
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json)
Hash identifier: B8W4kI5L4tzSHiTV7sHQzIgKeXEs/xIVq0aeboG2S84=
Subject key identifier: 58:D8:BF:72:A2:45:EA:51:60:D9:97:F0:6B:F7:DC:41:EE:D6:70:C6
Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
Manifest number: 022E
Signing time: Mon 02 Mar 2026 03:05:02 +0000
Manifest this update: Mon 02 Mar 2026 03:05:01 +0000
Manifest next update: Mon 09 Mar 2026 03:05:01 +0000
Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: RNAG62gWJsxNSQUa62uleuuc2u+gXdASg+u8YBvN+Wk=)
2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: DI/eG9DXOFb9EKRR2bPnL0OAziLMqCbunU7psCFOUsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Validity
Not Before: Mar 2 03:05:01 2026 GMT
Not After : Mar 9 03:05:01 2026 GMT
Subject: CN=69a4fe5e-0a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:7c:32:33:04:b7:c8:10:a2:3b:39:08:15:
2d:bb:a2:5b:84:a3:d1:5c:eb:c4:c4:1b:09:a7:ea:
e2:3f:64:2b:1b:4a:e5:cd:0a:72:20:70:45:6a:f5:
ca:5c:3b:3b:af:57:1c:61:a7:ec:4c:74:cb:71:cd:
d8:0d:fd:59:65:d9:33:5a:43:bd:b1:c4:25:ec:69:
d2:c6:b1:b4:98:b1:e2:dd:a5:4e:7d:48:2c:a1:50:
5f:c5:9b:1a:f6:e1:93:47:1d:99:ee:a6:86:bb:28:
7b:51:68:0d:27:9d:7d:e6:99:33:5b:27:27:06:e3:
bb:e2:93:41:bb:3f:20:76:0a:03:f2:c7:98:5d:43:
49:1d:d7:08:f7:03:f9:ca:08:5f:42:bf:1b:83:ba:
29:9a:15:bd:83:1f:a8:4c:56:07:03:e2:c3:a0:a7:
01:d5:09:3d:c5:b7:76:d1:e9:57:91:68:f6:e6:47:
0f:4b:7e:59:22:98:75:39:ad:8d:30:bb:49:78:01:
2b:80:8b:52:b4:9d:37:fb:3f:bd:61:15:e8:1c:83:
8d:c1:03:c1:0c:0c:02:ae:2a:cc:b0:d5:aa:75:56:
09:9d:db:0d:68:95:cd:28:1f:ed:c9:89:03:e6:68:
8e:6d:22:b4:fa:6e:53:5f:1a:3a:42:52:f8:e5:db:
5f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D8:BF:72:A2:45:EA:51:60:D9:97:F0:6B:F7:DC:41:EE:D6:70:C6
X509v3 Authority Key Identifier:
keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:e1:a0:f1:eb:82:52:ff:93:5c:bb:3f:cd:61:2f:a3:9b:b2:
19:9a:19:f8:91:ad:bf:9b:18:fc:66:95:7d:21:67:b7:10:bb:
9d:56:83:8e:37:b4:4b:99:97:ec:4d:54:eb:6a:b7:b4:3d:ac:
46:80:2b:b5:4a:6e:af:67:aa:9e:aa:fb:27:8a:d4:a7:da:cb:
15:64:9e:bb:51:7a:d3:8a:02:be:15:8d:78:07:69:90:59:d4:
d6:2d:11:2c:2d:65:da:2f:63:99:19:01:34:97:ef:32:80:d5:
98:6c:24:ec:63:b9:60:9a:52:6a:6b:a6:52:8b:93:14:73:17:
0d:2e:48:48:98:7e:02:b4:9c:37:9d:af:61:10:6a:7a:d5:a1:
f0:9f:8b:3b:b7:08:d6:e2:c4:02:f3:69:32:96:ec:51:22:9b:
68:05:52:98:63:1d:42:db:9b:2c:5f:ae:0a:6e:f0:86:4f:16:
19:26:8c:fd:3d:c1:72:3b:4a:2e:93:2d:f9:ed:6a:a3:32:83:
d1:b7:28:ad:38:f4:44:b2:6e:1c:94:2f:7f:5f:46:da:e4:fc:
9c:02:b1:5c:a1:83:00:73:1e:a1:8c:d7:64:78:00:0a:b2:7b:
17:8f:94:27:3f:a4:73:d8:da:20:d1:38:a1:ec:40:82:8d:42:
79:3c:fc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:40 2026 by rpki-client