
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json)
Hash identifier: +vVOR+cCGTrkDPC/I4kop9hcwmWZkQWQIdPVLKFzgfI=
Subject key identifier: 93:E5:C9:B4:ED:02:2E:6A:BB:E1:6D:1F:E5:C2:02:1E:D9:4E:F4:36
Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Certificate serial: 095E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
Manifest number: 094A
Signing time: Mon 02 Mar 2026 20:03:14 +0000
Manifest this update: Mon 02 Mar 2026 20:03:14 +0000
Manifest next update: Mon 09 Mar 2026 20:03:14 +0000
Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: xD/IG7SLBQFrYcDTKiVHdPrLIJeJdeK7bQOc+UnBlXg=)
2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: tEVppuvDqO2Igjts26bHGw8+2Z3qSj1DL7NhnyY1wWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Validity
Not Before: Mar 2 20:03:14 2026 GMT
Not After : Mar 9 20:03:14 2026 GMT
Subject: CN=69a5ed02-fe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:f9:8e:c7:16:37:37:6e:dc:ba:04:93:6b:
36:b0:e3:50:6f:a7:d4:10:3c:a8:66:84:ef:91:5b:
06:55:e8:10:1a:31:c3:d2:88:08:bc:a5:47:72:9c:
9c:a9:83:a3:c6:b8:a2:cf:1a:e1:ea:43:4a:ba:f3:
93:75:eb:ad:22:ce:21:7c:5e:3d:ff:88:3c:b9:55:
71:ed:12:9a:ca:de:01:e9:85:a9:79:f9:70:12:ec:
20:97:38:49:46:9c:23:88:65:fe:45:68:29:16:fb:
86:44:f6:87:44:2f:8b:75:0b:74:d5:b8:de:f4:56:
52:75:ac:88:4f:b7:f6:11:c2:44:f4:09:88:ff:c3:
03:1f:a3:47:54:5d:60:f4:de:29:f0:81:d1:ce:12:
0a:22:b7:2a:9c:5e:c0:8d:1f:e1:48:8a:ce:f0:8b:
d0:a3:2f:b0:84:ed:b6:15:3e:81:27:55:24:9f:5c:
5b:87:e6:f3:d0:ae:8b:1b:12:09:71:a4:59:a4:03:
4e:be:a5:4b:60:1b:63:13:dc:fa:11:c4:80:49:15:
66:5c:2a:a4:70:ac:b1:f8:4d:a7:f1:f9:1b:06:4e:
92:1c:75:77:41:ae:71:b1:f3:e5:4f:d8:75:c0:6f:
00:a8:22:11:58:11:6e:78:02:f1:01:96:38:4d:71:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:C9:B4:ED:02:2E:6A:BB:E1:6D:1F:E5:C2:02:1E:D9:4E:F4:36
X509v3 Authority Key Identifier:
keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:a4:fe:c8:a4:66:2d:6b:64:aa:a9:ab:42:82:da:82:4d:d2:
27:39:34:b2:90:e0:e2:ba:2e:5a:e7:e1:da:de:c4:a8:83:3b:
0f:71:a8:bc:32:82:a1:ec:74:ac:99:d8:41:22:e8:6b:92:23:
f8:a5:e8:ca:a8:8c:91:4a:9c:b3:f3:1c:4e:95:85:be:e1:da:
0e:0a:2b:86:bc:f4:a6:81:50:cd:88:b1:c6:c9:a8:b9:9f:62:
85:a2:89:85:9f:2f:f7:a8:1b:54:2d:0f:66:46:be:40:51:32:
fd:6c:de:e5:96:75:13:4a:fa:8a:db:13:70:04:9d:10:17:fc:
00:8e:fb:59:6f:e3:a7:76:37:05:17:f3:d7:4f:c3:49:62:48:
e9:2e:01:56:84:50:b2:71:89:13:ac:2c:4f:25:87:3a:09:75:
1f:38:72:33:5a:51:9f:bb:4c:c1:9b:2c:cd:b5:4f:2f:8a:7a:
bc:01:c4:24:6d:73:18:70:ec:17:59:5b:4d:9e:7e:06:d0:3b:
61:71:ad:4b:7c:74:55:3a:16:34:a1:aa:9e:6c:5b:42:1b:62:
9d:86:f9:e9:99:1c:4c:73:f0:41:d7:63:bd:85:5c:cd:a6:57:
bb:1b:0b:96:68:30:8a:01:7a:a2:73:75:b4:a2:e6:82:29:c5:
ec:c3:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:09 2026 by rpki-client