
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json)
Hash identifier: ypKKrJ9ufEfDvm38b7iAFpjp/JkLFt8ECIsNn77UXB4=
Subject key identifier: F5:DB:E8:AF:27:66:8D:C5:A1:B2:85:5E:FA:03:A0:BC:6E:49:19:A0
Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Certificate serial: 3568
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
Manifest number: 3532
Signing time: Mon 02 Mar 2026 14:58:34 +0000
Manifest this update: Mon 02 Mar 2026 14:58:34 +0000
Manifest next update: Mon 09 Mar 2026 14:58:34 +0000
Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: uf4yqE0FPU9ANtfzCm24vTI7cEvyW/Bf/IqDt8nZC7s=)
2: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: 6rBcARPDFtZ25ZUjJ6KXnh4+h4VHUuegYqgFp9CrpCA=)
3: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: 4UFHtr4XeXNnq7KTZknkybZI+zmVWrMYnwFvfLsG+uw=)
4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: u2Ar2PlNEkyQ2SuYxInhQURzKf5tXQUSrdtG0Brtz4Q=)
5: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: 0N8+UfH8NuaA9qjC81UIdofpt+ivc/1OzKhyAWBOmEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13672 (0x3568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Validity
Not Before: Mar 2 14:58:34 2026 GMT
Not After : Mar 9 14:58:34 2026 GMT
Subject: CN=69a5a59a-8d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:67:79:a2:2c:9f:3f:17:3f:02:a0:2c:b8:
ab:0b:0f:68:1d:be:d8:c1:a2:a8:7e:c5:e8:df:f9:
22:ba:36:50:73:cb:67:9f:85:74:bc:16:58:92:bf:
32:91:1f:89:bb:f7:9b:e6:2b:c7:2d:fa:59:45:7c:
06:c3:8e:cf:83:8c:8b:c9:04:b7:73:f1:48:25:18:
f1:d3:df:bd:6e:d9:f3:48:96:cd:31:1b:fa:2a:d8:
b7:e0:a5:6b:77:27:82:40:ef:5c:f1:88:47:99:e1:
cc:0f:ad:ae:ed:06:c9:9d:db:1c:67:d9:40:1e:e2:
12:13:c3:d8:68:83:31:e0:b8:af:01:07:61:96:56:
c0:0e:4e:b8:e2:f1:15:36:e8:54:3c:c2:05:f4:a0:
4e:3f:0f:b8:42:69:1a:99:90:6e:60:96:9d:b9:39:
e1:35:67:ac:06:fb:ea:35:51:a3:8f:f5:21:72:1d:
54:4a:2c:d3:99:26:a6:a3:e6:fa:4c:99:c0:31:37:
93:ca:48:69:bb:6c:e4:48:23:4c:a3:91:2b:7b:86:
dd:bb:79:97:17:f5:5e:8c:c4:c1:1a:91:31:b5:bb:
00:92:f4:4d:25:02:ad:f4:b8:dc:28:55:08:ea:29:
a6:6c:79:a5:c1:b2:53:a8:c7:03:30:de:50:0f:d5:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DB:E8:AF:27:66:8D:C5:A1:B2:85:5E:FA:03:A0:BC:6E:49:19:A0
X509v3 Authority Key Identifier:
keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:36:7b:3e:39:6b:a9:6f:04:b5:83:80:bb:e6:fa:84:64:09:
73:db:9e:22:78:d8:84:c0:be:0f:67:7b:16:6c:d9:2b:05:18:
9a:7f:ae:ed:bb:45:e3:7d:5a:54:b3:6d:cf:7d:82:f0:af:99:
c7:46:ae:c7:b3:3b:f1:a2:00:5d:ef:cb:b3:9c:5e:cf:c3:b5:
36:19:05:4b:b4:d7:9a:f8:4e:54:11:1c:4b:97:ad:06:78:97:
9e:10:c6:05:e3:77:80:05:1e:36:5a:af:96:a7:bb:cf:a4:23:
a6:4a:d2:19:3f:8d:be:24:b2:13:59:8a:73:a7:5f:a6:ed:ed:
22:e5:bf:8d:2a:4e:7d:29:c8:49:af:2c:86:8c:cd:d9:bf:c3:
df:4c:dc:d8:59:fa:ca:4d:22:36:da:d4:10:22:3e:22:44:ba:
a9:98:c1:c7:cc:69:f8:10:71:25:23:04:42:7c:5a:9a:70:f0:
c4:0a:cb:ab:0d:79:59:78:13:12:f3:c4:cf:b3:15:20:8f:ff:
59:bf:b3:90:d1:15:bd:08:fb:97:bb:2a:ed:3d:14:97:87:b4:
4d:8d:ac:cb:67:6d:5c:06:9b:de:5f:b4:b5:d5:79:81:9f:5e:
fd:79:da:93:d1:aa:17:89:e8:9a:ef:c8:f1:88:d8:3b:be:38:
95:62:df:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy
RTJDODI1QzgwHhcNMjYwMzAyMTQ1ODM0WhcNMjYwMzA5MTQ1ODM0WjAYMRYwFAYD
VQQDEw02OWE1YTU5YS04ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlEFneaIsnz8XPwKgLLirCw9oHb7YwaKofsXo3/kiujZQc8tnn4V0vBZYkr8y
kR+Ju/eb5ivHLfpZRXwGw47Pg4yLyQS3c/FIJRjx09+9btnzSJbNMRv6Kti34KVr
dyeCQO9c8YhHmeHMD62u7QbJndscZ9lAHuISE8PYaIMx4LivAQdhllbADk644vEV
NuhUPMIF9KBOPw+4QmkamZBuYJaduTnhNWesBvvqNVGjj/Uhch1USizTmSamo+b6
TJnAMTeTykhpu2zkSCNMo5Ere4bdu3mXF/VejMTBGpExtbsAkvRNJQKt9LjcKFUI
6immbHmlwbJTqMcDMN5QD9WZ6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXb6K8n
Zo3FobKFXvoDoLxuSRmgMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE
OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK
Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl
WFJTNnpDMnhCU3N1TElKY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnjZ7PjlrqW8EtYOAu+b6hGQJc9ueInjYhMC+D2d7FmzZKwUYmn+u7btF431a
VLNtz32C8K+Zx0aux7M78aIAXe/Ls5xez8O1NhkFS7TXmvhOVBEcS5etBniXnhDG
BeN3gAUeNlqvlqe7z6QjpkrSGT+NviSyE1mKc6dfpu3tIuW/jSpOfSnISa8shozN
2b/D30zc2Fn6yk0iNtrUECI+IkS6qZjBx8xp+BBxJSMEQnxamnDwxArLqw15WXgT
EvPEz7MVII//Wb+zkNEVvQj7l7sq7T0Ul4e0TY2sy2dtXAab3l+0tdV5gZ9e/Xna
k9GqF4nomu/I8YjYO744lWLfQg==
-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:54 2026 by rpki-client