
$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json)
Hash identifier: gvw9iaGfLuY+VJiAZpMgyrVEH9JZbfmaPy4GtqsTG+M=
Subject key identifier: 11:C3:89:1B:27:88:6A:7C:06:4A:CE:AC:91:B4:FC:0C:29:CD:3E:33
Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
Certificate serial: 05C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
Manifest number: 05BC
Signing time: Mon 02 Mar 2026 00:56:00 +0000
Manifest this update: Mon 02 Mar 2026 00:56:00 +0000
Manifest next update: Mon 09 Mar 2026 00:56:00 +0000
Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: 516A4vkSZ6TwThFFEo4wugG31G7+bfTruSRQFCCfpRA=)
2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 2XbXZcyCmkwNngGPogkbhBm8QONSr+SCdJI+4quVjcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl
rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1473 (0x5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
Validity
Not Before: Mar 2 00:56:00 2026 GMT
Not After : Mar 9 00:56:00 2026 GMT
Subject: CN=69a4e020-d59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:e5:60:bd:0e:18:a1:11:17:eb:54:ed:9e:
04:1e:8b:ed:7f:1d:3a:9c:09:de:66:f8:30:b6:00:
02:3a:cb:62:4a:66:d8:b2:3e:00:61:65:74:d1:0c:
f5:1b:c1:8e:15:9d:b6:c9:e7:35:ac:51:69:43:06:
f2:9a:71:be:90:42:ad:a1:be:fd:89:c6:2c:79:6a:
a2:1d:9a:13:34:d7:ea:a8:24:2a:71:a7:75:fb:81:
13:9d:02:d0:04:c7:8f:62:ef:d4:cf:b3:c2:50:7b:
52:e6:cc:df:4b:4f:49:6c:42:4d:36:b6:ca:f3:b6:
44:0a:12:51:53:ff:bd:75:7d:67:c7:77:15:2c:d2:
f9:ca:4f:12:8e:48:f0:6c:b3:73:cf:a6:54:20:20:
f5:87:11:e8:ee:5f:0e:6b:ff:c3:80:2b:2c:25:4e:
01:25:a9:0b:7f:58:0a:8d:f3:32:8b:45:3c:b4:84:
59:d9:80:a4:b3:91:40:27:c1:2f:fa:59:04:42:b0:
04:17:05:60:c8:12:a7:cb:8a:69:0c:17:f8:4b:8e:
4f:92:2a:74:df:5c:ab:02:15:f8:d4:84:02:c6:0a:
b1:dc:66:99:94:07:80:6e:aa:68:16:2f:a6:23:5c:
dc:46:16:08:2a:2e:74:9c:d6:55:a6:60:6f:58:8c:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:89:1B:27:88:6A:7C:06:4A:CE:AC:91:B4:FC:0C:29:CD:3E:33
X509v3 Authority Key Identifier:
keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:41:6e:35:27:48:2b:f2:a0:77:85:ad:93:d0:2e:09:8d:a1:
8b:1d:58:bf:29:54:5a:bd:c8:32:ee:43:94:63:ec:1a:da:1b:
3c:fd:ff:7f:5c:05:0d:48:60:be:a6:b6:00:16:56:08:9e:8c:
bc:1c:ae:b1:88:70:6f:eb:21:78:99:15:12:3f:03:e1:e7:28:
ab:71:7e:34:7d:f0:e2:43:75:df:e2:ce:76:57:b9:9b:46:02:
dc:4a:0b:d0:4c:92:74:1c:fe:e6:79:60:6d:7f:25:22:90:2c:
4c:3a:3c:44:bd:11:0d:07:8d:71:56:14:ff:26:b6:a2:8a:4c:
bd:f9:fe:52:41:42:d0:22:9c:c3:98:07:7c:ad:a8:a5:bc:a8:
ff:ca:22:7b:f9:89:0b:7a:7e:af:aa:31:e2:78:f7:77:ba:f9:
7a:89:a4:24:68:f0:8f:08:5c:0d:73:3a:2c:7c:03:8e:3f:54:
e3:08:0c:07:19:ca:f1:80:3e:a9:35:1e:9f:39:46:a7:da:04:
39:0f:ee:fd:41:0a:b4:99:1c:95:d2:10:25:6a:79:ec:e4:8f:
e8:0d:4a:5d:c6:ff:54:a2:64:61:c9:5c:94:59:6d:42:13:7f:
69:8e:53:1b:de:f4:b9:c3:98:b6:b1:96:3e:1f:c8:57:95:10:
93:a5:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:18 2026 by rpki-client