
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json)
Hash identifier: tLLDnvB5WxYP5oJ72uj4jJFmfGYg/1S23AFGwXiSJuY=
Subject key identifier: 5B:91:28:DA:0F:8F:A6:DF:7F:7A:F4:14:F0:BE:9C:60:6E:7C:49:EC
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2339
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
Manifest number: 22C6
Signing time: Mon 02 Mar 2026 00:24:08 +0000
Manifest this update: Mon 02 Mar 2026 00:24:05 +0000
Manifest next update: Mon 09 Mar 2026 00:24:05 +0000
Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: S3BIFPrjPaLYmAUoRqGCePPLcLR5V3AKCt8eFdEPsFU=)
2: 213F506AEF8A11F08E686F05616F56BC.roa (hash: +0TIbXgSWfY4Rfh4n/KWV5MfMbBrpgMrwoEbGLQfWss=)
3: A44814E8EF8411F087F172675F6F56BC.roa (hash: wvN10FQ8zvYAowPbb2JVqT+LitRhCvH0XZWoM78inD0=)
4: BB252FD40EF111F195D6D4120A3D8C67.roa (hash: /hTiZWSYK2Vv4i6AxRoBfgNn6QuWyN3II6fBK7L3F/8=)
5: E23C1886EF8811F0B6CFCA01616F56BC.roa (hash: hyVjQ/ybV11665cH/1oRipAj/sBN9cWklhwxNFtgIuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9017 (0x2339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Mar 2 00:24:05 2026 GMT
Not After : Mar 9 00:24:05 2026 GMT
Subject: CN=69a4d8a8-9c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:90:63:be:4e:2f:bb:af:57:6b:bb:a4:0d:
d3:0e:c2:28:95:36:7e:e0:60:b4:d8:1a:c4:4d:0f:
48:94:88:a7:87:de:77:c9:fa:52:16:dc:83:23:bf:
ae:be:1d:62:39:12:c4:ff:e1:b2:53:01:21:c1:89:
72:0f:49:c5:2b:91:ff:d5:32:0c:12:04:6a:3c:a1:
a5:54:c4:03:64:c8:9f:8e:22:c4:d8:7c:8f:8a:89:
af:49:b8:eb:df:4f:b2:fb:0f:12:8c:b3:a6:40:ac:
68:8b:e9:aa:f8:48:e6:34:c1:ca:35:9a:77:3f:59:
91:2b:29:2b:c2:33:8a:ce:e4:24:be:1b:42:b2:b7:
a5:52:89:91:13:f2:ae:9e:d3:0c:08:76:5f:88:5a:
d1:f0:e1:70:cc:91:32:30:61:ed:1b:74:82:e1:47:
d1:ff:e7:4d:e0:e5:26:ea:b4:1a:df:e0:82:ad:c6:
4a:99:4a:d8:9a:9e:bd:92:de:db:2a:1d:83:b2:3c:
46:e4:15:e9:1b:2c:dc:af:59:42:dd:cc:cc:be:88:
f9:f8:c6:e7:eb:68:51:52:33:2f:44:0a:c3:fc:b7:
54:08:84:de:9f:58:37:f2:6a:72:f2:72:c9:da:7b:
94:8e:e9:0c:4b:6d:20:bc:f0:13:67:7f:3e:06:9e:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:91:28:DA:0F:8F:A6:DF:7F:7A:F4:14:F0:BE:9C:60:6E:7C:49:EC
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:d9:96:7d:94:d9:09:0e:ca:f5:8a:5f:03:7c:fa:b3:ba:a4:
e3:16:d9:15:03:f3:e0:5f:90:d9:94:1b:25:ea:aa:a2:24:83:
37:15:52:b2:a4:bf:49:83:c6:ea:27:1b:9c:2d:24:c0:9e:1c:
00:4e:a7:cc:df:3d:2d:59:56:4b:16:5b:eb:1c:8a:e3:d6:57:
3c:84:7f:26:f0:3f:64:d8:28:81:89:5d:d0:0a:86:b5:31:8c:
63:53:55:ab:76:6d:19:72:09:e7:af:ae:69:7d:e7:1f:34:86:
9f:bc:d4:2e:4c:3f:33:ef:5f:ab:01:df:45:fe:31:54:c7:ff:
a6:1e:94:0e:a1:0c:e5:a1:f1:66:a5:b8:76:56:2e:b5:ea:d9:
9d:87:eb:b0:07:07:c9:3b:a9:bd:0f:3b:24:eb:f6:70:a6:7c:
81:29:79:22:02:f3:94:76:e7:91:f3:cd:82:d6:f7:58:5b:b9:
2e:57:bc:1a:cf:f1:6f:88:15:ce:e9:79:ed:51:a7:16:1a:07:
03:7c:49:06:b0:da:73:5e:c7:0b:c9:b6:e1:0e:eb:60:a0:b3:
5a:91:35:43:0f:48:b6:20:e2:3b:bf:6c:d7:dc:6a:e1:33:21:
6c:fc:b2:95:84:4c:18:f4:a6:d4:be:c4:5a:0a:5a:03:49:ca:
79:2a:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:21 2026 by rpki-client