
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier: 6+Fa+mNmQzx790BD+Sw+q371RJuTRhG9MtVJLcwltt0=
Subject key identifier: AB:34:E3:9E:31:C1:62:70:1C:CC:15:AC:4C:70:F5:CF:A0:99:0D:5A
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial: 0377
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number: 0369
Signing time: Mon 02 Mar 2026 01:02:13 +0000
Manifest this update: Mon 02 Mar 2026 01:02:11 +0000
Manifest next update: Mon 09 Mar 2026 01:02:11 +0000
Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: S9Vqf9Jtna9Ybbcm3Jo5AbXlwOOTp0RgRb18N4X+wXE=)
2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: m+WKn873Hl55Khy/g6RA/gEeVV9c4cRJl02WKXW/PsA=)
3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: 5bJUFy/NaNMyZ9zgSNCfZmx6vdOpGOHo3QK1QhFuhLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Validity
Not Before: Mar 2 01:02:11 2026 GMT
Not After : Mar 9 01:02:11 2026 GMT
Subject: CN=69a4e194-3ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:38:d1:57:f2:6b:56:fd:e7:c3:27:50:2f:
ff:91:73:94:ed:18:da:ca:21:b6:38:16:e1:f9:1e:
aa:bd:31:7e:e9:25:c6:34:96:72:24:2b:60:a3:d8:
55:4b:af:3d:20:4c:1e:44:f8:dd:a4:16:67:58:b9:
1e:91:64:0e:b6:1f:cc:ab:b7:a1:3a:a6:14:86:ed:
28:69:fc:5d:c7:b4:e0:18:86:67:a4:cc:39:b9:1c:
16:f4:40:91:f2:91:07:8d:78:04:0b:db:a7:37:99:
e6:3c:45:1a:e0:18:0e:2d:d1:3a:8e:f3:74:05:ea:
ef:ed:df:18:e4:64:b0:6d:c8:84:db:42:19:9c:8b:
1f:b6:ff:65:f4:cb:2c:e9:28:03:1c:b2:dc:42:47:
04:6e:17:b4:f0:45:31:b1:a8:48:21:50:44:f0:c8:
cd:58:35:de:0b:1b:ed:3a:7f:30:41:45:6b:f9:58:
b5:4f:60:49:cc:37:9b:bd:95:2e:15:4f:89:2a:27:
ca:f3:34:b1:c9:44:24:5e:8f:cd:6c:db:60:a5:fc:
c8:03:b6:23:e5:48:6b:1d:ea:cc:c9:a0:3f:9d:48:
da:fb:72:30:87:68:79:69:7a:a1:1a:3c:06:3b:04:
70:40:95:29:52:0d:9b:23:b3:79:b8:df:cd:ec:1c:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:E3:9E:31:C1:62:70:1C:CC:15:AC:4C:70:F5:CF:A0:99:0D:5A
X509v3 Authority Key Identifier:
keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:bc:03:2a:88:92:f3:36:d5:42:81:f5:c1:46:33:2f:18:90:
a4:3c:17:7f:1b:b6:c6:2b:a1:cc:5e:12:0f:36:2f:ba:af:6b:
a1:56:af:4b:14:19:b6:11:e4:b8:1d:df:65:bc:e5:92:32:6f:
3c:f4:81:9a:0a:2a:fe:03:1f:c7:73:14:69:11:e3:4f:31:4b:
ac:e4:52:f4:71:21:f9:f8:a9:8d:81:b5:9f:b5:e6:f0:cf:be:
06:77:88:ac:ef:d3:73:e7:e2:87:8e:df:e2:e9:55:9b:69:2f:
94:4e:09:6f:eb:03:a7:93:04:7c:20:92:2d:8e:ac:2e:ae:c4:
de:f4:2a:0f:78:54:8f:37:01:80:fb:d7:e7:5d:69:b3:09:18:
e9:fd:03:16:36:09:b8:f3:06:8b:40:dc:31:c4:ee:b2:ef:db:
68:0f:be:e6:63:98:9a:36:b5:d7:47:c4:53:c9:91:cb:e4:46:
4a:91:65:ba:ce:c2:92:43:de:7b:b8:c8:10:ee:77:50:ee:38:
0f:1b:d6:62:e2:00:04:57:99:fa:7a:fa:43:49:eb:81:8b:df:
7c:24:e7:ad:67:80:cc:a9:29:9b:68:79:d7:0f:41:b3:20:ac:
9c:b8:f9:01:94:bf:91:df:1e:2f:05:ad:4c:ea:12:ae:ea:a2:
2b:19:5c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:44 2026 by rpki-client