
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json)
Hash identifier: 8EIDRCSiJcxaH3uiMRLcbAsn/i090CoXO5pXDdkvN1M=
Subject key identifier: 3F:72:43:13:FE:46:29:C7:F0:7E:7A:0F:30:13:B9:F3:74:5A:FF:B4
Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
Manifest number: CE
Signing time: Mon 02 Mar 2026 00:01:21 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Mon 09 Mar 2026 00:01:19 +0000
Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: oB/X92wGN7jw4Gx52A+XlbCqMXBt0SVtaU0N7EAgjK8=)
2: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: 06Hho+RJykAUvzboSlu1tF6rcNxA0i0LVsGzl68LWWI=)
3: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: roA3vy8x+jf66csilJCthToT1WHohR3rxK/y2E1bU7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 9 00:01:19 2026 GMT
Subject: CN=69a4d350-9786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:43:5a:cd:5a:d4:ae:83:d4:1f:c4:12:b4:
f8:d9:6f:89:46:0e:5a:49:9b:dd:c9:60:53:09:af:
e8:e0:39:25:aa:31:da:f6:ee:00:09:f9:c8:74:6b:
2f:c6:4a:d2:27:3a:b9:1f:ed:c8:7f:8f:4a:8c:1d:
ce:4e:18:10:34:7c:53:57:97:7c:2a:f5:18:9b:d1:
5b:8a:c2:a8:6c:25:55:a5:55:19:c6:26:9d:5a:87:
80:5b:8a:11:17:c8:48:87:0a:97:31:e6:39:d6:ee:
b3:a1:e8:58:62:b5:07:a0:77:40:ee:23:d4:fe:c9:
b5:a4:26:52:e9:54:25:7c:d5:a6:de:22:16:ca:7b:
94:b8:ff:d1:45:9b:c1:97:fb:99:79:ed:0c:1e:27:
75:6c:18:4e:6d:d3:09:4b:77:ab:b7:0b:09:93:98:
3f:bd:b4:da:7c:39:93:da:a1:d0:05:4c:72:f8:c0:
8e:d9:1c:a3:9b:a3:cf:be:0d:52:ed:e7:8b:84:e2:
9a:ae:9c:e1:e8:45:64:dd:91:db:29:53:41:b2:0a:
7f:00:48:50:c7:10:d0:3a:fc:d1:8f:e6:51:e3:47:
73:53:7b:c6:89:54:3e:06:d5:cf:7f:3c:7c:30:fc:
8d:c1:79:7c:eb:c3:6f:fe:02:89:d2:9d:22:f3:c1:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:72:43:13:FE:46:29:C7:F0:7E:7A:0F:30:13:B9:F3:74:5A:FF:B4
X509v3 Authority Key Identifier:
keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:5c:57:7c:5e:8a:9f:51:1b:03:20:c1:18:65:8e:d4:78:2a:
2e:a6:78:17:75:16:03:ec:9c:06:50:37:6d:10:eb:16:db:fb:
d0:5d:af:c5:c2:5e:ca:e9:36:c3:b3:a9:7f:3f:62:9e:2d:25:
1e:57:0f:6e:3c:15:7c:f5:70:9a:16:5f:83:96:89:a2:70:0f:
8b:be:01:22:45:d7:d5:79:86:41:3d:00:d2:f2:4e:8a:46:b6:
9a:5c:a8:7f:b4:7f:c9:8d:c7:7b:8a:a1:55:18:80:2f:c1:16:
c8:01:7b:90:3a:c5:8a:09:cb:94:61:b4:64:a0:54:35:7d:55:
25:cf:de:d2:cf:a1:e0:56:8a:a5:5a:68:86:04:52:6e:e7:1c:
a0:c9:26:a9:56:47:6b:40:47:6d:77:97:83:52:98:5f:3e:34:
20:41:66:1b:8a:32:1e:01:54:de:55:e5:71:e7:bb:8e:8c:d8:
23:c3:d2:7a:54:9f:2d:18:c7:2f:2b:f6:49:53:d2:58:01:f8:
c7:69:02:66:47:cb:56:92:42:9c:37:55:11:b0:dc:16:c8:03:
8c:11:1a:5f:74:f1:d2:39:ba:ae:d4:f8:db:a9:44:3b:cd:81:
08:ff:86:4d:31:11:b8:6a:de:2a:ca:1f:21:ea:90:e5:97:b1:
27:1b:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:53 2026 by rpki-client