
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
File: 0S_1veXU0upxiMsALH_wFtyZTXI.mft (raw, json)
Hash identifier: 81UuAUfwg1Y6uyb3BKYobRbv1Zgl+4+bS4AHmLrcTm0=
Subject key identifier: 8C:51:71:A8:BB:B7:57:32:91:2A:41:D5:C3:13:75:8A:04:29:C6:03
Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72
Certificate issuer: /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
Certificate serial: 05AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
Manifest number: 05A6
Signing time: Mon 02 Mar 2026 23:14:49 +0000
Manifest this update: Mon 02 Mar 2026 23:14:49 +0000
Manifest next update: Mon 09 Mar 2026 23:14:49 +0000
Files and hashes: 1: 0S_1veXU0upxiMsALH_wFtyZTXI.crl (hash: DcHoLYwLlXQpdVJcK5dlrNmti6zqocJkTFKH4kLP+o0=)
2: 9CD333C6B92B11F09402D810C4F9AE02.roa (hash: g/iViSJomlNp1cYO1eJotO/CO79RIUjeoIEUf9uvmn8=)
3: C6212596B5FF11F0A3F6A41AC4F9AE02.roa (hash: vjcVmpY5exF0KvvFr7MQCETy6G444Gcd8QqEnM4obso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl
rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 23:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1454 (0x5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
Validity
Not Before: Mar 2 23:14:49 2026 GMT
Not After : Mar 9 23:14:49 2026 GMT
Subject: CN=69a619e9-fe6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:22:3a:ab:bc:82:10:3a:08:7f:ff:b6:74:
5e:a7:9d:26:10:60:e5:ea:fe:0d:bc:34:61:a8:dc:
b2:20:dd:b0:cb:8f:d7:13:8a:dd:34:4c:cd:75:4f:
ae:ce:28:af:ad:c2:ab:a3:f0:ed:c9:36:22:e9:56:
aa:ef:3a:2f:cd:03:91:5b:11:99:8e:c3:9b:3c:1e:
38:fc:8d:26:11:32:71:71:1b:11:a1:26:fd:8e:7d:
c8:97:41:38:0b:12:2e:21:64:6a:24:6a:ec:05:93:
cc:62:bd:9b:52:8a:b5:06:da:9a:01:c0:a6:bd:8e:
af:08:20:cb:25:d4:22:f0:26:3c:4f:3f:0d:bb:51:
db:c8:dc:a3:61:a4:66:ce:73:09:c1:b1:c7:53:e6:
5c:80:68:70:64:f0:07:30:66:e1:ac:d2:b8:f6:72:
30:9f:a4:6a:4a:37:a9:0c:c8:03:0e:8e:db:1a:2e:
8e:bd:31:57:17:51:75:c4:05:96:e3:2b:f0:c2:7e:
2d:29:de:8a:89:17:00:aa:9f:71:df:df:6b:4d:c5:
db:cd:29:3a:9e:14:f6:1b:f5:7b:b9:64:ec:91:3a:
b3:71:a8:d0:eb:cc:f9:66:39:49:47:51:b4:c8:9c:
96:6f:3d:46:8b:a7:09:b3:92:ff:74:0c:94:14:12:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:51:71:A8:BB:B7:57:32:91:2A:41:D5:C3:13:75:8A:04:29:C6:03
X509v3 Authority Key Identifier:
keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:18:b5:9d:41:08:4c:d5:10:02:ff:51:57:7e:4b:34:ac:83:
3b:58:9c:15:8a:3b:97:9d:b0:b6:51:ae:01:9d:5b:09:4b:6a:
83:f3:25:1a:a5:ae:f7:9f:85:75:18:34:77:9c:6b:b1:f4:d4:
e0:77:8d:78:d0:3a:6f:6c:29:09:b7:b6:8b:f4:fa:54:97:30:
f2:be:74:40:69:6e:8f:69:e6:08:7e:37:d0:db:c7:e9:2e:d2:
f1:c6:42:3a:96:2e:8b:f6:6c:c1:d6:0d:8b:de:08:99:c6:10:
ff:63:97:11:7c:24:91:c9:34:e9:aa:35:d0:99:a5:75:77:b1:
b9:85:75:96:da:5c:cf:8e:39:a4:8b:9f:25:84:8b:15:20:86:
98:23:74:4e:0c:9d:f2:10:8c:0b:41:a4:3d:5c:42:bc:f3:95:
87:15:f1:34:cc:24:8c:d5:85:6a:56:71:ab:f2:22:a6:9a:51:
bc:4b:7c:b5:4e:f9:23:b5:8d:cf:5f:97:c8:cd:b0:85:22:51:
d5:ff:1a:2f:eb:ab:0c:60:54:9b:17:d1:31:3e:0f:62:34:a7:
f4:a5:3e:76:09:eb:de:98:a5:60:cd:06:7b:b3:16:05:cb:e8:
bf:29:ff:12:4a:e3:89:9e:93:44:40:9a:77:18:21:f7:c8:a8:
cc:25:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:36:17 2026 by rpki-client