
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json)
Hash identifier: MCJhr8kFX+9pWtUWQEBYzu1coE3dxEqquhhhYr9ySQA=
Subject key identifier: 5F:26:12:89:47:26:EB:F1:87:33:53:47:60:62:25:C9:BE:06:5F:8F
Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Certificate serial: 04D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
Manifest number: 04CD
Signing time: Mon 02 Mar 2026 01:50:05 +0000
Manifest this update: Mon 02 Mar 2026 01:50:03 +0000
Manifest next update: Mon 09 Mar 2026 01:50:03 +0000
Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: tmm3bbNf+C7KjEiipnYQIqIZEs9eNUXpeY3sbixMinQ=)
2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 6u8EDQPeHd1f5myvUPvFnltCBejoVUEG20zIQZJhOPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Validity
Not Before: Mar 2 01:50:03 2026 GMT
Not After : Mar 9 01:50:03 2026 GMT
Subject: CN=69a4eccc-19f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d9:b0:0c:04:3a:df:58:f0:8d:3b:6b:57:c6:
90:94:e8:a0:67:d9:e2:48:50:66:f7:8e:8f:45:26:
7c:98:20:c4:c0:01:4f:42:b6:1d:4e:20:93:be:1e:
f6:e2:9a:5b:ea:8c:bb:fe:79:87:6e:c9:0d:bc:ba:
13:f8:32:6c:ca:85:b3:54:2c:1a:c1:90:0e:dd:23:
9e:23:66:a0:6d:dc:5c:55:8b:e2:c3:bc:84:8b:7d:
63:85:8d:9e:36:5d:4c:0d:65:41:b0:c2:b2:6c:6b:
ae:09:30:d9:6c:69:c4:ee:ea:91:1f:00:9a:87:e8:
b1:07:8e:7d:20:e7:77:9a:a7:35:26:92:82:48:eb:
61:fb:53:6e:43:6e:69:8b:7d:49:f4:78:50:7b:0d:
ad:45:69:3c:81:ac:bf:9e:96:01:3f:54:3a:8a:d4:
30:0b:31:73:83:06:9c:04:c3:bd:bb:6b:2a:52:4e:
04:e7:4a:08:a0:d7:84:d8:c4:58:c8:38:35:72:75:
49:20:1f:c2:c2:6f:44:15:58:be:93:da:a0:cf:10:
2f:16:1f:7f:0e:bf:58:dc:69:ca:0c:80:1c:68:0a:
bc:b8:5a:f2:80:06:cd:58:87:81:c8:b1:47:89:fe:
dc:e0:02:09:94:bf:c8:da:b8:a9:79:24:10:8e:1d:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:12:89:47:26:EB:F1:87:33:53:47:60:62:25:C9:BE:06:5F:8F
X509v3 Authority Key Identifier:
keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:fe:61:ae:3f:e0:30:1f:7c:8b:3d:e5:e1:56:e4:35:5b:1c:
3f:4f:53:e1:60:0c:74:8e:6b:3a:ea:02:e8:ca:fd:fe:e1:2d:
28:9d:6a:b3:13:48:d5:6b:09:69:03:98:eb:06:51:64:23:a2:
44:4c:97:f0:01:08:f4:f0:93:15:87:18:59:45:00:41:0e:ef:
69:a9:1c:dc:56:ee:1a:a8:0b:98:93:98:94:32:cc:06:49:05:
45:4f:61:92:4d:a4:2a:99:e6:c2:ee:f5:b4:e8:fa:76:f3:5e:
a5:12:e6:16:4d:9a:76:2d:11:d3:fa:27:4a:a1:80:24:92:0d:
f7:8c:43:52:cc:47:56:05:59:56:53:aa:58:4f:ec:0c:be:4b:
73:1b:e1:b4:1b:47:94:0e:92:9d:89:03:17:8b:fa:37:79:f1:
f3:9d:81:d0:1b:50:5f:4d:2b:22:14:50:6c:53:70:48:42:22:
1c:b7:83:3f:96:80:51:5f:77:56:68:b3:01:dc:d2:49:8d:cf:
2e:6e:55:89:07:37:ea:6f:95:00:fb:22:b1:7e:19:85:46:11:
71:13:f7:53:4e:26:22:1a:f9:23:b9:4a:45:c0:a5:e4:e6:e6:
aa:9c:d5:3d:32:cb:70:b0:99:94:54:20:1a:63:b9:89:41:cb:
ee:2d:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:41 2026 by rpki-client