
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json)
Hash identifier: wAy+BiyiUx8vrdQJ/tLucTbKtbx4IK7Gpjsxe0VA2wE=
Subject key identifier: E7:08:C7:AD:18:25:D4:0A:21:30:3C:C4:C1:A6:27:AF:A0:A4:5C:55
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 09FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
Manifest number: 09A8
Signing time: Sun 08 Mar 2026 19:43:34 +0000
Manifest this update: Sun 08 Mar 2026 19:43:33 +0000
Manifest next update: Sun 15 Mar 2026 19:43:33 +0000
Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: OACts0YlnNtI3+m/0LaSB67Dz8cSuwuBm8pCZxIls9g=)
2: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: ulWIfqdJr6ntDd6TjrpkKwlsqm1SN8sn6R41Xf/9HLA=)
3: 2857F2E4111A11EF86332415C4F9AE02.roa (hash: 0lBq0SGiP1c8blhjOrvjM798+Bu1Avf9FFAjpcPU9lM=)
4: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: L3Dmx9Q6rp+c2LYX0mlHLJbQy9LLuzJCP1KPZL9Zf1c=)
5: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: IaL/27r4Dy/gX1kTRMSIJ7SMPPv2obxa5XypxjD+sxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 19:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2555 (0x9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Mar 8 19:43:33 2026 GMT
Not After : Mar 15 19:43:33 2026 GMT
Subject: CN=69add166-5543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:e9:96:bb:03:75:7e:ce:aa:f5:70:9c:55:
6d:ca:46:58:47:ae:de:ba:cd:39:ec:5b:1d:27:b4:
39:09:d1:be:63:1e:c3:70:39:db:5b:1d:1f:2d:1b:
fa:ca:69:ae:48:4b:06:7f:9b:cf:d2:d7:0e:2b:2c:
cf:2d:83:a2:aa:0d:ec:78:d7:1f:61:b9:d3:35:36:
e1:45:f8:a5:b0:9d:76:04:27:ae:11:f0:14:0e:dd:
34:d5:03:da:3e:32:cc:17:36:fc:e5:1a:7c:98:3c:
7a:29:1f:9a:81:69:97:e8:c5:80:d5:ac:a1:73:fe:
a3:17:54:5f:57:e1:7e:ff:d4:07:bc:fc:48:eb:c4:
17:48:9d:f4:c0:71:fb:04:d0:89:5c:41:f3:cd:93:
0a:77:c3:19:2f:d7:bf:f4:85:f6:e0:22:9c:b7:1d:
9f:0b:d1:36:64:e8:81:49:76:a9:b1:1a:d0:ff:98:
aa:ea:29:b3:d5:1b:fe:87:03:54:68:e1:0b:80:66:
75:fe:73:a7:f1:e3:4a:10:22:c2:c8:9d:78:60:e9:
ca:8e:fa:be:95:79:a4:8e:dd:68:6a:e3:ad:50:b6:
73:88:42:7d:12:b7:ba:58:a2:88:48:4a:7a:6f:a4:
a4:16:d1:b9:64:33:b7:8a:d1:10:ff:c2:fc:fc:3a:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:08:C7:AD:18:25:D4:0A:21:30:3C:C4:C1:A6:27:AF:A0:A4:5C:55
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:82:05:ff:c5:04:91:6f:90:90:c5:c0:b6:42:3b:2e:95:97:
5c:a8:4b:b2:96:67:f8:24:e7:54:cb:c2:e8:a1:17:06:5f:8c:
8a:2c:18:95:ae:50:0b:cd:c3:ef:27:cd:d7:87:04:4a:b9:48:
9e:19:20:c8:a9:48:8e:c0:ce:b7:36:21:1a:ab:4b:a4:2c:3f:
c9:93:43:93:06:46:6e:8d:d7:3d:37:aa:91:08:3f:8f:9f:cc:
d9:bd:3d:f4:f7:7e:10:d8:fd:2e:29:cb:5e:27:e2:c1:bb:9c:
9b:ba:dc:df:32:46:dd:14:3d:c4:df:11:95:c6:da:b7:e6:87:
9a:b6:7e:51:18:aa:87:0c:fe:7b:2a:83:15:dd:08:fe:4d:07:
49:ea:3d:b7:7d:2f:e8:d0:75:a9:77:77:92:63:50:cb:d8:21:
95:b7:18:ba:57:7f:e8:d9:a5:99:32:10:0d:a8:2b:b4:9d:ab:
f1:95:fa:47:e3:a1:ec:09:66:8c:d3:93:eb:01:2d:09:68:fb:
fa:54:16:ed:9a:7c:9b:67:3e:bf:9b:96:76:ef:0f:e4:10:76:
1a:ae:7a:db:58:33:76:7c:c3:05:fd:66:ae:08:81:8c:16:b6:
07:08:92:ca:1c:f7:69:bf:9e:e1:15:00:f8:bc:75:67:f2:63:
02:45:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 08:02:49 2026 by rpki-client