
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json)
Hash identifier: EGwihTmz59Vlwg9d3T3mNDaoBq9NguGXQhNOOi0TMog=
Subject key identifier: EF:46:2C:B6:5D:7E:BC:36:B9:72:F9:B8:A0:A2:53:59:0B:ED:78:79
Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
Manifest number: 010B
Signing time: Tue 03 Mar 2026 05:33:05 +0000
Manifest this update: Tue 03 Mar 2026 05:33:05 +0000
Manifest next update: Tue 10 Mar 2026 05:33:05 +0000
Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: rUwGpqdR18qDJqc69L27XmyHPHA8UiZgXOAHktm0bsU=)
2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: 777ytcJtKRK+U1mjB59992g0IydheNppCEpFNuVRoDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Validity
Not Before: Mar 3 05:33:05 2026 GMT
Not After : Mar 10 05:33:05 2026 GMT
Subject: CN=69a67291-edaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:99:ab:e3:a6:ac:cc:39:31:83:82:8b:ee:57:
b4:e0:3f:d9:e6:e6:f8:08:21:45:fc:5a:ca:fd:6d:
a9:c6:a5:82:07:39:48:6a:1b:91:44:0b:aa:9d:81:
e7:f4:ad:a5:27:7c:cd:59:cb:64:93:d2:96:7e:81:
31:7c:e4:1c:54:11:ab:8f:83:01:f3:4f:c7:67:65:
9d:11:1a:b0:b2:3a:95:ec:07:f0:ae:a1:bf:6a:97:
b0:14:83:39:74:0d:d5:54:25:23:0d:47:e0:74:04:
77:5f:a9:c0:39:30:9f:2d:f0:38:8b:2e:6d:da:b7:
29:7b:59:74:02:73:da:b7:99:6c:4b:ac:ab:ec:3c:
e0:8b:37:26:38:64:e7:8d:cf:62:46:00:9d:c0:1a:
75:eb:4d:20:0a:de:55:d5:26:10:14:2e:ec:9e:60:
11:86:f6:1b:58:84:f1:66:cc:5e:06:db:e0:47:ca:
d4:cc:9b:8d:7c:d0:b9:4f:e8:6b:24:46:fe:8d:79:
7d:f9:e1:2a:56:38:20:b0:95:26:00:7a:ed:52:4e:
17:5c:da:b5:b5:dc:fb:3a:b8:ef:bc:7b:ed:f7:ef:
91:2a:70:0e:9f:4b:a3:5f:32:1f:2b:dc:ca:5a:fd:
a8:3d:3c:78:65:8e:bd:5a:c6:38:ca:3e:45:68:f3:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:2C:B6:5D:7E:BC:36:B9:72:F9:B8:A0:A2:53:59:0B:ED:78:79
X509v3 Authority Key Identifier:
keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:e8:f0:2c:ea:1d:8c:7a:4d:a8:1a:de:4b:dc:20:8b:e3:61:
8a:f1:8c:82:50:32:92:8d:ff:97:50:5e:28:61:8c:08:7b:4b:
89:ae:19:8f:18:49:11:24:50:27:20:05:42:17:3c:57:ec:6f:
76:62:1f:91:3f:c0:e1:a1:de:22:74:54:08:e5:14:b3:81:08:
36:a0:c8:1e:72:dd:62:9f:07:1f:92:3a:db:b1:0d:bc:e4:7d:
bc:c6:b0:ef:01:5d:7f:86:76:fe:cd:01:73:e4:21:19:58:52:
8b:88:43:50:9b:db:31:4e:c4:87:77:2d:5a:a3:b5:7e:d6:4e:
81:a9:27:c5:d5:d6:57:2d:91:8a:48:23:ab:53:e8:dd:29:15:
4b:22:02:de:a7:73:54:14:ed:04:0b:23:e7:78:9b:ee:40:b2:
6c:8d:2c:cd:22:b0:b4:a0:50:25:97:04:68:45:50:b7:54:68:
73:6b:04:37:79:7c:ee:c3:1d:da:a8:7f:1d:49:d3:75:ed:f1:
bf:a9:1c:87:15:63:be:57:ee:8b:85:82:e2:37:b7:b4:66:79:
ad:4e:51:31:90:7b:ad:42:cf:52:87:e3:88:f0:a8:d0:bd:91:
e2:26:b9:83:85:50:e2:06:fe:8d:7c:ea:68:4c:d9:0e:45:84:
92:63:69:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlDRDUxMTAvBgNVBAUTKEQyNDFGNTcxQ0Q2Mzk3OTYzMERDMUYxNkFENDg5OUQ1
QkVENTY2RTUwHhcNMjYwMzAzMDUzMzA1WhcNMjYwMzEwMDUzMzA1WjAYMRYwFAYD
VQQDEw02OWE2NzI5MS1lZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Zmr46aszDkxg4KL7le04D/Z5ub4CCFF/FrK/W2pxqWCBzlIahuRRAuqnYHn
9K2lJ3zNWctkk9KWfoExfOQcVBGrj4MB80/HZ2WdERqwsjqV7AfwrqG/apewFIM5
dA3VVCUjDUfgdAR3X6nAOTCfLfA4iy5t2rcpe1l0AnPat5lsS6yr7DzgizcmOGTn
jc9iRgCdwBp1600gCt5V1SYQFC7snmARhvYbWITxZsxeBtvgR8rUzJuNfNC5T+hr
JEb+jXl9+eEqVjggsJUmAHrtUk4XXNq1tdz7OrjvvHvt9++RKnAOn0ujXzIfK9zK
Wv2oPTx4ZY69WsY4yj5FaPMkRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO9GLLZd
frw2uXL5uKCiU1kL7Xh5MB8GA1UdIwQYMBaAFNJB9XHNY5eWMNwfFq1ImdW+1Wbl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83MTk5NUY0RTdG
RUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1WXczQjhXclVpWjFiN1Za
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUNENS83MTk5NUY0RTdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1
WXczQjhXclVpWjFiN1ZadVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQOjwLOodjHpNqBreS9wgi+NhivGMglAyko3/l1BeKGGMCHtLia4ZjxhJESRQ
JyAFQhc8V+xvdmIfkT/A4aHeInRUCOUUs4EINqDIHnLdYp8HH5I627ENvOR9vMaw
7wFdf4Z2/s0Bc+QhGVhSi4hDUJvbMU7Eh3ctWqO1ftZOgaknxdXWVy2Rikgjq1Po
3SkVSyIC3qdzVBTtBAsj53ib7kCybI0szSKwtKBQJZcEaEVQt1Roc2sEN3l87sMd
2qh/HUnTde3xv6kchxVjvlfui4WC4je3tGZ5rU5RMZB7rULPUofjiPCo0L2R4ia5
g4VQ4gb+jXzqaEzZDkWEkmNpKA==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:43 2026 by rpki-client