
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json)
Hash identifier: lE+bT5SPXugIy/zk4IrMlb9TPmNAI95jY26hfem0QKQ=
Subject key identifier: E3:28:CD:3A:71:75:F9:0E:4A:21:36:53:AE:50:41:FB:ED:5C:B0:C1
Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
Manifest number: 01D7
Signing time: Mon 02 Mar 2026 14:08:44 +0000
Manifest this update: Mon 02 Mar 2026 14:08:43 +0000
Manifest next update: Mon 09 Mar 2026 14:08:43 +0000
Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: p9PbdwF4FGutcE5fMDMmArSS8IveXw3X4shACOD/FNI=)
2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: k8e7fh/Sk4baSRucN3DJUvfanj8+Y0iTHkIRT27bbss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Validity
Not Before: Mar 2 14:08:43 2026 GMT
Not After : Mar 9 14:08:43 2026 GMT
Subject: CN=69a599eb-3335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:92:d1:b0:f9:05:24:8d:d2:de:45:28:8b:
7a:3f:70:06:d0:b5:40:89:e9:31:e3:c5:d0:0e:a3:
20:a9:ae:ac:c1:58:6b:0e:ad:e0:7a:35:2b:69:86:
bc:6e:d2:a2:2f:09:4d:9e:2f:af:d3:d4:ae:e9:fd:
79:d2:53:2b:cb:2d:a3:92:c3:f2:5a:83:e6:56:c4:
a9:e3:de:6b:94:ad:e5:2c:51:79:85:f1:a6:51:46:
d1:9d:77:ae:eb:7d:58:6e:67:e7:c7:28:0b:8c:38:
7c:0f:d9:92:a4:5a:cc:41:0b:80:53:b0:15:9b:e2:
31:f8:49:47:4a:9a:89:24:47:59:1b:92:e5:d9:62:
54:0b:7f:e0:bb:2a:fd:ed:95:66:8a:12:54:60:f0:
cf:e4:dd:73:06:93:a2:a8:a5:78:da:15:a5:d3:1e:
19:ec:da:71:6c:45:7c:0a:c6:9e:87:c5:33:10:90:
60:52:9a:a8:ad:f1:9b:be:76:a3:47:56:29:72:4a:
db:c8:ed:8a:46:ca:82:e5:af:eb:d0:a4:aa:95:b4:
9e:11:70:dd:b7:38:97:b6:a1:b8:db:c0:9a:ab:03:
5c:c1:10:22:e7:89:08:38:82:21:c4:a3:4a:b0:8f:
c5:20:b3:3a:a5:da:ae:83:8f:af:ca:0c:8b:da:7e:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:CD:3A:71:75:F9:0E:4A:21:36:53:AE:50:41:FB:ED:5C:B0:C1
X509v3 Authority Key Identifier:
keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:1a:9e:91:2a:6e:3f:7f:3b:1b:2e:4b:78:31:99:c9:e9:0f:
e5:db:ce:18:bb:c3:06:ba:c0:4f:5c:26:61:12:40:59:17:9e:
79:77:36:53:c7:b3:ac:ad:83:fe:9f:a0:7e:fe:02:18:6c:d0:
2a:5f:56:21:14:ee:9f:dd:9e:85:ac:0b:d4:9d:ec:b4:53:ae:
72:7c:cb:95:95:ae:ec:eb:a3:d7:66:ab:b7:1e:79:7b:f0:de:
bd:c8:d1:af:df:9b:63:e9:87:a5:60:2a:d6:dd:6f:26:6a:14:
0c:9e:42:66:97:5f:53:6f:be:d9:39:54:3e:cd:e5:d2:22:82:
82:41:5f:00:1e:cd:b1:01:5f:a5:b9:66:5b:6f:ed:b4:8b:76:
33:27:9e:57:7a:79:ab:30:ee:f2:7a:3e:80:bc:38:4d:d0:13:
1f:87:d1:04:4a:a2:01:e0:ea:fb:77:68:c2:7c:85:85:ac:81:
0f:f7:cd:33:56:e9:77:4c:e9:7a:a8:81:77:80:b6:6d:af:26:
c4:6a:44:af:a2:61:5d:ab:c1:9c:0b:c4:51:07:83:0e:51:66:
a4:0e:42:90:bf:7e:0a:09:3a:77:5d:f0:6e:cf:db:a0:3e:68:
f2:d0:1f:cb:c3:19:5f:33:77:c6:96:42:4a:32:ad:28:ef:61:
6e:ff:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:20 2026 by rpki-client