
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json)
Hash identifier: jRDb8VmCvIyTHYMHnXmf2f08GrwWvbo+MKECdyW3TNY=
Subject key identifier: 3C:D1:A6:90:9F:81:6C:37:42:51:8D:97:5B:B0:29:78:C3:BB:04:89
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial: 07F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
Manifest number: 0777
Signing time: Mon 02 Mar 2026 01:02:49 +0000
Manifest this update: Mon 02 Mar 2026 01:02:48 +0000
Manifest next update: Mon 09 Mar 2026 01:02:48 +0000
Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: vmCgxQcPfZ3w0F1MfJpE/L0+BnRmSEfoneTIW4/FWts=)
2: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: +eX/IhPIgzcgEej3nFPqU8lcNjTSKxrNxHm69wcEBYA=)
3: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: TXZ7H4bYoa2tMoTjTtlYu/ju1DHWYH5bM4fA2XxysBg=)
4: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: SzlEPDJi9zAc0zG3xIXsTR02HbNoFM1IdbpFsslC/FY=)
5: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: dl0KaIPqQRrW321Czs7YhzYqJGnPgpM9OmusVMr+VRk=)
6: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: sWPtrrp7wjC9q2Z2Pyt+2v9XwkvTK+NuUGOz/EsAmyM=)
7: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 7g2GzMpbsXg0SC1u5pI0BA7KwxetbBq/6LlcQTkxPZY=)
8: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 7JuQ2G6yFzq4/l/uV73erQ4OY/dKSaAKR4JLpyv+3gw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Validity
Not Before: Mar 2 01:02:48 2026 GMT
Not After : Mar 9 01:02:48 2026 GMT
Subject: CN=69a4e1b9-f185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:9d:c7:14:95:ca:82:81:cd:e5:27:06:8a:
3e:c4:3f:e5:50:2b:82:70:54:62:32:10:03:3c:46:
14:23:1e:a9:68:f9:1b:4b:af:87:3a:87:8b:44:24:
14:56:3b:e7:a2:c4:4f:42:e7:d7:0d:35:df:ee:f8:
a4:09:1b:9e:06:30:94:4f:aa:d7:c4:6e:2d:45:5f:
be:fc:64:7b:72:14:cf:b4:d6:f3:5a:76:b3:66:11:
14:33:d2:8b:ff:c5:f2:35:57:3c:1a:1b:f3:54:24:
f3:20:4f:d7:a2:e6:89:8e:c0:43:ef:61:9e:f2:fc:
e3:fa:56:46:41:1e:51:6f:39:6f:02:9a:63:67:0e:
42:1e:d7:cf:43:10:9d:dd:94:3a:97:0d:2e:19:3a:
25:dc:c6:29:88:fd:17:c3:56:5e:49:1b:9e:93:d6:
ee:60:f6:b8:2e:9d:5d:df:a2:7c:21:e9:03:7f:5d:
ba:07:48:3b:20:19:3e:02:f0:da:5b:ec:09:a3:36:
dd:0e:1d:e8:91:26:a0:5f:b9:36:cd:7e:6f:d9:1b:
00:bf:aa:95:63:ab:a4:e8:68:26:33:a9:a2:73:77:
0d:72:7d:c8:9b:07:78:4b:ba:0d:91:90:a5:c2:c0:
0c:01:ac:63:d8:3f:6d:82:36:cc:d3:07:50:33:67:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D1:A6:90:9F:81:6C:37:42:51:8D:97:5B:B0:29:78:C3:BB:04:89
X509v3 Authority Key Identifier:
keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:4c:9e:19:f3:e3:f1:2c:05:b1:3a:b7:94:c3:76:27:5f:ac:
0e:ae:56:55:ae:52:7e:c7:46:7b:24:5c:c9:ea:d9:0b:6b:7f:
5e:3b:05:2b:d7:32:0c:c5:c9:dc:b6:04:a2:16:6b:28:e7:4e:
75:00:d1:2e:91:b7:ba:00:dd:95:f3:7f:50:0d:98:e0:82:7d:
d7:24:e2:4c:45:fd:fc:0f:d8:d7:d0:7c:4f:16:a5:64:76:27:
88:e8:dc:d3:29:b2:b7:25:f0:06:63:7e:4f:b2:5d:aa:d8:c5:
06:1a:78:b0:fb:17:61:34:fa:de:38:8c:aa:60:f3:b5:8a:b3:
44:c3:2e:de:38:1f:1a:77:52:10:c6:c8:e4:c0:09:eb:cb:c8:
ba:2f:a1:c0:34:5f:49:3f:d3:d0:fd:70:65:dc:f8:a8:28:f3:
ba:fc:12:14:6c:6c:78:da:4e:79:d6:f2:f2:0f:61:64:cb:27:
08:98:d8:9a:41:cb:c6:7c:c6:37:06:a4:68:d9:9f:de:fd:ad:
a4:f9:69:3a:ce:e9:f1:82:81:4b:b3:d0:ce:ed:3a:05:b1:60:
c1:9b:c9:6f:7f:a0:d0:1c:4f:6c:e5:b7:1a:e5:be:14:cd:42:
52:14:25:d1:91:78:dc:fb:d0:a6:d5:4f:f1:7e:0b:16:e3:4a:
63:7d:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:33 2026 by rpki-client