
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json)
Hash identifier: x5/Wt2zmjdKVG8K5PwEmxeTXkC8SHtm6T0Xrzr0QScM=
Subject key identifier: E8:7F:C3:0C:5B:9B:B5:FC:77:F9:03:11:BC:E8:7D:BC:A3:65:E0:7D
Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6
Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
Manifest number: 01EF
Signing time: Mon 02 Mar 2026 03:00:10 +0000
Manifest this update: Mon 02 Mar 2026 03:00:07 +0000
Manifest next update: Mon 09 Mar 2026 03:00:07 +0000
Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: mb32VifhaI8VZsd6Ie7LO+0FUux5WMxPl37MtldBic4=)
2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: oX5jPgoEnJEiktMzwRJVvIVKVxoixwhb1Y5ipQvJJlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl
rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
Validity
Not Before: Mar 2 03:00:07 2026 GMT
Not After : Mar 9 03:00:07 2026 GMT
Subject: CN=69a4fd39-10ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:4b:ec:fe:c2:fd:fd:c5:94:62:96:45:aa:
30:22:3b:b3:d6:e8:04:47:d0:06:7e:66:92:44:a3:
3b:bb:c5:d6:d6:6c:f5:e1:18:09:56:d0:7a:ce:e4:
e7:d2:5d:04:db:79:06:9e:28:96:c8:d1:82:93:d4:
e0:58:8f:13:2c:8a:d9:cf:a7:b2:a5:66:0a:3f:e6:
2f:e6:b7:c3:39:b4:30:48:e6:50:22:41:de:eb:fc:
7c:e2:4f:71:d2:01:34:5b:63:18:42:7a:a5:83:5c:
9f:8e:42:36:a6:8a:a3:09:65:fd:e0:72:66:13:5f:
4d:81:bd:63:b1:d8:70:7a:06:64:9c:e5:31:85:99:
85:21:d3:52:a2:0a:df:01:d9:37:9f:9c:26:bf:93:
61:a6:f4:b6:ae:cb:b0:7d:86:38:4f:d5:64:d3:1c:
39:bc:bc:8e:50:ac:86:16:8b:9e:97:c1:4e:d2:7e:
f5:95:e9:05:32:34:f8:c3:18:fe:57:ca:fa:75:3c:
45:28:4b:0a:73:d1:d6:1b:34:5d:48:f7:ab:69:82:
fb:9c:08:cd:59:2e:49:11:7c:e1:2e:40:9c:15:2b:
2d:8a:8c:26:fb:12:b4:f2:72:db:17:95:c5:63:b0:
83:5e:99:c3:1e:19:3a:20:6a:cf:69:fa:1c:95:a4:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:C3:0C:5B:9B:B5:FC:77:F9:03:11:BC:E8:7D:BC:A3:65:E0:7D
X509v3 Authority Key Identifier:
keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:de:c5:ba:8c:7b:c9:e7:25:74:c5:a1:0c:f7:0f:7c:cf:6f:
d4:7f:73:1f:c7:ba:e4:09:86:4f:90:15:a0:39:ba:72:1b:ae:
b2:a7:b5:d5:0c:f3:f1:dc:ca:fc:ee:a4:f2:7a:d5:a5:75:eb:
02:92:5d:30:25:d2:10:60:18:5b:55:f7:b2:af:e4:eb:74:22:
c8:59:c3:c9:58:30:e3:45:2f:32:d2:f4:f7:df:7c:95:ce:a4:
db:8a:ce:98:83:34:29:df:22:63:e1:64:80:18:55:4a:d2:6a:
7c:ca:f5:f5:33:26:82:62:ca:d6:9e:61:50:1a:4d:17:b0:da:
ea:fe:1a:b2:f5:1a:2e:1d:3c:00:f8:07:ed:ea:55:ff:31:a0:
5a:d3:d2:fe:41:d8:9c:d0:92:13:94:fe:ad:24:20:39:f6:78:
4f:d4:e9:07:a0:89:f7:a0:2f:c0:3f:47:7b:b0:0c:9f:08:6a:
ab:2c:98:52:7c:26:14:f7:a9:42:f0:66:3a:a5:12:df:45:16:
f7:37:8a:2b:74:a6:11:a6:93:fb:3e:ac:32:db:06:21:84:e3:
90:94:8e:35:80:ca:66:2c:a8:a7:18:76:7c:1f:29:e9:0d:ba:
af:67:cb:e5:f9:89:2f:b0:45:c9:6b:e4:b7:0e:df:f9:03:0d:
01:3a:ff:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4
Qzc2NDBERjYwHhcNMjYwMzAyMDMwMDA3WhcNMjYwMzA5MDMwMDA3WjAYMRYwFAYD
VQQDEw02OWE0ZmQzOS0xMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwA1L7P7C/f3FlGKWRaowIjuz1ugER9AGfmaSRKM7u8XW1mz14RgJVtB6zuTn
0l0E23kGniiWyNGCk9TgWI8TLIrZz6eypWYKP+Yv5rfDObQwSOZQIkHe6/x84k9x
0gE0W2MYQnqlg1yfjkI2poqjCWX94HJmE19Ngb1jsdhwegZknOUxhZmFIdNSogrf
Adk3n5wmv5NhpvS2rsuwfYY4T9Vk0xw5vLyOUKyGFouel8FO0n71lekFMjT4wxj+
V8r6dTxFKEsKc9HWGzRdSPeraYL7nAjNWS5JEXzhLkCcFSstiowm+xK08nLbF5XF
Y7CDXpnDHhk6IGrPafoclaQTxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOh/wwxb
m7X8d/kDEbzofbyjZeB9MB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG
QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ
MFF2WGpZT3BNdzZNZGtEZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADt7Fuox7yecldMWhDPcPfM9v1H9zH8e65AmGT5AVoDm6chuusqe11Qzz8dzK
/O6k8nrVpXXrApJdMCXSEGAYW1X3sq/k63QiyFnDyVgw40UvMtL09998lc6k24rO
mIM0Kd8iY+FkgBhVStJqfMr19TMmgmLK1p5hUBpNF7Da6v4asvUaLh08APgH7epV
/zGgWtPS/kHYnNCSE5T+rSQgOfZ4T9TpB6CJ96AvwD9He7AMnwhqqyyYUnwmFPep
QvBmOqUS30UW9zeKK3SmEaaT+z6sMtsGIYTjkJSONYDKZiyopxh2fB8p6Q26r2fL
5fmJL7BFyWvktw7f+QMNATr/4A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:21 2026 by rpki-client