
$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json)
Hash identifier: VAxG76hb8y6zMPvknCHSjgaA/p0nUSWBaEuYM21x3sI=
Subject key identifier: F1:A3:BF:C9:C5:BC:19:20:22:F5:DF:A5:18:3F:71:E0:9B:A4:C7:DD
Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
Certificate serial: 0BB1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
Manifest number: 0BA0
Signing time: Sun 01 Mar 2026 23:38:25 +0000
Manifest this update: Sun 01 Mar 2026 23:38:22 +0000
Manifest next update: Sun 08 Mar 2026 23:38:22 +0000
Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: uSiYEHcYcfBk3VuBZ9yA62my6aqh++JnXE+VRZXcjPg=)
2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: EP70FT9vYILp9XYrmWiAL3jLqbW9+S8BdvaaLqMxnTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl
rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2993 (0xbb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
Validity
Not Before: Mar 1 23:38:22 2026 GMT
Not After : Mar 8 23:38:22 2026 GMT
Subject: CN=69a4cdf1-ff08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:89:63:df:58:af:7a:c4:1c:65:76:03:0e:
f5:9a:98:24:2a:ea:41:70:69:4d:ab:46:17:2c:4a:
87:d3:4e:53:2f:6f:f6:42:f4:c4:57:35:cf:d0:1b:
34:f9:18:b2:f7:d7:aa:bf:16:20:83:86:78:42:00:
19:23:90:99:97:e9:26:14:67:6a:83:db:3a:40:d7:
f0:3d:2f:6b:86:43:0b:40:ab:dc:9b:fe:91:fd:ff:
22:30:d5:f2:b4:cc:8c:b8:cb:f4:12:d7:a3:e4:34:
f0:1f:2f:02:4b:20:a7:e3:06:73:ef:23:d2:98:1f:
7a:f1:bd:d4:7f:68:ae:41:18:d6:7b:09:c9:1c:85:
e2:d6:e9:e8:07:be:b0:0a:d4:17:d3:75:75:68:a7:
4e:79:a0:bb:1a:c5:30:f0:38:7d:cd:2f:db:b7:34:
15:b9:c5:52:82:15:3e:c9:4a:d4:14:cf:41:07:ab:
10:9d:58:f6:bd:2b:56:b5:a2:2a:8f:b4:50:92:d4:
1b:ca:d5:08:08:ee:fa:e5:1a:61:e9:ff:5f:7e:8f:
c5:2a:2a:06:eb:af:75:f8:b9:e0:2f:4d:c6:dc:a9:
50:77:43:76:09:21:91:5b:ee:5a:5d:2c:27:ed:8d:
8f:2b:49:b0:41:37:47:ef:3d:48:a9:f1:23:86:56:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:BF:C9:C5:BC:19:20:22:F5:DF:A5:18:3F:71:E0:9B:A4:C7:DD
X509v3 Authority Key Identifier:
keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:d3:c0:0c:95:fb:82:ab:1c:d0:29:40:1a:4d:6a:84:57:26:
16:96:76:05:63:62:33:fe:fb:6b:b7:98:64:f9:ad:dc:d9:fc:
9b:cc:ce:4e:f1:84:83:f1:8f:bd:80:33:d4:68:6e:d4:75:24:
7a:12:10:c8:94:d5:de:2c:65:4a:c2:c5:82:59:5f:59:c4:80:
ed:ec:80:18:9d:06:08:e1:bd:c1:c5:5c:63:2b:65:48:38:5f:
3b:a4:44:a2:98:08:6a:76:44:33:86:8f:6f:27:38:50:2c:26:
2c:0e:22:54:fc:ad:12:b5:4d:b2:97:53:e3:3c:3b:97:7b:c1:
85:86:8f:e0:dd:bd:b5:cc:f3:54:02:a1:3b:7f:d8:45:c7:d2:
18:51:87:5d:b8:a5:cd:0e:d9:f2:a5:f2:2b:d8:8c:7a:64:00:
e3:d4:31:09:bc:db:e9:5f:09:ee:2b:6c:79:76:0b:18:60:d4:
e3:cb:75:5b:fb:03:e6:7a:85:7a:73:d0:22:16:e0:13:61:80:
a7:0a:b9:51:5e:83:86:d4:e0:47:85:9d:78:07:61:3d:ee:47:
59:88:01:2b:d2:90:7c:34:ff:45:9d:f8:ef:1c:6c:bc:90:17:
f0:4f:20:c4:cf:3b:e6:30:af:f8:63:36:96:19:95:10:2d:82:
50:28:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:01 2026 by rpki-client