
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json)
Hash identifier: YAGZVu7+mZUSnHbZtIl5kaUE5+jNGYApLhPxkRGittI=
Subject key identifier: C7:D6:55:28:AD:D4:8E:B5:8D:E1:44:AC:46:B5:D3:5C:62:3B:B2:2A
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial: 08AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
Manifest number: 08A0
Signing time: Sat 28 Feb 2026 20:50:31 +0000
Manifest this update: Sat 28 Feb 2026 20:50:31 +0000
Manifest next update: Sat 07 Mar 2026 20:50:31 +0000
Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: xDbcIMhCuHpbv7LQsj4CR4cll2+zecJUBG66NAz/MH4=)
2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: bmGPH4RhQZKxlLUmaYqMU+RwVlTsBX8WAQ+VbAJVD+E=)
3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: +U5B9OE0qMYRoG1rt8ratJnPLrr7cjy6lf0aOQepvOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2219 (0x8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Validity
Not Before: Feb 28 20:50:31 2026 GMT
Not After : Mar 7 20:50:31 2026 GMT
Subject: CN=69a35517-c5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:9e:f8:29:80:05:5e:db:28:4b:1a:9b:a7:
6f:a3:75:9e:16:03:5b:54:d3:f2:09:48:88:c1:3e:
8d:7f:aa:79:59:2e:85:82:3c:e0:d6:dd:7c:97:27:
b6:96:5b:e7:83:2d:b0:54:98:6c:48:59:09:5c:ce:
ff:e3:1e:a9:84:ff:22:ed:33:de:c1:e3:58:02:dd:
b3:86:ee:5a:75:83:29:9c:a1:a0:23:1f:4f:ef:e5:
14:fb:39:2f:9d:b1:c4:07:01:98:e8:53:c4:8d:8e:
f3:3f:43:42:be:62:d6:e8:3c:4c:31:23:b7:97:d0:
37:8a:e7:b7:56:63:ee:df:1d:4e:e4:7e:50:9d:73:
dd:c4:1a:dd:84:f8:f9:ad:2b:05:e8:37:fb:f1:6f:
ce:14:56:e9:2b:35:07:21:f9:0e:c5:4f:ff:64:5b:
0b:ed:25:4b:8c:7a:14:c3:5f:99:63:7e:31:0e:13:
d9:59:86:30:c0:4a:68:17:72:7e:20:1a:18:15:e2:
ea:ef:62:87:f7:a1:ea:0e:0c:4f:d5:fe:d7:a7:91:
11:ce:4e:82:06:71:c8:67:65:18:5d:fb:bd:14:97:
e9:b9:4d:df:78:32:f0:d4:3e:e3:06:86:cc:b3:65:
28:1d:70:22:82:82:5a:fc:b0:38:ed:e9:a9:fa:86:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D6:55:28:AD:D4:8E:B5:8D:E1:44:AC:46:B5:D3:5C:62:3B:B2:2A
X509v3 Authority Key Identifier:
keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:dc:63:fa:12:8e:5c:cd:ff:35:5d:45:6e:bc:3b:fe:09:c8:
b4:99:89:0a:a8:17:ef:01:d7:25:6f:c8:0e:a7:1f:d9:f4:db:
9e:59:b4:16:b1:7b:0a:34:da:20:6f:3e:b9:99:91:21:c0:de:
4c:c3:da:de:f7:e2:fa:62:38:e7:fc:68:d1:ac:3f:ef:3c:59:
34:ce:cc:cd:3d:c5:cf:81:3a:1a:28:76:b8:a8:87:b5:10:10:
db:87:8f:5d:91:e9:1d:c1:73:3a:58:28:8f:cc:38:28:3a:91:
07:d5:e0:a3:ce:bf:86:cb:d8:ef:78:23:d8:fc:d2:c7:7c:59:
d3:3b:dd:78:64:71:b8:99:cf:ed:45:27:66:55:2b:68:c0:54:
95:56:63:0b:4c:90:62:9c:14:7f:bf:d1:93:97:6b:b3:3a:23:
5f:d2:89:13:05:ea:bf:47:29:20:a9:3b:70:02:44:24:00:6f:
da:14:af:f8:e1:6d:36:3a:3d:30:4d:ae:ab:b4:f5:57:b1:eb:
00:ea:81:99:a8:e5:77:e7:01:aa:fb:22:7e:4a:4f:ec:0e:33:
18:ec:1e:84:8b:ed:cd:36:ad:a0:bb:9f:47:b9:47:a5:99:d2:
9e:6f:31:c8:1c:f5:ad:c4:3c:b3:4d:b1:b8:b6:3a:0f:e3:18:
51:57:5a:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0
NTJGRjQ0MUMwHhcNMjYwMjI4MjA1MDMxWhcNMjYwMzA3MjA1MDMxWjAYMRYwFAYD
VQQDDA02OWEzNTUxNy1jNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMee+CmABV7bKEsam6dvo3WeFgNbVNPyCUiIwT6Nf6p5WS6Fgjzg1t18lye2
llvngy2wVJhsSFkJXM7/4x6phP8i7TPeweNYAt2zhu5adYMpnKGgIx9P7+UU+zkv
nbHEBwGY6FPEjY7zP0NCvmLW6DxMMSO3l9A3iue3VmPu3x1O5H5QnXPdxBrdhPj5
rSsF6Df78W/OFFbpKzUHIfkOxU//ZFsL7SVLjHoUw1+ZY34xDhPZWYYwwEpoF3J+
IBoYFeLq72KH96HqDgxP1f7Xp5ERzk6CBnHIZ2UYXfu9FJfpuU3feDLw1D7jBobM
s2UoHXAigoJa/LA47emp+oZRlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfWVSit
1I61jeFErEa101xiO7IqMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC
REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS
M1FUeDFFZHVOWlZGTF9SQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF9xj+hKOXM3/NV1Fbrw7/gnItJmJCqgX7wHXJW/IDqcf2fTbnlm0FrF7CjTa
IG8+uZmRIcDeTMPa3vfi+mI45/xo0aw/7zxZNM7MzT3Fz4E6Gih2uKiHtRAQ24eP
XZHpHcFzOlgoj8w4KDqRB9Xgo86/hsvY73gj2PzSx3xZ0zvdeGRxuJnP7UUnZlUr
aMBUlVZjC0yQYpwUf7/Rk5drszojX9KJEwXqv0cpIKk7cAJEJABv2hSv+OFtNjo9
ME2uq7T1V7HrAOqBmajld+cBqvsifkpP7A4zGOwehIvtzTatoLufR7lHpZnSnm8x
yBz1rcQ8s02xuLY6D+MYUVdagw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:30 2026 by rpki-client