
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft
File: T_Dy-NvzsUpesSO0H-neZzsSUX8.mft (raw, json)
Hash identifier: RQq7vDweF6eEUMr9u0t9Vq3Y/UlzwBVzAC+Gc+UuwxQ=
Subject key identifier: BC:6C:52:14:46:E7:9A:A3:CD:F8:20:D6:FF:57:95:C3:CD:DD:79:AE
Authority key identifier: 4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F
Certificate issuer: /CN=A913F3A2/serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft
Manifest number: ED
Signing time: Mon 02 Mar 2026 01:04:05 +0000
Manifest this update: Mon 02 Mar 2026 01:04:02 +0000
Manifest next update: Mon 09 Mar 2026 01:04:02 +0000
Files and hashes: 1: T_Dy-NvzsUpesSO0H-neZzsSUX8.crl (hash: dRggyu8snnzjk1U9EH+vtYedWAyMvS/26F9whucDJFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl
rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F3A2, serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F
Validity
Not Before: Mar 2 01:04:02 2026 GMT
Not After : Mar 9 01:04:02 2026 GMT
Subject: CN=69a4e205-9e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:9c:b9:ea:14:c9:ee:e1:47:83:e2:6c:cd:
61:53:cf:32:69:8c:93:57:f8:2c:41:f1:54:a3:5d:
a2:4b:a2:ac:a5:5c:03:3d:a2:f5:56:43:e6:80:23:
cc:7a:1e:49:20:be:a3:24:56:df:07:e0:e5:d0:71:
29:39:65:73:03:cd:51:40:78:bf:5b:7f:ff:1e:87:
c6:1c:36:81:47:f1:55:cf:e9:93:50:6b:ab:d3:31:
f9:a4:91:50:d8:6c:e8:80:5f:81:a4:13:e8:e0:af:
df:f5:2d:3b:82:3c:d2:4b:ee:eb:1a:4b:83:a7:5e:
aa:1b:e4:03:23:aa:c1:64:11:ef:26:80:43:4a:0d:
00:21:b1:9d:97:6d:43:20:6e:a5:ab:5b:5e:5a:30:
b7:09:c8:c5:31:38:9c:b8:ae:41:ae:c3:64:57:6c:
6b:04:d4:21:1a:fb:52:95:27:67:01:a2:58:1b:01:
cd:6d:a0:29:7d:63:79:32:d3:a2:7c:de:c2:26:d1:
ac:7f:04:53:4b:0d:fa:c4:b8:40:96:1e:18:29:a7:
ad:44:99:9d:3e:cd:38:70:98:44:7d:34:3a:95:a1:
03:45:ba:f3:6f:92:8c:ca:08:61:9b:4f:f9:e5:af:
3f:9d:d1:61:f4:66:80:b3:c8:05:55:24:fc:8e:8d:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6C:52:14:46:E7:9A:A3:CD:F8:20:D6:FF:57:95:C3:CD:DD:79:AE
X509v3 Authority Key Identifier:
keyid:4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:2c:05:23:ae:be:16:0c:49:c9:90:17:d2:1a:bf:28:55:df:
da:eb:8d:ff:03:97:b6:98:b5:bc:8b:ac:d7:28:fe:1d:f2:76:
87:a2:45:65:d6:d5:ed:be:1d:f8:30:9c:a9:a3:78:25:17:69:
55:d0:68:ea:27:af:18:fe:61:d3:10:d2:74:1f:3a:0b:77:20:
64:1d:52:7b:e3:97:3d:1d:83:cb:45:b2:f3:2b:2f:ae:cd:03:
7d:63:4d:0f:78:4d:ce:9f:44:4e:90:d0:b3:c5:8c:e5:bf:8d:
ee:9f:60:52:0d:a4:d4:10:79:52:7e:38:6e:af:0f:a9:70:2e:
35:a9:b2:b2:e4:76:ec:3e:11:d8:ac:6d:5b:2f:23:ed:d4:9c:
96:97:e9:67:5c:04:b7:ea:fe:75:70:1e:10:02:91:54:70:2c:
4d:e8:92:b3:b7:41:b7:88:f7:b3:95:65:96:e9:90:3a:70:9f:
88:a4:e9:9c:77:d5:cc:4c:23:bf:7c:5a:45:21:c3:39:1b:21:
9c:45:62:db:dc:61:dc:2a:63:f6:d9:f8:12:29:ff:fa:dc:ae:
a3:94:7c:67:4b:b2:f1:73:80:d9:41:b7:0b:e7:58:87:1e:ca:
1a:e8:52:49:15:e6:6f:ce:e9:90:7d:a0:80:71:2c:6f:cc:11:
ca:93:49:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:16 2026 by rpki-client