
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
File: poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json)
Hash identifier: xWcOz8Lqiop4GfTfwM4/W9m8BdlvV05xK/OscnH1qoM=
Subject key identifier: EA:70:78:A5:25:C4:3F:BE:52:A9:F9:2F:E7:1F:8E:2E:CF:7E:74:DD
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Certificate issuer: /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial: 0448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
Manifest number: 043A
Signing time: Thu 12 Mar 2026 23:49:50 +0000
Manifest this update: Thu 12 Mar 2026 23:49:49 +0000
Manifest next update: Thu 19 Mar 2026 23:49:49 +0000
Files and hashes: 1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: jnhfqi+YN6FEKumrn8pkBbFF1GD6S5DrlpmvGkvBFt0=)
2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: BOEExBy+QaPnsKDJ+gbhFQuFa7d7NxoUneMKG9j7QtI=)
3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: G+lt/1Mwh8N7G8KWZS1xUI3dDM2zaitfuprZkeWdjHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Validity
Not Before: Mar 12 23:49:49 2026 GMT
Not After : Mar 19 23:49:49 2026 GMT
Subject: CN=69b3511e-95d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:68:a8:ee:59:1e:ce:09:15:c7:06:2c:de:
77:2a:58:2a:31:b2:8e:a7:a5:e8:6c:a1:ab:48:5b:
6e:71:e7:fb:fb:4c:62:8d:a7:95:38:74:ac:6d:6c:
de:c2:10:f3:fa:1d:bf:ee:43:ef:70:00:92:26:cd:
cf:db:05:40:40:f1:93:e9:87:ab:39:a5:c3:71:a7:
66:ef:72:9c:d6:4f:3b:78:b4:b7:1a:d2:75:32:6f:
f6:0f:45:84:c2:72:8b:11:91:91:c5:e5:5f:57:b8:
4f:03:f9:ff:1e:ec:0c:92:83:5c:81:47:3b:b2:75:
95:e4:c7:52:0f:61:25:49:d0:e1:70:2b:7e:8f:88:
75:df:6c:b6:52:d2:fa:23:5f:a4:c8:ca:6b:86:a4:
f6:eb:9f:7a:9f:f2:79:66:5c:4d:b2:d0:8f:28:39:
ca:00:bd:db:a8:a9:ba:d0:60:e9:e4:fa:fa:91:df:
67:c9:82:7a:82:12:30:d2:be:6c:a3:d7:e8:31:8d:
c4:06:51:78:83:ea:79:4b:5d:fa:1c:dd:2f:b2:97:
44:fe:18:45:00:b0:a6:a8:8e:c2:d8:c3:28:c2:c3:
a7:ce:69:7d:ca:10:99:56:8b:e5:55:82:63:fc:c9:
c2:f4:69:50:02:5a:6f:1d:5b:07:72:20:d1:d0:8b:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:70:78:A5:25:C4:3F:BE:52:A9:F9:2F:E7:1F:8E:2E:CF:7E:74:DD
X509v3 Authority Key Identifier:
keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:1f:84:1c:a1:22:bc:9b:22:52:91:c3:08:ec:63:b5:cc:b1:
34:0b:b2:1b:6c:1c:32:09:ec:7d:a6:07:48:c2:90:39:b2:60:
31:ba:d6:ed:d7:56:00:c1:13:87:31:15:69:27:20:8f:d8:5c:
d3:d8:d6:67:f9:39:56:4c:02:09:ad:8b:5f:e3:31:00:5a:55:
6d:c8:69:68:e4:c7:78:5c:4e:8a:0b:c0:1a:51:4a:52:01:82:
79:f8:69:01:90:7b:2b:25:96:fe:83:ac:cc:de:e7:f8:89:64:
50:e4:66:db:e5:7a:6c:4e:47:eb:0d:43:8e:c2:8f:fc:db:4a:
1e:a6:c9:e9:29:ea:8b:5f:5a:00:a7:0e:2f:94:ab:e5:12:99:
9b:c4:5d:22:b3:68:3e:e7:48:a8:8e:19:93:dd:f9:ba:d0:c2:
50:a4:38:58:32:dd:d6:71:2a:34:5a:87:ba:d1:ba:59:26:6f:
d4:f1:37:89:70:5b:a9:0d:8f:9e:58:86:62:92:e6:d0:28:fc:
7d:e9:13:87:29:7d:b8:ca:57:fe:ff:a3:1f:1b:fe:fc:d1:cd:
9d:1a:63:aa:e3:30:28:81:21:63:82:48:5f:6c:af:8b:ce:1c:
48:54:30:2d:6f:cc:be:47:d7:af:17:89:24:f0:b2:f6:ad:48:
af:84:7a:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF
NkNFQzJENEUwHhcNMjYwMzEyMjM0OTQ5WhcNMjYwMzE5MjM0OTQ5WjAYMRYwFAYD
VQQDEw02OWIzNTExZS05NWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmj9oqO5ZHs4JFccGLN53KlgqMbKOp6XobKGrSFtucef7+0xijaeVOHSsbWze
whDz+h2/7kPvcACSJs3P2wVAQPGT6YerOaXDcadm73Kc1k87eLS3GtJ1Mm/2D0WE
wnKLEZGRxeVfV7hPA/n/HuwMkoNcgUc7snWV5MdSD2ElSdDhcCt+j4h132y2UtL6
I1+kyMprhqT26596n/J5ZlxNstCPKDnKAL3bqKm60GDp5Pr6kd9nyYJ6ghIw0r5s
o9foMY3EBlF4g+p5S136HN0vspdE/hhFALCmqI7C2MMowsOnzml9yhCZVovlVYJj
/MnC9GlQAlpvHVsHciDR0IscVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpweKUl
xD++Uqn5L+cfji7PfnTdMB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4
QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM
VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjU0Ny82MjZFMTA5NDk4QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9R
ZUV2QnBQOXZvTHZtenNMVTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyx+EHKEivJsiUpHDCOxjtcyxNAuyG2wcMgnsfaYHSMKQObJgMbrW7ddWAMET
hzEVaScgj9hc09jWZ/k5VkwCCa2LX+MxAFpVbchpaOTHeFxOigvAGlFKUgGCefhp
AZB7KyWW/oOszN7n+IlkUORm2+V6bE5H6w1DjsKP/NtKHqbJ6Snqi19aAKcOL5Sr
5RKZm8RdIrNoPudIqI4Zk935utDCUKQ4WDLd1nEqNFqHutG6WSZv1PE3iXBbqQ2P
nliGYpLm0Cj8fekThyl9uMpX/v+jHxv+/NHNnRpjquMwKIEhY4JIX2yvi84cSFQw
LW/MvkfXrxeJJPCy9q1Ir4R68Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:48 2026 by rpki-client