ff
d64xf11Ltakila1HzTGa14N9KU0iqQhY8kXitR8+CgWR+O1p5yOMvrVnRXBrgHf8
xqQx2xqEWUc1aef772i2FW5ywg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:53 2026 by rpki-client