
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
File: D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft (raw, json)
Hash identifier: gRSLCD+ab3v+XjoT8uBQguJHAj+u+XHZu3qO6YXBgr4=
Subject key identifier: 49:20:6B:52:26:B5:3F:A4:54:E5:DD:DC:9A:55:60:A2:EE:88:B7:F6
Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Certificate issuer: /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
Manifest number: ED
Signing time: Sun 01 Mar 2026 07:31:19 +0000
Manifest this update: Sun 01 Mar 2026 07:31:18 +0000
Manifest next update: Sun 08 Mar 2026 07:31:18 +0000
Files and hashes: 1: D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl (hash: cPE9E9+rCXJc5Ct7iceVSeN0nI78iD2hz6qFQLWrN4s=)
2: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (hash: 1NC7oxcWCYbSrIDO89YNV0w8KqRVSyDIVR5Yl6QmGd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Validity
Not Before: Mar 1 07:31:18 2026 GMT
Not After : Mar 8 07:31:18 2026 GMT
Subject: CN=69a3eb47-3a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:67:85:c8:5e:3f:aa:74:7c:9f:b8:72:3b:
dd:0f:97:48:63:74:d5:2a:79:b6:ab:00:17:21:94:
4d:39:e9:a3:21:92:84:35:79:63:48:93:70:9a:b6:
65:7f:43:c0:f7:b8:5e:a8:fd:0a:f1:9a:cd:a4:89:
e4:ae:3c:d1:4c:f0:25:e1:f9:8f:b1:7e:cc:bb:0a:
55:db:28:ae:3e:03:56:00:61:be:24:d3:44:5d:60:
a5:fe:e4:ec:0c:85:ea:11:1c:75:63:fe:d1:c7:f1:
25:e6:f9:b6:33:10:db:8c:c2:43:ea:3d:00:75:56:
d3:44:5d:d9:f7:38:bf:27:7d:df:ea:31:0a:a3:b6:
30:49:c8:34:92:d0:7d:eb:37:89:46:fe:43:b9:ae:
aa:cc:9b:5d:bd:d4:6d:0b:e5:0b:b4:1d:db:f9:31:
5b:51:a1:88:99:cd:d9:46:3e:14:f1:08:df:b6:2f:
a7:10:04:d4:b5:de:e7:9f:ce:0c:27:6a:96:21:db:
2c:77:61:fd:a1:32:15:11:3e:58:dd:66:29:c3:25:
67:40:43:e7:e4:98:ee:a6:0f:7d:7a:9e:16:31:6b:
67:a3:6b:a6:3e:6e:fa:8b:a5:88:3b:97:5d:d8:d5:
63:d4:b2:6d:70:0f:19:68:8e:fe:7d:fc:0e:eb:84:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:6B:52:26:B5:3F:A4:54:E5:DD:DC:9A:55:60:A2:EE:88:B7:F6
X509v3 Authority Key Identifier:
keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:64:54:27:3c:c5:16:5c:df:04:0e:da:bd:ac:94:be:0e:57:
5d:f2:0a:de:68:18:2f:12:ad:e3:2a:92:a8:19:76:f0:b1:8a:
98:21:f5:b6:76:37:97:8f:4d:ba:6c:f5:94:02:7e:c6:14:6a:
07:a9:15:a7:0e:53:20:cb:82:bc:2d:ae:57:57:d8:ad:08:2d:
1b:db:b1:0f:9b:f4:1b:12:f1:48:f5:5c:b5:ea:50:1b:57:b3:
b8:01:c1:1c:e4:ff:9a:1a:ae:1d:51:66:ea:c3:50:5f:99:6f:
14:34:c7:10:a9:fc:db:6e:ff:e8:4b:03:ec:d5:b1:a2:fc:42:
06:5e:9b:41:04:68:fe:3f:8d:7c:ba:1e:76:35:6a:9d:ac:f6:
64:2b:6a:c9:f8:62:93:de:7c:e2:35:c6:e6:a5:ce:83:b4:b7:
0d:f3:77:de:85:02:82:c5:64:f3:38:a9:d0:f9:4d:2b:26:ea:
3e:a2:89:c5:e5:a1:7a:4b:f2:cf:5b:dc:74:03:69:7d:72:84:
05:72:dc:0f:56:73:7a:9b:97:cb:ad:2e:a8:bf:44:d8:af:6b:
70:89:d5:d3:ad:99:94:bb:5a:ad:4d:84:c4:56:5c:1f:0c:81:
5c:23:f0:45:26:05:a7:6e:82:da:16:bb:83:90:f4:f4:77:3f:
38:84:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:06 2026 by rpki-client