
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
File: Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json)
Hash identifier: eAn3kApfRKolLRofoP6IPsgGfQ1hif48kfU6oH2JYkk=
Subject key identifier: 04:C5:F9:2C:21:ED:80:5D:D6:13:18:9E:C2:99:F5:44:84:75:0F:93
Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D
Certificate issuer: /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
Manifest number: D8
Signing time: Sun 01 Mar 2026 07:48:05 +0000
Manifest this update: Sun 01 Mar 2026 07:48:05 +0000
Manifest next update: Sun 08 Mar 2026 07:48:05 +0000
Files and hashes: 1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: hjdLVrGaBFf7eTcAn5ALicuJDover+nua5N5B1DW4Ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl
rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
Validity
Not Before: Mar 1 07:48:05 2026 GMT
Not After : Mar 8 07:48:05 2026 GMT
Subject: CN=69a3ef35-0620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:bd:a5:61:7c:1a:33:66:c0:b2:5e:29:ac:
3f:50:15:52:3c:68:af:a4:cb:60:5c:5d:8e:79:2f:
b3:83:d9:74:8c:31:46:44:12:53:f7:10:0f:e3:88:
0a:b5:93:08:3e:75:77:ab:9d:89:da:43:ce:21:c1:
d3:5f:7f:64:00:2d:de:f0:9e:0a:d6:50:5a:99:70:
2f:03:ec:81:4e:75:87:f2:3a:40:33:cd:96:8d:6e:
36:01:16:ee:29:01:e1:fb:16:c0:ae:76:1c:3a:4f:
46:48:9c:e9:09:0b:21:1d:32:6a:f8:e6:30:45:d4:
9f:77:61:d7:87:19:27:d0:2e:17:10:c8:be:20:6d:
2b:63:28:bc:7c:4f:a0:e6:f4:ed:8e:a1:28:69:06:
ba:a5:da:ab:ae:90:95:bf:56:54:a4:28:05:d2:30:
bb:2b:40:a1:83:b3:67:91:a9:fa:b9:87:5c:a9:f3:
a2:89:95:b5:6a:43:67:f3:89:ab:a7:d2:a4:41:2d:
18:cf:06:81:bf:60:44:96:3d:e9:94:20:fd:d9:63:
27:f9:45:41:05:38:45:e5:73:86:d1:96:7f:6a:c3:
ca:58:9f:92:4d:e9:ff:8a:bf:9a:25:72:a5:ef:60:
a7:28:7d:23:e6:24:63:78:ad:b1:3e:1c:d4:61:e4:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C5:F9:2C:21:ED:80:5D:D6:13:18:9E:C2:99:F5:44:84:75:0F:93
X509v3 Authority Key Identifier:
keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:31:3c:cb:90:c8:d8:af:83:e8:0a:b3:38:f4:5c:c6:36:02:
15:a2:87:a8:d6:d9:a8:17:01:c0:a7:e9:98:ef:2d:19:bf:a1:
ef:53:1a:9e:2d:0c:f3:06:05:41:0f:26:42:de:26:36:a4:d5:
6b:74:0b:31:95:52:03:da:cd:af:15:78:68:db:ea:a1:4e:21:
fd:6d:9d:3c:92:ae:f7:1a:2e:c5:0e:63:22:b3:33:af:fb:65:
55:13:57:03:96:98:2f:31:ae:3d:2b:5e:38:d8:96:a2:98:7f:
8b:94:e7:03:ad:d1:04:25:79:53:6d:85:85:0b:83:ad:2f:da:
6c:47:fe:42:2d:a1:9f:ff:4d:54:a4:3c:63:83:5d:e2:e2:f0:
2e:14:87:98:6f:99:dd:6f:97:6e:04:ff:ca:55:da:1e:1e:f4:
d1:be:90:05:e0:a8:2e:f4:bd:ad:ae:b7:96:8b:3c:f7:da:3d:
e1:ce:3d:5d:d1:b5:4b:94:00:e3:a4:80:33:ef:fe:f4:97:f3:
16:59:2b:9c:19:e8:09:68:0d:1f:f8:df:b9:bb:05:50:28:63:
a2:d7:5a:b3:04:0f:8e:09:a9:eb:07:e0:57:7b:64:4e:2b:cd:
d4:8d:ab:21:aa:03:81:e9:7f:76:74:a8:2b:3d:53:57:7a:d3:
a7:9c:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:43 2026 by rpki-client