
$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
File: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json)
Hash identifier: V+qYgGsH658TOQ+A/wOQaQVzyuTuAkf2lozr6e0o2CM=
Subject key identifier: 01:7C:86:CF:C5:84:64:61:BB:83:82:4D:D1:B9:A9:31:0B:F7:17:91
Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
Manifest number: BF
Signing time: Sun 01 Mar 2026 08:13:01 +0000
Manifest this update: Sun 01 Mar 2026 08:13:01 +0000
Manifest next update: Sun 08 Mar 2026 08:13:01 +0000
Files and hashes: 1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: TWGLEgSSbWpo4k3mA22ro1/853B5l+OSWLPtZO4p+kY=)
2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: VHgAuutdhbhQEJiMwT9AF6NJJkPzn16sBFyZuNFsiyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Validity
Not Before: Mar 1 08:13:01 2026 GMT
Not After : Mar 8 08:13:01 2026 GMT
Subject: CN=69a3f50d-4cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:3d:64:07:78:51:4f:1b:43:f2:36:ee:2f:
2d:a7:8e:13:18:84:ae:bd:ae:21:89:a9:5f:f6:b8:
30:2f:e1:8f:6a:3b:9d:48:c7:82:c9:63:73:1a:f7:
a7:d8:be:a0:c2:b9:b7:1c:16:21:e4:b0:44:5c:4c:
98:c6:b5:c4:5f:54:ac:e9:55:66:42:d3:c5:5d:71:
c8:4a:2e:c9:36:85:ba:67:30:5a:60:8a:37:fa:98:
a2:07:da:13:5e:0e:e9:eb:8f:5a:b7:21:28:c2:4a:
47:42:9a:95:37:99:21:81:c6:f1:9d:52:1c:c0:fc:
34:25:33:2b:88:17:0d:b4:f3:ed:fb:99:6e:48:dd:
f4:54:95:4d:66:7a:f0:31:6e:ab:56:38:b0:86:0b:
da:f7:c2:c0:ee:8e:90:a8:1a:75:41:9a:b7:8d:99:
07:2e:c9:3d:45:2c:98:13:c5:c5:16:d6:2d:e2:ae:
78:6f:e0:f6:8f:12:c0:c9:76:4d:d2:da:4f:4e:53:
be:35:65:f7:31:b5:23:60:ca:40:f3:b3:94:6a:ed:
8f:d4:83:38:fa:4f:bc:ce:10:fb:3f:38:bb:0a:f4:
f0:1d:74:50:49:48:c4:72:04:fb:97:9a:3a:4b:50:
3a:63:94:54:14:36:6f:53:25:30:07:c0:14:1f:a1:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7C:86:CF:C5:84:64:61:BB:83:82:4D:D1:B9:A9:31:0B:F7:17:91
X509v3 Authority Key Identifier:
keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8d:9e:6e:09:fc:74:10:0f:49:ff:6a:74:d8:90:15:97:2a:
5e:cd:ac:9e:83:64:89:cd:cb:3c:16:39:c4:88:8f:35:7e:b0:
aa:c4:01:6b:fe:bd:e8:b1:e2:02:e3:12:8e:f0:aa:49:4c:fa:
b3:00:62:49:67:fc:19:c3:ee:2c:14:42:85:fa:e5:94:7f:df:
bd:6d:be:ac:92:37:7b:d9:52:64:bd:3a:dd:c9:95:8e:e5:fc:
4a:3b:a4:23:90:ec:d1:2d:cb:67:c5:f0:4c:ed:63:7e:97:a3:
bd:ff:4f:eb:e0:ec:d9:74:52:c8:c9:e5:af:0b:a1:96:3b:8e:
fe:13:a5:a9:fe:8a:60:e6:29:ad:d8:16:c0:80:2b:65:95:0a:
51:db:80:9d:d3:d0:4e:2b:a0:5c:e0:a1:f8:6e:92:f6:2a:f8:
70:b7:ec:00:db:23:c8:e6:80:ab:34:15:2b:69:ee:4f:ec:ce:
e0:16:c8:73:f6:aa:97:7c:3f:23:87:87:de:97:d7:82:43:e1:
ba:6b:ab:08:a9:60:a6:7c:75:3f:a8:8e:df:2a:5b:bc:91:62:
82:65:23:da:01:d0:56:6f:c7:0d:93:0a:64:81:1b:ac:b2:0c:
e1:6b:4e:c2:21:27:7e:2f:53:26:38:ba:4e:91:09:39:6e:51:
10:5d:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:40 2026 by rpki-client