
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier: yyYEOTCVzW/tXPCHSMU0lBBIV3vHkj9Hdp3i75rlvII=
Subject key identifier: 18:4B:19:6B:15:6B:BA:FF:FA:48:57:40:6D:6F:B0:FD:CE:2A:14:8D
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial: 0462
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number: 0454
Signing time: Thu 12 Mar 2026 23:46:55 +0000
Manifest this update: Thu 12 Mar 2026 23:46:54 +0000
Manifest next update: Thu 19 Mar 2026 23:46:54 +0000
Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: YNAPqw3rPUyPYT6WQ7o4ffTu2RAahkFw0a43/pPizhE=)
2: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=)
3: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1122 (0x462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Validity
Not Before: Mar 12 23:46:54 2026 GMT
Not After : Mar 19 23:46:54 2026 GMT
Subject: CN=69b3506e-9e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:50:ee:3f:80:f8:c0:b9:56:05:1e:bc:f6:
7c:c1:6d:99:13:f1:3f:69:e5:e2:31:40:a4:69:80:
41:95:61:5f:66:a1:c8:1d:7a:73:8e:24:62:19:8a:
84:62:82:bc:7c:76:f7:24:38:b9:30:6f:32:fe:a3:
27:d9:ca:01:26:84:7a:dd:c4:ba:23:c4:9d:d1:e9:
d1:61:57:4b:fe:5f:c0:4b:a0:f9:92:1b:5f:31:c3:
3e:05:97:30:2b:0d:a1:fb:ee:bc:aa:f7:12:ca:13:
24:7c:79:b1:1a:90:cd:15:dc:58:f3:66:49:79:ac:
c2:f4:9c:54:7e:e2:46:b7:34:f2:0e:f0:7d:12:a5:
7c:80:62:ed:40:76:b3:3b:c1:c5:45:fc:76:e2:a7:
7e:a4:48:d8:dc:27:c7:0f:ff:5c:62:76:32:c3:aa:
18:63:84:c4:b3:d2:9c:a5:fe:5a:05:bf:7a:2a:01:
37:e1:ae:dd:e2:d6:9c:6e:43:38:f3:2f:1b:74:b9:
48:e4:e1:32:23:40:ae:4f:41:17:da:68:5d:71:16:
31:dc:aa:3a:b3:d7:4c:43:c6:a7:e8:21:18:b2:ef:
6e:6e:25:13:4d:4b:68:e7:e1:19:a2:25:10:e5:fd:
3e:8b:9b:6e:f5:f1:dd:c5:19:81:4e:39:27:07:53:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:19:6B:15:6B:BA:FF:FA:48:57:40:6D:6F:B0:FD:CE:2A:14:8D
X509v3 Authority Key Identifier:
keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:67:63:12:27:45:5b:14:63:b9:17:05:13:66:14:6e:9c:67:
dc:c9:e7:27:23:69:9d:31:9b:61:f5:cd:2d:5a:60:2a:42:e6:
c4:6d:8e:2c:1a:86:09:3f:1a:bb:70:b1:78:65:69:1c:63:92:
fc:ef:5d:e2:01:d8:60:c3:3a:37:a9:2b:34:a4:74:d1:50:81:
3b:3c:a9:d9:e3:2e:a7:9b:6b:f0:63:d1:e9:e6:63:b1:f1:ae:
0b:8d:f9:81:b6:dd:ec:eb:99:39:ba:19:ca:61:3a:e4:20:39:
27:a7:df:be:6b:10:0c:0b:a6:c4:6a:17:44:42:b2:72:ab:45:
26:b5:92:4c:de:52:fc:58:bb:db:bb:51:66:ba:7e:31:c2:57:
3e:4a:b0:31:20:1e:71:80:79:8f:75:26:33:15:3c:84:f1:a5:
ae:20:10:2c:50:15:0e:a3:94:07:fd:83:97:53:90:f6:8b:5f:
1c:0d:fb:73:70:11:ab:bb:10:41:dd:32:8f:f4:57:c2:f1:b2:
27:9c:88:e4:42:3f:5a:e8:24:e8:62:0f:4d:c0:bd:57:a0:35:
d4:65:e2:cb:b2:41:ea:71:cc:aa:b2:ab:9a:dc:33:96:38:b7:
f8:b0:16:47:98:0c:5a:65:ed:a7:a5:4f:11:d6:16:fc:a9:98:
94:df:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 12:07:47 2026 by rpki-client