
$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
File: ApdxaY8oNwXUpN4S5XOVhcvrjww.mft (raw, json)
Hash identifier: 2eZ/u3aCklnlki9NH9ikpISCWn5OfCve5sGCyTjCY9w=
Subject key identifier: A1:64:9C:61:EC:94:AD:53:A2:BF:14:C2:39:5B:99:A4:21:6F:FB:46
Authority key identifier: 02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
Certificate issuer: /CN=A91772FA/serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
Manifest number: 0C
Signing time: Sat 07 Mar 2026 00:23:33 +0000
Manifest this update: Sat 07 Mar 2026 00:23:32 +0000
Manifest next update: Sat 14 Mar 2026 00:23:32 +0000
Files and hashes: 1: ApdxaY8oNwXUpN4S5XOVhcvrjww.crl (hash: 8vn20M8ZYkJvkTPMnrDoFxlDnbxZRfbNY9UtcHkrAgs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 00:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91772FA, serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Validity
Not Before: Mar 7 00:23:32 2026 GMT
Not After : Mar 14 00:23:32 2026 GMT
Subject: CN=69ab7005-c5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:c1:57:18:25:c1:24:f1:2e:28:b5:0f:0f:
e7:78:3e:f8:4c:e3:4c:b3:28:a1:1b:55:35:12:f5:
87:f3:8e:53:bd:59:de:eb:5a:2c:29:ec:26:b0:03:
81:24:be:19:b1:72:0f:32:74:cb:e6:a6:b4:00:17:
05:64:4a:53:1e:f1:f1:06:a4:b1:fa:48:bd:b8:d4:
89:b7:44:ef:e0:3f:45:f4:9e:d4:2a:95:33:44:84:
39:08:9a:5b:0b:57:0b:67:0b:18:31:8e:a2:f5:b4:
1b:3e:64:7c:00:dc:0f:86:e8:9f:1e:73:77:0f:21:
de:40:11:82:2c:39:56:f6:b6:d0:c8:81:9a:58:3e:
08:35:62:c6:4b:06:c7:14:de:84:19:68:af:e0:0b:
e8:2b:f1:59:6e:5b:cf:4c:40:6a:b0:69:21:50:90:
af:e5:98:e6:95:71:3e:79:a7:33:c8:b3:9b:83:6b:
00:b1:c7:53:96:d3:06:dd:3a:9b:fa:83:c5:35:cd:
99:bc:2c:bc:ce:c6:72:f1:e1:6c:f0:96:5a:34:07:
c2:c7:5b:d5:72:a1:c5:47:77:5d:35:60:5a:a4:e3:
35:f9:aa:38:12:05:c5:b6:71:b7:0a:a4:f6:55:9f:
89:1d:1a:95:27:48:0e:13:dd:6c:d1:ca:ad:3e:10:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:9C:61:EC:94:AD:53:A2:BF:14:C2:39:5B:99:A4:21:6F:FB:46
X509v3 Authority Key Identifier:
keyid:02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d0:f0:e1:88:18:d3:31:bf:39:1e:d9:b2:ea:91:56:bb:0d:
d7:47:22:76:e2:7a:b8:3c:42:fe:a4:ec:d6:6e:47:91:68:5f:
ee:44:62:a0:50:ce:11:87:eb:7a:7e:77:dd:66:a8:52:e0:be:
23:0e:2d:35:9d:7f:70:fa:e1:93:c7:39:e5:04:ae:92:93:ec:
a0:b3:55:7c:25:4b:1a:c4:6e:cc:46:84:fa:79:c8:a1:26:42:
dc:12:c9:f1:4b:3d:2b:fe:71:b6:01:44:58:da:31:3a:2a:2d:
0e:69:3d:b1:34:6f:a6:84:3a:4c:c4:68:5b:4b:b3:88:2d:07:
ae:e0:b8:20:32:6b:a5:69:38:d0:fc:ce:4a:a3:ef:6e:a5:34:
f0:fe:19:8b:f0:71:d9:01:3c:f1:79:a2:aa:a4:56:93:7d:70:
90:65:d9:f2:ef:c9:7c:2e:ea:bc:63:a2:b3:89:ae:a3:81:d4:
bb:29:e6:1c:10:4d:ce:cd:cb:73:f1:90:ad:8a:5a:08:ff:7e:
5e:23:d9:62:64:57:86:18:9a:d1:4e:19:c8:ad:5d:4e:e5:87:
27:92:ec:5d:80:07:22:31:f5:46:fe:59:5e:ce:be:ba:09:e3:
a3:33:e0:a6:a2:e2:57:cd:fa:97:b8:4c:62:76:9d:ba:23:3c:
6d:e5:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:33:17 2026 by rpki-client