
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
File: MFikabZ9AwcsLYo4Xp8qq7oTTis.mft (raw, json)
Hash identifier: WXfxFQg4cgsBckcZMYe1xoxvhy6vgdcDCU4U6ooT6c0=
Subject key identifier: 29:54:9F:5C:48:07:1F:99:0C:0F:9B:DD:47:6A:B3:CF:7A:49:56:E2
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 07CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
Manifest number: 079D
Signing time: Tue 10 Mar 2026 21:10:30 +0000
Manifest this update: Tue 10 Mar 2026 21:10:30 +0000
Manifest next update: Tue 17 Mar 2026 21:10:30 +0000
Files and hashes: 1: MFikabZ9AwcsLYo4Xp8qq7oTTis.crl (hash: F2ps/Kfx9l/WPQPBCcwM9i6wDTH95BIBAzF09yxwm4A=)
2: 446CB34270E711F083707432C4F9AE02.roa (hash: kZy79YthAxUXnqeeWJ0YITudamfKZP7o+VZk50JTteM=)
3: B791EB5251A811F08D434B5BC4F9AE02.roa (hash: Yv4gel1CvyBk9MP04CS6oXlyji+0CdFjC5TBaKzGRfE=)
4: 62884F1AB6CC11EF84CBC45FC4F9AE02.roa (hash: AXDH2N6IFT5Fud9AQTkuO+onQ48n5ZtmHoBIWEhfafk=)
5: 7CA749FCF63E11F080BDB1B6646F56BC.roa (hash: u2rDocooyxiz9s72SCuMZgdQBeeYVSQpawmphR3YaZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 21:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995 (0x7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Validity
Not Before: Mar 10 21:10:30 2026 GMT
Not After : Mar 17 21:10:30 2026 GMT
Subject: CN=69b088c6-e3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:a0:3d:08:05:3d:b2:8d:b8:27:4c:42:47:
fe:16:ac:2f:30:c6:73:19:dd:8e:30:66:fd:98:c1:
33:b2:3b:ff:5d:41:65:cc:81:02:03:c6:e2:73:e1:
47:0a:15:b1:35:0a:2c:d2:09:4a:8b:67:d4:08:b2:
e2:18:19:84:09:ac:66:4d:ca:6f:e1:d5:92:db:75:
06:de:d4:31:2f:30:cb:d1:4e:30:42:53:1b:a6:5c:
2d:b3:ec:c4:bd:5f:42:e2:a0:ab:50:2e:36:b6:2b:
7d:54:7c:c5:81:36:ee:1b:dc:e8:44:46:20:6a:cf:
a1:c8:c1:48:22:5d:4c:54:a0:6b:22:4a:d2:1d:41:
40:38:b5:08:0e:af:1e:d0:e7:3d:ff:28:da:84:1b:
64:6a:dc:26:f3:6e:1c:f8:ed:5f:37:11:56:29:43:
c9:61:12:68:64:9a:f0:de:29:eb:b9:0a:43:6c:fd:
8b:2f:49:25:28:f0:b3:08:f1:2b:7f:ff:6f:bc:f5:
d1:f3:72:a5:c7:35:08:85:d3:ff:8f:d6:d5:e3:04:
84:80:fa:fa:3d:1b:ac:6f:7f:78:80:33:26:3c:9f:
be:34:65:0f:61:ed:1b:09:e8:42:d0:52:7e:fd:ab:
17:b6:14:32:ca:ed:bb:c8:da:2a:b4:3f:77:a4:e6:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:54:9F:5C:48:07:1F:99:0C:0F:9B:DD:47:6A:B3:CF:7A:49:56:E2
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:29:83:7b:b4:96:04:c1:de:9f:8b:2c:9f:89:a1:50:3c:f3:
c3:83:26:88:55:a6:b7:0c:b1:6b:90:e5:87:1b:17:9c:12:5a:
09:2f:15:60:c4:bf:8b:8d:6b:57:0f:d0:f1:e4:25:0d:50:4e:
a1:87:d7:90:53:61:72:ec:ce:98:a6:10:33:41:c2:25:41:19:
31:29:54:34:b7:4f:74:02:a2:70:db:58:42:d8:46:e3:30:9b:
a3:32:d7:49:cf:e7:92:a7:10:6d:f7:83:f6:fe:e5:16:f5:51:
c8:ef:1f:37:37:28:10:b3:a7:51:b5:75:9b:a2:fc:74:e8:d0:
45:15:9d:52:9f:73:70:88:3d:9d:f9:5f:88:7d:3a:b2:63:26:
11:bc:16:78:44:c9:aa:c0:f3:33:f2:76:45:76:2d:1b:41:7c:
3f:d5:e5:e1:bb:f1:d9:8f:73:0e:5e:3b:7d:3f:fc:c6:c4:8a:
5b:15:00:e1:f4:00:08:8c:cd:18:4e:50:ce:79:4a:be:48:fa:
81:60:dc:33:03:c3:20:a9:bd:01:07:4b:08:5e:21:b3:a3:23:
73:84:b8:36:f0:48:bb:d3:95:4a:67:d0:ec:74:da:b3:04:0b:
79:2c:36:19:e1:ff:cd:5e:c0:68:28:91:63:ec:10:69:32:b3:
c1:01:5d:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjk2NjUxMTAvBgNVBAUTKDMwNThBNDY5QjY3RDAzMDcyQzJEOEEzODVFOUYyQUFC
QkExMzRFMkIwHhcNMjYwMzEwMjExMDMwWhcNMjYwMzE3MjExMDMwWjAYMRYwFAYD
VQQDEw02OWIwODhjNi1lM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxhCgPQgFPbKNuCdMQkf+FqwvMMZzGd2OMGb9mMEzsjv/XUFlzIECA8bic+FH
ChWxNQos0glKi2fUCLLiGBmECaxmTcpv4dWS23UG3tQxLzDL0U4wQlMbplwts+zE
vV9C4qCrUC42tit9VHzFgTbuG9zoREYgas+hyMFIIl1MVKBrIkrSHUFAOLUIDq8e
0Oc9/yjahBtkatwm824c+O1fNxFWKUPJYRJoZJrw3inruQpDbP2LL0klKPCzCPEr
f/9vvPXR83KlxzUIhdP/j9bV4wSEgPr6PRusb394gDMmPJ++NGUPYe0bCehC0FJ+
/asXthQyyu27yNoqtD93pOZJhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClUn1xI
Bx+ZDA+b3Udqs896SVbiMB8GA1UdIwQYMBaAFDBYpGm2fQMHLC2KOF6fKqu6E04r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTY2NS82RDBEMTJCODRC
RjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3Y3NMWW80WHA4cXE3b1RU
aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01GaWthYlo5QXdjc0xZbzRYcDhxcTdvVFRpcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTY2NS82RDBEMTJCODRCRjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3
Y3NMWW80WHA4cXE3b1RUaXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmymDe7SWBMHen4ssn4mhUDzzw4MmiFWmtwyxa5DlhxsXnBJaCS8VYMS/i41r
Vw/Q8eQlDVBOoYfXkFNhcuzOmKYQM0HCJUEZMSlUNLdPdAKicNtYQthG4zCbozLX
Sc/nkqcQbfeD9v7lFvVRyO8fNzcoELOnUbV1m6L8dOjQRRWdUp9zcIg9nflfiH06
smMmEbwWeETJqsDzM/J2RXYtG0F8P9Xl4bvx2Y9zDl47fT/8xsSKWxUA4fQACIzN
GE5QznlKvkj6gWDcMwPDIKm9AQdLCF4hs6Mjc4S4NvBIu9OVSmfQ7HTaswQLeSw2
GeH/zV7AaCiRY+wQaTKzwQFd9A==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:39 2026 by rpki-client