
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json)
Hash identifier: 5vx0zhVhxBYBYiJdYDFE4F0wPR37uOlgvdJi5VnLXLQ=
Subject key identifier: BD:C2:DD:94:61:B5:03:15:20:9A:54:BF:14:95:EA:3A:DD:A4:16:36
Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Certificate serial: 02F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
Manifest number: 02E0
Signing time: Mon 02 Mar 2026 00:26:30 +0000
Manifest this update: Mon 02 Mar 2026 00:26:29 +0000
Manifest next update: Mon 09 Mar 2026 00:26:29 +0000
Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: 9nZnBB/F9Fa1ntPWXCYI17xskqn98jiGq68AkWTvtXk=)
2: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: GLugrqwwQZmmzbcCNZXH5Ie9zKy10oZO0jW/+Bq1pvo=)
3: 899B070834D511ED99B1921FC4F9AE02.roa (hash: LSg6DX28WaeWtngQ2Zn9zwO7f5A+q2ZTTUwMeuMJ6JY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Validity
Not Before: Mar 2 00:26:29 2026 GMT
Not After : Mar 9 00:26:29 2026 GMT
Subject: CN=69a4d935-ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:5e:a0:a4:51:13:76:b1:e7:b9:21:ff:e7:
e8:da:da:6f:0e:61:2d:b6:f5:10:56:89:2e:f7:ee:
fa:c5:7d:95:31:a6:dc:ef:d7:0f:0d:f5:8c:17:10:
65:38:75:24:76:08:d6:14:67:1c:40:9e:64:85:3b:
0f:16:8e:c0:5f:a8:40:ba:2f:92:19:09:4d:96:2a:
bf:cf:ae:7e:db:90:f0:bd:82:19:4c:f2:56:49:08:
e1:d8:74:96:ab:19:ef:35:2e:0a:fa:a0:76:4f:f5:
c4:70:4b:1c:01:65:a4:c3:02:7e:a8:55:e7:69:e3:
9c:ab:de:de:0c:80:62:31:0b:96:29:97:52:45:6b:
e6:fe:c4:f8:69:ab:81:a5:1f:1c:5e:40:09:15:a8:
27:8c:e5:b8:c6:0a:36:09:fb:94:e1:17:04:f7:f9:
9c:68:90:15:59:2e:99:55:e3:48:08:9f:10:09:85:
d1:0b:6d:b1:64:c3:ab:b4:a9:cf:5a:a7:e8:5b:05:
11:ab:48:62:0d:9e:40:e2:e0:4f:c7:1c:04:1b:6a:
a6:82:42:52:94:22:8c:05:08:c0:06:c0:7e:ae:0f:
b1:84:16:39:5d:77:19:b3:56:ac:98:1d:80:4d:e7:
cb:d3:ae:85:d8:31:45:a2:91:d3:4d:e6:f1:b1:c0:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:DD:94:61:B5:03:15:20:9A:54:BF:14:95:EA:3A:DD:A4:16:36
X509v3 Authority Key Identifier:
keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:43:8f:6e:fc:6a:f4:93:68:b7:14:d0:44:3e:69:6e:18:8f:
dd:1a:10:d1:25:47:77:36:dd:bc:16:0a:43:fa:84:a0:2f:c3:
ba:78:21:ad:50:ba:fb:8f:ae:6b:35:e5:77:e2:6d:61:f9:a3:
fc:00:fe:c7:c5:68:11:85:8c:80:ff:b3:b3:9c:7c:39:0b:0b:
e9:dd:ae:ab:f0:c2:b3:31:05:75:4f:0a:72:f6:27:66:d3:1d:
71:13:f7:04:31:1c:ac:27:4c:26:14:13:24:25:d5:0a:34:45:
a2:16:a0:eb:52:65:36:af:25:76:05:bd:65:11:da:90:eb:73:
26:21:0d:f3:60:7a:7d:c9:94:09:6a:02:2e:0e:84:04:41:ef:
e9:13:31:cb:c4:45:6d:5f:a6:94:aa:b0:62:7e:d7:b5:73:7e:
f8:90:63:a7:8b:65:9c:ce:c7:0c:5c:0c:ca:42:3f:72:61:01:
ae:b0:d2:24:f6:4f:8b:73:d1:94:58:a4:7f:de:bc:82:ef:56:
ae:68:e1:61:e8:d5:4c:2f:83:da:1f:b1:d4:7e:a5:fa:c0:36:
d0:e8:32:3f:89:eb:5d:26:14:9b:30:40:cd:3b:52:d6:ca:db:
e3:47:ac:87:97:42:8f:c6:0f:61:b1:c8:60:08:82:cf:22:bc:
de:5f:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:46 2026 by rpki-client