
$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft
File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json)
Hash identifier: UfY8s9Lo7KtlMZQsE/8BCOwhWt+KaGp0D2XGLSbtjgo=
Subject key identifier: 34:9C:0E:BF:E8:ED:26:62:92:16:A7:90:BB:70:04:DF:80:8D:6F:EC
Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7
Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7
Certificate serial: 042B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft
Manifest number: 0425
Signing time: Sun 01 Mar 2026 01:10:33 +0000
Manifest this update: Sun 01 Mar 2026 01:10:33 +0000
Manifest next update: Sun 08 Mar 2026 01:10:33 +0000
Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: s0sOseqi3Dz3G8wjse2Gg6tzJFNA0HL9Ms45jaT/6PY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl
rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7
Validity
Not Before: Mar 1 01:10:33 2026 GMT
Not After : Mar 8 01:10:33 2026 GMT
Subject: CN=69a39209-4109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:a0:1a:d6:cd:3e:8b:99:1d:c3:21:d9:42:
c8:5d:79:80:1f:0a:9f:16:58:fc:9a:1e:7d:da:e0:
0a:da:6d:89:9d:ee:af:68:4c:48:fe:df:a8:3d:95:
d8:95:bb:fb:f2:2f:21:36:27:ba:12:79:ee:4b:68:
d2:fc:ff:5a:27:07:29:ec:46:90:ec:2d:3b:64:d7:
19:5b:53:79:d2:73:a3:2d:93:a3:dd:ca:b0:7a:aa:
5d:f6:e6:b6:79:b2:82:00:50:74:32:1f:b7:63:ea:
02:2e:e8:36:ab:d2:63:dc:c3:4e:44:10:6a:12:8f:
95:c3:49:90:10:1f:8f:07:5a:84:a5:0b:48:aa:5e:
39:b8:ec:9f:1a:b6:42:85:14:93:c3:f0:2c:6e:73:
c1:12:f8:fc:5f:9d:61:23:89:0f:bd:85:16:d4:f3:
c3:cb:5e:12:83:aa:cb:55:ef:3d:65:5d:97:b0:6f:
1b:c5:6c:60:06:ea:d9:a2:83:80:d5:f9:24:23:39:
a1:21:2f:d7:f6:6f:0d:2e:5c:60:49:a8:93:78:89:
3b:27:eb:30:59:e6:66:33:89:66:9f:81:b4:b4:5c:
08:22:3c:0a:f7:04:bd:ba:75:ba:da:90:11:96:f6:
1f:87:a2:c6:23:09:4a:ce:dd:33:86:c4:c4:05:6f:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:0E:BF:E8:ED:26:62:92:16:A7:90:BB:70:04:DF:80:8D:6F:EC
X509v3 Authority Key Identifier:
keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e4:03:71:ba:e9:c3:b0:9f:72:31:84:9f:15:29:3b:ae:7a:
a7:4b:08:f2:45:dd:ee:47:44:80:23:20:a7:19:4f:8a:03:4a:
79:92:cd:79:5d:15:a6:0a:96:91:36:40:8e:0d:1d:77:34:ce:
41:52:eb:68:b8:be:24:5f:c5:dc:f7:d4:a5:bd:9a:60:fb:bb:
8d:d2:88:7e:fc:0f:88:36:9a:11:84:be:83:8d:c4:0a:9b:e9:
07:88:c7:54:1b:f8:ad:c2:fe:a8:ee:64:5c:5e:1f:df:b3:c5:
8e:86:9c:46:1c:ee:45:0b:d3:61:d2:7f:b1:5b:06:87:1f:84:
fe:0c:4a:20:26:4e:62:9e:f8:63:76:3a:0c:a4:db:9f:4b:ea:
0d:2f:6c:37:ac:62:d3:eb:5c:aa:81:11:26:fd:93:50:b3:cf:
59:28:68:48:36:43:73:d8:4e:e6:39:07:79:76:22:f1:71:6c:
e4:c7:b7:4d:7d:66:50:8f:89:61:7e:06:2a:a2:a7:16:56:bc:
d1:58:93:f2:9f:e9:06:4d:0d:35:85:4d:5a:5c:3b:3d:e9:a5:
dd:c7:df:c3:b5:3d:9e:f2:9a:89:a0:45:45:ed:9e:5d:89:2a:
d6:52:64:fe:c1:64:97:33:d7:ba:5d:4f:8a:51:ac:38:a4:45:
be:ec:b1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:36:13 2026 by rpki-client