
$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File: cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier: dCIeGYqd2fqLFAagDTBnmBJ/PbzTokJw/cXuLvduZWc=
Subject key identifier: BE:AF:C8:2F:36:71:9F:E6:07:2A:BD:81:A1:41:CC:34:FB:0A:F2:99
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial: 083A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number: 0817
Signing time: Sun 01 Mar 2026 22:31:30 +0000
Manifest this update: Sun 01 Mar 2026 22:31:29 +0000
Manifest next update: Sun 08 Mar 2026 22:31:29 +0000
Files and hashes: 1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: wq0ZeGCGiD/9dprsmPl3F1x3S1zRY5P4RMBFTAEOOfo=)
2: 98657342132E11F0B588DB49C4F9AE02.roa (hash: 4PEXYHFWz5mZtCJTbXMqZvp/LxT3XQAOG9EeoF5GdjI=)
3: 99551366132E11F0B588DB49C4F9AE02.roa (hash: VDpveM0eoSa84UFQ8N1uDmaKO7epf7PVbmXBaZghjiw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Validity
Not Before: Mar 1 22:31:29 2026 GMT
Not After : Mar 8 22:31:29 2026 GMT
Subject: CN=69a4be42-02a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:e8:03:e9:90:16:c1:af:1b:aa:6f:5a:61:
62:f9:b9:22:17:f4:21:53:0b:2f:f8:19:91:67:42:
ea:f5:bc:ec:2c:c4:64:33:b6:48:85:a7:3d:2f:79:
6a:c3:b0:c9:4b:ce:2f:3d:64:b9:7f:d7:d4:ff:23:
bf:db:6c:21:15:b7:4c:2e:8b:d0:e2:96:0c:d9:54:
ca:b3:f6:96:37:94:56:d3:2a:60:a9:76:a3:db:c3:
40:20:a3:90:b5:60:68:e7:16:29:bc:19:d7:44:8e:
6e:40:34:63:ea:97:80:27:18:0a:31:3e:85:a1:7c:
c4:b4:b9:06:a0:b7:6c:e6:d5:78:bc:c4:6a:51:8e:
7d:41:54:15:ce:6c:fa:6d:37:3b:d9:fb:33:3b:e2:
3d:ec:a7:52:d0:b4:26:4d:41:1a:96:0a:93:e6:45:
d3:81:4d:24:0c:a1:31:fd:2a:9c:5b:19:e0:0c:4c:
20:5b:c7:f7:60:70:85:ad:bb:25:46:fb:46:6a:f4:
5e:97:ec:b6:9f:8c:06:2c:c5:76:3b:d2:00:bb:d2:
5f:76:53:85:4a:30:8b:3b:11:81:07:1e:de:af:84:
3d:fa:c4:db:91:ae:54:88:48:48:32:b9:2b:ef:4c:
76:ca:8e:2c:df:61:57:d2:14:82:a9:05:44:54:0b:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:C8:2F:36:71:9F:E6:07:2A:BD:81:A1:41:CC:34:FB:0A:F2:99
X509v3 Authority Key Identifier:
keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:a1:f6:c1:7f:67:98:3e:74:d6:55:46:ec:77:9d:2d:43:e3:
eb:18:14:9c:ec:13:0a:a7:dd:17:ea:f9:d9:ba:fa:b7:6d:10:
b2:4e:f3:98:53:4d:88:5d:af:85:2c:cc:a8:21:92:2d:42:2c:
b7:63:34:ab:53:2d:01:ba:08:9e:7a:03:e1:c8:72:b8:0d:38:
4e:64:44:53:95:0f:ec:85:52:7c:cc:a5:1b:61:45:17:05:36:
38:ee:52:cf:10:7e:da:f0:b4:38:ad:00:7a:9f:2a:68:ca:04:
73:20:3b:20:5c:da:03:ce:1c:4f:23:f8:d9:6a:f1:0a:18:0b:
34:6c:5f:cd:49:33:a3:b3:5a:2c:51:b4:cc:41:b6:cf:8c:c9:
15:9b:66:55:f1:53:d6:a4:6c:4d:bd:0a:6b:19:91:3e:9d:34:
0a:f3:4d:59:31:4f:00:29:e4:b9:81:71:ae:b1:53:50:2d:a2:
00:a5:d9:c7:fb:23:d1:18:07:05:49:11:2b:24:57:c4:09:eb:
ec:31:5e:87:f4:9e:7b:e2:56:80:98:1b:b3:ec:7b:c1:e6:17:
64:88:ea:4c:a5:5b:7f:59:7f:d3:6a:78:79:22:3a:30:69:63:
53:7f:2b:89:f8:87:0a:e6:44:a9:66:53:24:6a:f2:51:f4:e5:
af:43:1a:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC
NzM1NzZFOEEwHhcNMjYwMzAxMjIzMTI5WhcNMjYwMzA4MjIzMTI5WjAYMRYwFAYD
VQQDEw02OWE0YmU0Mi0wMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4zoA+mQFsGvG6pvWmFi+bkiF/QhUwsv+BmRZ0Lq9bzsLMRkM7ZIhac9L3lq
w7DJS84vPWS5f9fU/yO/22whFbdMLovQ4pYM2VTKs/aWN5RW0ypgqXaj28NAIKOQ
tWBo5xYpvBnXRI5uQDRj6peAJxgKMT6FoXzEtLkGoLds5tV4vMRqUY59QVQVzmz6
bTc72fszO+I97KdS0LQmTUEalgqT5kXTgU0kDKEx/SqcWxngDEwgW8f3YHCFrbsl
RvtGavRel+y2n4wGLMV2O9IAu9JfdlOFSjCLOxGBBx7er4Q9+sTbka5UiEhIMrkr
70x2yo4s32FX0hSCqQVEVAtEmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6vyC82
cZ/mByq9gaFBzDT7CvKZMB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3
OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODA3RS9DNEI0RTJDNjE3OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhI
RWpZMUJhQ21UZE8zTlhib28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABqH2wX9nmD501lVG7HedLUPj6xgUnOwTCqfdF+r52br6t20Qsk7zmFNNiF2v
hSzMqCGSLUIst2M0q1MtAboInnoD4chyuA04TmREU5UP7IVSfMylG2FFFwU2OO5S
zxB+2vC0OK0Aep8qaMoEcyA7IFzaA84cTyP42WrxChgLNGxfzUkzo7NaLFG0zEG2
z4zJFZtmVfFT1qRsTb0KaxmRPp00CvNNWTFPACnkuYFxrrFTUC2iAKXZx/sj0RgH
BUkRKyRXxAnr7DFeh/See+JWgJgbs+x7weYXZIjqTKVbf1l/02p4eSI6MGljU38r
ifiHCuZEqWZTJGryUfTlr0MaDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:54 2026 by rpki-client