
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier: 7vD+fMHbF4+6hpNtIj4yyTP4xhhp5Ph+jzUG8haNLdM=
Subject key identifier: 6B:C1:27:D8:B1:11:8F:67:21:AB:F1:82:4A:58:3A:8C:0F:AE:9C:71
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial: 02F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number: 02F1
Signing time: Sun 01 Mar 2026 02:08:27 +0000
Manifest this update: Sun 01 Mar 2026 02:08:27 +0000
Manifest next update: Sun 08 Mar 2026 02:08:27 +0000
Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: vm3lzTRa1HbuHy7zonCfgIgPs4KN9L1bbTdORD787Q4=)
2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: YZYraaTW4N+SBvMTqXTfavIL9Ycht4bd0iE5EB0Igv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757 (0x2f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Validity
Not Before: Mar 1 02:08:27 2026 GMT
Not After : Mar 8 02:08:27 2026 GMT
Subject: CN=69a39f9b-c297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:a9:2c:a9:a3:42:b8:90:e6:76:d6:ce:59:
3c:b6:1e:1e:53:fd:2c:75:9e:c8:27:2d:c9:ab:1f:
b4:49:b2:b5:12:db:b9:6f:5f:99:ff:d7:e7:09:73:
31:06:00:00:ad:3f:18:10:d8:dc:ab:e8:80:20:28:
9c:6a:5d:55:e4:ab:01:2d:ac:52:26:09:32:f8:7b:
bd:34:aa:dc:90:23:48:d4:ac:2a:a2:b5:0b:16:f4:
e6:cc:61:47:20:3d:02:d5:f2:a3:2d:38:46:cf:5c:
fb:ba:e5:10:8c:5b:52:99:5a:6a:88:cb:99:c9:1c:
3f:f1:ce:64:9a:8a:3e:a9:79:86:0c:25:87:ed:96:
2c:29:76:34:02:d6:af:55:e9:b4:23:eb:a6:50:91:
2b:fc:7a:71:e7:71:ad:2e:b9:28:50:72:1c:f2:3a:
5b:8c:75:a2:3c:ff:c3:77:f9:92:af:eb:80:0f:f1:
a9:88:43:87:f8:f8:55:87:50:2b:93:fe:56:12:e0:
f0:00:4e:d9:ef:6a:61:b5:9f:88:61:9b:bc:3d:8c:
ce:80:03:d3:2c:a1:91:6e:17:3f:bf:8e:43:d1:8d:
ce:06:08:68:c5:d5:cc:8d:63:15:78:b7:e7:24:1e:
cf:1e:aa:b4:c9:ff:46:bd:f1:18:ce:cf:a5:c4:3b:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C1:27:D8:B1:11:8F:67:21:AB:F1:82:4A:58:3A:8C:0F:AE:9C:71
X509v3 Authority Key Identifier:
keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b1:e8:65:77:9f:fa:ca:23:39:51:88:8e:7b:ae:cc:ce:05:
29:c6:e6:c3:18:b6:c3:20:59:4f:30:6e:c2:a6:10:d5:2e:5b:
d8:63:d3:ed:3c:96:64:ed:9a:d9:1a:ce:91:72:70:dc:18:65:
1a:dd:91:63:85:47:51:e6:e6:80:17:c2:5e:6f:e9:da:46:26:
7a:df:1e:3b:ce:fe:54:c9:29:25:a4:89:32:43:41:f9:2d:c9:
e5:b9:6d:7d:7f:ea:97:34:ec:c1:64:f4:39:88:a9:31:a4:a2:
60:34:9f:68:42:d0:71:61:ff:db:16:01:85:47:93:90:10:95:
d8:2c:1d:fb:d0:01:bf:12:f7:55:12:ca:d6:8e:e6:44:89:c8:
70:7e:42:d5:e2:25:27:66:91:3d:82:53:09:8d:48:fb:08:eb:
2f:4f:85:d9:8b:83:97:d7:c2:c7:e1:41:df:b4:73:c7:4c:a6:
5e:a8:d5:d4:46:6e:fc:0f:3a:b3:4b:a6:01:5e:d7:61:38:56:
53:79:84:a5:39:21:67:58:9b:98:fe:19:f0:d3:92:9a:a4:e5:
6c:df:fa:e0:da:1e:a1:3d:58:a7:18:93:34:9c:b6:9c:b5:5b:
ef:d8:e6:3a:39:6a:ad:4d:0a:dc:ab:ba:69:12:b6:60:19:46:
07:cd:e8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:40 2026 by rpki-client