
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
File: R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json)
Hash identifier: w3tRUhmhq4jYJFf25i1WpsLEMBZ8RUr5zfPe99Ge0uY=
Subject key identifier: 5C:1D:E8:19:EF:6D:4C:60:40:48:1C:74:53:EA:B1:4F:02:E3:78:0A
Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
Certificate issuer: /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Certificate serial: 0DAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
Manifest number: 0D9C
Signing time: Sat 28 Feb 2026 18:04:49 +0000
Manifest this update: Sat 28 Feb 2026 18:04:49 +0000
Manifest next update: Sat 07 Mar 2026 18:04:49 +0000
Files and hashes: 1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: oQk6QgeAD3fGkFAPj8JotuxJMe6QGZ3F/cQGsy3az2I=)
2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: /Vmvob4Ba5JT6xBzlUxuOFxxM0jXE2HEf4/pjk43Tpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3499 (0xdab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140EE2, serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Validity
Not Before: Feb 28 18:04:49 2026 GMT
Not After : Mar 7 18:04:49 2026 GMT
Subject: CN=69a32e41-daef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:7a:48:c3:98:2d:31:5d:d3:90:17:a7:c0:
ec:a3:81:7e:25:d4:e8:a9:69:c6:0e:41:b0:40:e6:
c8:55:44:3e:82:d5:e1:a5:02:aa:c1:cd:75:b7:c9:
d9:63:c0:68:e5:79:f7:b2:42:7f:70:b5:c8:d7:47:
e0:21:1e:51:e6:f8:7f:00:f8:ee:dc:b4:9f:c8:a2:
d4:11:77:74:86:e2:4e:f6:3d:bf:d1:59:b5:c8:5d:
5c:19:ce:a5:90:e4:99:24:af:fe:a8:f7:7a:a8:e1:
1f:26:8c:4c:b4:31:1e:07:69:92:2c:a9:39:a8:0b:
e0:36:cf:98:bc:e0:fb:27:ec:3b:ca:ee:9d:54:30:
73:3b:3a:a0:f8:c4:77:2b:c2:07:6d:d4:2b:82:d6:
05:24:4d:4a:83:dc:77:82:ad:57:a1:8f:98:62:92:
f1:1e:d2:3e:6f:7b:c1:2d:ed:cb:ad:c5:b8:db:f3:
09:c0:f4:e4:56:81:a5:dc:fd:8c:bd:ba:f6:f7:b9:
b3:ee:4b:97:12:7a:c6:2c:47:2a:5e:80:3c:ab:3b:
5d:c7:8c:31:bb:f9:2f:3e:57:ee:31:4e:3b:81:8f:
28:69:85:e4:d6:1b:b0:24:05:b4:29:62:ed:6f:75:
0f:e4:49:ff:f9:79:cd:1e:3e:19:9c:e5:ad:54:4d:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:E8:19:EF:6D:4C:60:40:48:1C:74:53:EA:B1:4F:02:E3:78:0A
X509v3 Authority Key Identifier:
keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:68:15:61:c0:27:b7:d1:96:d5:d4:35:ca:a4:f8:2a:09:46:
32:f1:c6:c5:45:de:09:b3:2c:00:52:96:27:63:af:f3:27:74:
8a:8c:bc:5f:f0:3c:5a:d9:dc:41:fe:d9:a5:ec:aa:b0:fa:b5:
7e:36:ec:e2:a8:61:11:cc:08:24:fd:0f:1f:d8:90:25:b3:c8:
80:b5:ac:8a:b7:ad:da:5b:91:b1:17:d2:74:e7:9b:4f:60:7d:
0c:d6:c6:c9:a0:ed:ed:91:8a:75:34:ab:8b:8d:bd:d2:2a:c2:
30:e9:68:a4:ee:26:dd:d7:06:29:ab:64:b3:2b:6c:66:37:72:
01:9c:85:77:92:27:b3:fe:6f:bd:5a:c1:f5:34:37:f7:75:30:
d0:6d:99:58:0c:85:8b:05:18:1a:2b:e0:03:8b:e8:b8:97:a1:
54:36:5d:ea:68:2e:c4:7d:12:a4:13:15:25:3a:28:fb:a8:92:
c5:45:b3:d8:c0:a2:70:9c:22:04:c5:60:55:c0:25:66:d1:c4:
92:f9:b0:06:37:48:95:3c:7a:16:e4:4a:98:d6:0e:ec:4d:8b:
22:a0:5e:4a:dc:d3:4e:68:be:05:1f:d9:41:6e:eb:41:37:79:
bc:76:ea:63:ed:71:89:6e:f6:3b:f0:1e:c7:0d:fe:88:fc:1d:
38:fe:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:13 2026 by rpki-client