
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
File: sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json)
Hash identifier: /qtUcaVGuiyVyq8njApqiuFUmwT1Pyuof7gUGE1AcrU=
Subject key identifier: 07:C6:84:DA:FD:07:B1:72:02:46:98:40:BD:1B:B9:D7:71:1A:5B:66
Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8
Certificate issuer: /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8
Certificate serial: 0BCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
Manifest number: 0BC3
Signing time: Sat 28 Feb 2026 19:09:39 +0000
Manifest this update: Sat 28 Feb 2026 19:09:39 +0000
Manifest next update: Sat 07 Mar 2026 19:09:39 +0000
Files and hashes: 1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: asJ39t30tkf76IckpKFoWFUVl2er1ZWZqQzcCieRcqg=)
2: DC7A929EEF8111F0B8F8645F5F6F56BC.roa (hash: O8F9cJoTk4u3KHnmKcnnFXANtZ+X6PopB9IY8V3SRqY=)
3: A2139F38EF8111F091D2B45E5F6F56BC.roa (hash: 9d3qiIYS1LzSnMlxE9vdwXHvae2kNvYFG4SMHxjF78k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl
rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3021 (0xbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EBFD, serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8
Validity
Not Before: Feb 28 19:09:39 2026 GMT
Not After : Mar 7 19:09:39 2026 GMT
Subject: CN=69a33d73-089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:20:f1:5e:d1:16:d4:e3:da:49:e4:52:f1:
24:26:f5:83:fd:5d:e1:5b:38:23:0d:b9:65:00:f5:
b8:a4:6f:ea:59:f0:62:65:9a:44:7b:a1:4e:6e:7c:
a2:6c:00:43:f3:dc:ab:cb:e0:9f:bd:c7:26:15:17:
0e:83:f8:2f:48:74:88:c4:ab:26:26:93:13:bc:6d:
0c:b6:d0:02:b8:fe:d8:87:ca:85:a0:af:ed:1b:58:
b0:3a:0d:d9:b0:88:e9:7e:9e:ae:e0:1c:c1:b5:95:
e7:e8:a2:5c:0c:b6:e9:dc:db:1e:ed:ea:fb:54:8a:
ab:52:14:f8:c7:86:c2:45:e7:79:0b:17:85:e9:59:
00:fb:43:1e:57:6e:9f:b8:be:c8:44:d9:e4:6c:c3:
ed:f4:5d:ba:78:f9:df:6c:2b:fc:a6:73:f9:64:7e:
53:48:a8:1e:54:48:46:4e:ef:92:19:8b:b6:03:35:
e4:57:ca:44:ad:ef:d4:7d:22:bf:39:1b:09:71:9f:
60:78:ea:f0:da:c2:f9:81:6b:ab:6d:ca:cd:4e:d9:
2e:95:c5:2c:7f:69:17:98:30:33:3b:89:32:05:84:
26:f2:84:49:17:09:f5:6c:84:a3:70:61:27:97:e7:
32:77:a7:82:e9:88:12:4f:38:09:04:44:79:f1:c8:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C6:84:DA:FD:07:B1:72:02:46:98:40:BD:1B:B9:D7:71:1A:5B:66
X509v3 Authority Key Identifier:
keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:71:6f:8c:04:f3:c9:1c:6f:06:45:02:b3:07:1f:9d:ec:b0:
a7:a6:93:3a:25:9e:1c:2c:08:94:2c:3e:2b:2d:2d:c1:96:8a:
27:12:5c:23:c2:c7:6b:71:b9:35:cc:2a:59:a8:c5:ad:26:66:
b6:97:ee:e0:e5:ff:b8:ab:4f:8f:64:52:5c:72:c0:7b:ca:40:
26:81:b6:96:67:9b:aa:de:0c:9d:ae:7c:2f:90:40:50:80:25:
bb:f0:93:54:7f:99:f4:12:f6:eb:ed:78:45:5c:07:f6:b1:bc:
a4:93:bd:aa:fb:18:6c:87:86:01:e9:ed:a0:98:f8:99:e3:7d:
4c:bc:b9:36:63:10:b7:3b:c2:65:9e:e2:9f:50:92:a7:82:58:
34:9b:77:86:9e:f6:19:ee:bf:c4:22:15:53:6f:4d:f6:7f:0a:
75:11:bb:43:f4:53:53:ef:f5:eb:df:18:ce:47:b6:18:77:7c:
a8:5f:d2:3d:f6:66:f6:fb:5a:42:fb:ad:79:da:9b:3d:ca:3f:
fd:a8:d7:cf:79:1c:62:e6:70:f3:3c:4d:5b:4a:79:e6:ca:b7:
da:08:fd:01:dc:7b:34:3b:2d:74:af:a2:f1:67:e6:58:c5:52:
a7:e7:1f:21:6f:b8:52:43:a8:e3:6c:06:42:1c:5e:4c:99:7e:
06:ba:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:13 2026 by rpki-client