
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json)
Hash identifier: F40EwcXJcrDHo67IQJqevoqHYahi+0CKSuDTEiVKzdY=
Subject key identifier: 2B:F8:7D:07:4C:2D:0F:18:3A:CF:59:8D:25:38:60:84:2E:7A:4D:87
Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
Manifest number: 020E
Signing time: Sun 01 Mar 2026 22:56:08 +0000
Manifest this update: Sun 01 Mar 2026 22:56:07 +0000
Manifest next update: Sun 08 Mar 2026 22:56:07 +0000
Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: c9fiaaVoTHstFPahQxoXO6eA4QAFuG6XSBnzsFaYH1Y=)
2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: Wwe4w5QFaqaRZSg5Rdnoty2maRaw53FrW2eNR6k8xoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl
rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
Validity
Not Before: Mar 1 22:56:07 2026 GMT
Not After : Mar 8 22:56:07 2026 GMT
Subject: CN=69a4c408-3022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:39:0d:37:de:f2:60:e3:66:37:61:b2:e4:
f7:18:9a:23:87:17:e2:91:bd:44:10:17:85:08:31:
c6:28:fa:39:ed:b5:93:e9:04:d5:1b:b6:6a:aa:70:
80:7e:cf:38:d1:d4:d1:fb:2a:aa:87:55:0b:83:bf:
e2:64:b5:e9:31:33:12:40:4d:02:4b:67:68:ab:75:
f7:19:c7:2d:50:be:55:2e:91:f0:02:0c:c3:0c:56:
c4:3d:a3:bb:c9:f2:55:e7:eb:77:83:bd:88:92:d7:
14:ec:a0:30:08:b1:ab:43:e0:54:00:fe:5a:6d:c7:
f7:b8:8a:ca:02:ce:a2:4f:9a:0b:d8:e1:c6:be:a1:
d5:c6:b5:17:24:4b:25:a0:00:01:15:23:6d:5e:fe:
73:18:52:8c:28:49:17:12:47:02:07:4c:2b:d0:36:
1f:ca:77:91:ae:ea:01:fe:86:a3:bb:b6:8e:7b:50:
9c:4e:11:89:d2:6a:ef:9f:6d:6f:eb:4e:3c:c1:cf:
c0:59:44:92:94:93:88:13:3b:bb:f4:20:a0:ce:57:
16:3b:3c:92:bd:ad:95:6b:f4:58:91:20:86:b5:ae:
09:48:ac:e4:67:a7:95:5c:7f:8d:c2:43:7e:eb:81:
19:f6:a5:57:91:83:f3:25:08:0e:ca:48:bc:f0:fb:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:7D:07:4C:2D:0F:18:3A:CF:59:8D:25:38:60:84:2E:7A:4D:87
X509v3 Authority Key Identifier:
keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:12:f0:55:de:48:cf:d2:b0:7d:fe:01:91:e5:e9:4f:0a:e7:
7f:9f:ec:e9:08:78:68:25:80:4b:b3:41:22:68:93:06:31:ea:
61:ba:a5:72:9a:0b:c5:43:80:4f:c9:f6:98:b6:d9:de:99:1c:
af:ed:94:25:b2:9e:ea:c2:7c:02:17:b3:36:67:d4:8b:3d:1c:
4b:fb:b9:82:88:d7:d8:40:74:a7:ee:55:9c:29:0e:8e:fa:39:
f9:3a:02:41:65:da:67:97:c3:a4:e2:b5:43:b7:99:7b:04:b6:
20:b6:8b:95:8b:70:f3:b6:6f:f1:3c:d1:c7:0c:2f:77:7e:16:
db:80:2b:dd:17:8c:1a:0a:96:b2:b3:d1:9b:1c:6a:59:74:ea:
b7:ad:23:07:c6:54:cb:c5:8f:c3:9b:a2:a6:27:da:87:6a:9a:
56:04:6c:b6:d4:e8:a6:02:66:4f:c5:2c:91:3a:0d:61:72:7e:
10:05:7c:bd:36:15:f4:04:cf:c0:ae:eb:cb:f9:47:2f:aa:b3:
da:ea:ba:ce:4f:05:94:02:4e:03:84:91:0d:e3:72:97:aa:e0:
71:9f:e8:e3:12:b2:77:4b:65:f4:7d:f1:57:bb:99:b1:27:1f:
b0:d8:b8:16:0e:b9:57:ae:e0:ec:d9:16:1b:8c:10:06:5d:f7:
2a:f6:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:12 2026 by rpki-client