
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
File: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json)
Hash identifier: B44aREnozYiSahkIYxbeqeQPTVEzFNxnwK/54LXakF8=
Subject key identifier: FF:14:AE:AF:F7:43:6E:26:11:E6:5B:FD:F6:72:DB:6D:88:64:C1:A5
Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59
Certificate issuer: /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
Manifest number: 0143
Signing time: Tue 03 Mar 2026 05:01:58 +0000
Manifest this update: Tue 03 Mar 2026 05:01:57 +0000
Manifest next update: Tue 10 Mar 2026 05:01:57 +0000
Files and hashes: 1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: XJfqOHgivSiHVqhjNlVoXMYA7MXSG++txcOKeR11Idw=)
2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: xO1XkrdPpnztC/DOvp1GxSfrdBEGr7OLmqMg43hzTY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl
rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF17A, serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
Validity
Not Before: Mar 3 05:01:57 2026 GMT
Not After : Mar 10 05:01:57 2026 GMT
Subject: CN=69a66b45-ecd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:e5:8d:06:e6:8b:1f:dc:48:be:1f:3b:c5:
b0:7c:37:79:b8:59:0a:c7:53:35:b9:ce:7f:09:dd:
c1:3a:be:c2:77:23:ce:d0:c1:2f:92:8c:9b:24:23:
60:b8:fa:2a:54:f8:26:3c:86:ff:e6:79:0c:a7:c3:
86:be:76:88:58:62:ab:1c:88:e3:36:14:2f:23:76:
1d:cc:bd:39:6e:b6:08:43:fe:8f:d2:f6:26:e0:51:
c7:c4:ab:0a:46:b5:47:7f:b3:69:27:18:66:cb:e0:
74:4b:16:43:8b:45:17:5a:55:28:6f:15:18:61:fc:
7a:4e:ab:37:57:84:35:b0:4b:b0:19:84:b4:b2:c3:
ea:90:1d:62:f2:f2:27:9c:37:28:2a:71:19:64:03:
ae:42:70:38:8d:d8:f7:1d:72:07:4d:d2:3c:fb:63:
cd:61:e6:e1:b2:d3:08:71:fd:8b:aa:76:c9:fb:03:
57:f8:69:66:45:7c:38:a3:e2:69:a3:31:ca:61:99:
56:37:1c:ac:42:c1:9c:45:b7:a2:21:f5:e2:fc:df:
36:34:16:5b:f4:31:ac:86:f1:77:13:0a:58:54:82:
26:b1:c6:db:5e:de:9d:80:1e:da:f8:10:ca:42:c9:
a9:68:be:7e:c8:59:0d:44:76:b8:4e:d7:53:0c:e3:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:AE:AF:F7:43:6E:26:11:E6:5B:FD:F6:72:DB:6D:88:64:C1:A5
X509v3 Authority Key Identifier:
keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:a8:19:13:cf:d9:ee:ea:c1:fc:16:28:34:23:c8:34:32:d8:
19:bb:34:38:06:c3:1f:b3:ce:49:57:f5:f4:91:9d:bc:a2:73:
22:a2:da:9e:95:5a:51:07:df:ca:0b:66:1f:c3:59:97:0f:79:
84:c1:81:67:ba:a1:9a:7b:87:4b:4a:bb:b2:62:83:1c:4e:b6:
00:a4:61:b6:fa:89:2a:9e:dd:f7:56:f6:be:a3:98:97:ea:dc:
c7:5a:1c:ba:f1:28:9f:62:24:4d:08:a2:ed:2e:52:6a:72:e7:
c4:69:c6:93:41:b8:77:7a:f2:cc:83:28:d9:74:bb:6a:45:16:
61:05:a3:34:2a:b6:16:1e:df:ac:b5:e9:1a:39:24:63:2c:6f:
d7:a7:d9:1f:c2:97:6c:48:fc:9c:10:d3:62:bc:fa:d2:58:dc:
6f:72:eb:a5:f6:b1:96:92:b2:3a:a4:f6:9e:2d:02:62:83:d8:
78:dd:de:f3:91:e6:00:c6:e9:32:b1:77:3e:7d:43:e9:94:35:
01:3d:d9:56:63:14:59:90:ea:8d:62:ee:14:64:b4:01:a1:4d:
6a:38:15:5c:06:89:46:3f:b4:18:8f:04:6a:9c:08:bc:17:03:
f9:94:90:f1:d3:c5:27:58:2b:8f:59:95:7c:28:52:95:df:71:
59:34:f6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:10 2026 by rpki-client