
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json)
Hash identifier: l6pw1j3OF34pgeMyKHUS3HjlMB4UvJ8Ri7z0636yoZY=
Subject key identifier: 54:CB:67:38:F0:81:DB:84:39:67:F2:EC:02:AC:ED:EC:03:76:CB:18
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
Manifest number: 94
Signing time: Tue 03 Mar 2026 07:03:43 +0000
Manifest this update: Tue 03 Mar 2026 07:03:42 +0000
Manifest next update: Tue 10 Mar 2026 07:03:42 +0000
Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: 7c4bVwGhJtWqsznPDg9IgDl5shOBuwJwxhetncFWo34=)
2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: iP/6xi2129urspCLbMmJYNgMwMlUN1peIHRT5SM4ZI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Validity
Not Before: Mar 3 07:03:42 2026 GMT
Not After : Mar 10 07:03:42 2026 GMT
Subject: CN=69a687ce-459e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:e3:41:89:23:5f:0e:aa:38:b1:3b:16:8c:
4d:e2:0e:20:70:97:32:13:30:fd:89:b0:ec:57:47:
ab:6c:cb:0a:22:37:bc:98:a1:c4:83:d2:0a:7e:91:
54:18:cf:1b:fc:e5:ef:b3:81:09:7f:d0:63:e6:ab:
57:c1:30:2a:78:12:7c:96:bc:6d:d8:34:8d:4b:a3:
04:39:34:09:1e:68:47:c1:a4:58:90:2f:0c:0c:fa:
ab:20:f3:89:56:49:e5:51:42:b6:8f:fe:e3:c3:fb:
55:95:80:1c:b5:ea:a8:0e:37:a9:40:62:80:f3:fa:
6d:7e:4c:cc:ec:2e:a7:80:50:ff:cb:0f:d4:e8:d7:
b2:0e:5f:4a:a3:81:60:6c:cb:15:87:10:e5:54:d4:
ff:9e:cd:30:74:52:90:be:25:21:a3:19:64:61:6e:
b7:a0:7d:31:f3:37:c6:55:51:3c:42:c2:58:bb:c4:
8c:18:20:ce:fa:12:2a:d7:23:73:08:7d:40:7b:0d:
50:b3:47:e2:e6:ba:b9:de:16:65:92:0d:a7:ed:70:
3e:34:26:f9:19:7e:60:37:33:a6:fd:4b:70:fa:47:
5b:3c:29:6d:71:57:3b:d1:02:7b:c9:7c:e4:08:70:
26:c8:8b:c2:d3:d1:97:5e:db:4b:dc:c2:46:27:41:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CB:67:38:F0:81:DB:84:39:67:F2:EC:02:AC:ED:EC:03:76:CB:18
X509v3 Authority Key Identifier:
keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:ea:09:44:85:ba:ec:7e:a4:ff:3c:32:8f:a8:40:78:94:
07:3d:ce:80:75:51:1a:bb:1b:e5:0b:0e:6b:ed:a1:45:2a:ed:
bb:ff:0a:eb:40:fe:52:1e:22:af:a2:35:76:0d:c9:52:36:56:
1c:9b:8b:ea:94:02:67:54:e0:0b:c5:ea:56:a9:31:56:49:23:
27:d9:8a:91:07:3d:24:a4:64:ab:17:40:49:f9:19:7f:63:d8:
a1:6f:a6:fb:e5:3b:ab:06:cd:c2:25:70:26:b5:7f:7c:53:da:
bb:83:0d:ca:bb:a7:04:2c:e9:6a:1f:99:6b:55:9f:ae:e9:21:
85:a3:f3:0b:ef:92:28:8c:3d:7a:71:80:df:f3:97:3f:18:43:
b4:6f:6c:25:8f:48:9c:85:b8:54:33:6b:ea:9c:59:dd:a0:4f:
c6:68:11:5a:37:1a:1f:d9:7b:ea:40:b7:62:69:99:7d:ea:d8:
c2:d2:16:70:24:92:63:d6:ed:c8:26:86:6d:44:b9:86:de:d2:
00:78:7c:91:8a:b1:eb:20:f2:65:cb:55:8a:0f:4f:2d:64:81:
c0:c9:b8:da:0e:56:64:ec:92:b0:e6:2b:05:60:17:d0:46:ab:
0c:a8:d5:70:94:d0:96:a7:bc:4a:ee:9c:c4:1d:28:1e:01:41:
bb:f0:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:18:46 2026 by rpki-client