
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier: M6vRLJsLwZx/NEZqaW3JMgL/xlgWDUiUr+BbVHW2tiw=
Subject key identifier: B2:BA:FE:48:B7:B2:00:18:16:49:D9:A7:04:9D:71:E9:48:59:AB:A7
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial: 0B50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number: 0B47
Signing time: Mon 02 Mar 2026 02:58:23 +0000
Manifest this update: Mon 02 Mar 2026 02:58:21 +0000
Manifest next update: Mon 09 Mar 2026 02:58:21 +0000
Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: lY5D+cRSBHYVzAeJcrzNCtOUQnoQn/+vWD4h+MZdOX4=)
2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: sh5UH2ZBn9wBTa697FDn0y/l7y45xFGnVGbIE4BxV4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2896 (0xb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
Validity
Not Before: Mar 2 02:58:21 2026 GMT
Not After : Mar 9 02:58:21 2026 GMT
Subject: CN=69a4fccf-99ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:e1:5d:93:53:0b:48:48:02:93:6d:e9:3a:
48:a8:f6:38:b7:46:bb:44:fd:67:70:d8:e4:a9:7e:
e9:58:4c:f9:de:32:dd:fa:9b:6a:5e:29:1e:73:cb:
91:ce:90:ef:75:7e:ad:e3:2d:6c:cc:f0:08:b7:35:
08:77:14:1d:75:70:8d:64:8a:f6:2f:93:57:77:22:
d8:a2:91:d4:f1:3d:e9:19:bf:7c:e3:27:67:61:fe:
8c:c4:82:36:66:8c:f2:e1:cf:c5:eb:84:6a:8a:d4:
69:3a:03:c3:ec:2a:67:ef:fc:a0:55:d1:35:d6:d3:
b1:4b:e4:71:74:37:7f:12:65:7b:a7:b0:9b:af:d8:
a3:0a:ec:8c:c0:f7:c0:fc:81:36:41:03:12:94:c2:
f7:63:3e:f2:b3:4f:f1:46:c0:df:49:de:29:6b:01:
41:dd:d9:c6:5d:55:6a:8c:3e:5f:2d:34:19:79:fb:
cc:eb:d4:a0:21:da:3c:f8:6b:0f:07:41:e7:20:bd:
07:a8:51:0c:e7:2e:5e:68:0f:c4:3b:87:e6:b3:a6:
5c:46:d7:39:24:bc:bc:bf:f6:b9:68:be:ee:79:76:
08:17:d7:df:8c:73:cd:b7:34:5c:9d:b3:93:5c:c8:
7b:ff:56:e4:0a:6b:f0:ab:05:db:ca:50:6c:d7:8c:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BA:FE:48:B7:B2:00:18:16:49:D9:A7:04:9D:71:E9:48:59:AB:A7
X509v3 Authority Key Identifier:
keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:20:3c:8b:ec:a6:c4:24:69:f7:7b:a5:93:f5:7c:0e:47:91:
e2:4e:89:96:5f:5d:9d:97:0e:df:e8:16:d9:a0:84:8f:37:9d:
9a:9b:a3:76:ae:c5:16:73:53:29:65:f7:6a:c8:2f:23:70:e1:
c8:54:21:88:a5:47:9b:0e:ef:3e:bf:62:ed:8b:bf:5c:25:fc:
7b:9c:4e:e7:e5:43:03:40:40:b5:9d:0e:a8:b2:29:fb:c2:11:
7c:29:48:62:66:b7:42:f9:71:29:3c:33:ac:17:b0:99:51:66:
fd:7e:27:6d:5f:7d:16:22:2c:74:95:62:52:5e:99:94:b0:0d:
fb:92:ba:ba:47:69:6c:c9:e6:f3:3a:7c:5a:c8:cf:f3:1e:d2:
27:79:c7:5c:97:fc:3d:48:4f:5b:c0:4d:f2:c3:fe:34:53:68:
39:5d:c5:0b:a1:80:00:c8:7c:e0:60:c9:bf:c9:6a:d0:61:91:
52:ca:ad:ee:89:7f:23:29:b9:9d:13:0f:18:a9:0e:b7:e8:13:
a1:98:d3:b1:2e:12:1d:ea:0a:a3:3e:55:ee:58:01:6b:70:80:
90:4f:09:b0:a2:3a:66:7f:43:65:4f:84:2f:b5:dc:7d:4d:17:
cf:9e:e0:1b:b1:03:7a:62:9b:6f:fa:8e:94:c9:8f:1b:bc:ef:
65:a3:bf:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZEOTYxMTAvBgNVBAUTKDM0MDQxRkUzOTlDMDc2NTk2MUI3OUZFMTI0Njk0MTcy
ODcyMDczQkIwHhcNMjYwMzAyMDI1ODIxWhcNMjYwMzA5MDI1ODIxWjAYMRYwFAYD
VQQDEw02OWE0ZmNjZi05OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwSjhXZNTC0hIApNt6TpIqPY4t0a7RP1ncNjkqX7pWEz53jLd+ptqXikec8uR
zpDvdX6t4y1szPAItzUIdxQddXCNZIr2L5NXdyLYopHU8T3pGb984ydnYf6MxII2
Zozy4c/F64RqitRpOgPD7Cpn7/ygVdE11tOxS+RxdDd/EmV7p7Cbr9ijCuyMwPfA
/IE2QQMSlML3Yz7ys0/xRsDfSd4pawFB3dnGXVVqjD5fLTQZefvM69SgIdo8+GsP
B0HnIL0HqFEM5y5eaA/EO4fms6ZcRtc5JLy8v/a5aL7ueXYIF9ffjHPNtzRcnbOT
XMh7/1bkCmvwqwXbylBs14zK2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLK6/ki3
sgAYFknZpwSdcelIWaunMB8GA1UdIwQYMBaAFDQEH+OZwHZZYbef4SRpQXKHIHO7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkQ5Ni9BNjI0RkM0NDUx
OTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRsbGh0NV9oSkdsQmNvY2dj
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05BUWY0NW5BZGxsaHQ1X2hKR2xCY29jZ2M3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkQ5Ni9BNjI0RkM0NDUxOTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRs
bGh0NV9oSkdsQmNvY2djN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjCA8i+ymxCRp93ulk/V8DkeR4k6Jll9dnZcO3+gW2aCEjzedmpujdq7FFnNT
KWX3asgvI3DhyFQhiKVHmw7vPr9i7Yu/XCX8e5xO5+VDA0BAtZ0OqLIp+8IRfClI
Yma3QvlxKTwzrBewmVFm/X4nbV99FiIsdJViUl6ZlLAN+5K6ukdpbMnm8zp8WsjP
8x7SJ3nHXJf8PUhPW8BN8sP+NFNoOV3FC6GAAMh84GDJv8lq0GGRUsqt7ol/Iym5
nRMPGKkOt+gToZjTsS4SHeoKoz5V7lgBa3CAkE8JsKI6Zn9DZU+EL7XcfU0Xz57g
G7EDemKbb/qOlMmPG7zvZaO/uQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:26 2026 by rpki-client