
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json)
Hash identifier: CQ9b9Tgxm41vF/QKfU8PFL9f+pkZ7oHhnEJde046GlU=
Subject key identifier: 80:B4:73:62:CD:73:E5:EF:F2:A1:2A:C6:39:C0:02:87:4B:41:22:1A
Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47
Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47
Certificate serial: 03FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
Manifest number: 03EB
Signing time: Sun 01 Mar 2026 23:51:02 +0000
Manifest this update: Sun 01 Mar 2026 23:51:00 +0000
Manifest next update: Sun 08 Mar 2026 23:51:00 +0000
Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: SAOByyubeRcb6NXDG5NbJPStweBdgfVlW3Ov2cf0P5U=)
2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: GCF/9VMFmjdFmy3bYTGGRnKSNfUmeGJXgemnhDHWC2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl
rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022 (0x3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47
Validity
Not Before: Mar 1 23:51:00 2026 GMT
Not After : Mar 8 23:51:00 2026 GMT
Subject: CN=69a4d0e5-60d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:80:f1:03:37:57:ae:03:d7:4c:18:34:81:
b7:92:25:0f:45:9f:19:f1:1f:9e:37:10:38:54:b2:
33:c8:ff:70:d0:45:99:ea:0e:c7:d9:18:71:91:fd:
aa:0a:a6:a4:57:15:12:8b:d4:40:38:7c:99:ee:4b:
07:df:e7:0b:52:1f:60:30:e3:dc:eb:f7:1f:77:83:
1e:c0:d7:f1:5a:74:b6:f0:c5:ed:8f:4f:cb:1f:4c:
1e:0f:81:65:70:1f:27:3c:71:0b:f0:0e:01:d7:08:
69:c2:e0:3e:d8:4a:84:c9:b1:3e:c4:cc:26:cf:50:
0d:d4:da:a4:b4:0e:9b:42:34:d5:bd:7f:78:c3:bb:
f4:75:43:2b:0a:31:37:d8:45:9f:e2:18:df:e8:f1:
29:bb:01:55:f6:79:f0:a6:4b:3f:79:13:57:fc:ab:
c7:c8:d1:96:26:18:91:6a:0a:6e:93:1e:93:e8:d9:
71:84:01:c0:33:dc:fc:15:a7:90:46:15:91:f7:4e:
d3:9c:e2:fb:a8:8f:9f:12:97:a5:70:ff:5d:60:99:
cf:0f:41:4a:a9:c2:9e:ec:45:82:44:c7:d8:56:66:
27:7b:f1:ba:0e:12:fb:1f:a9:93:89:d8:c5:00:06:
bd:15:19:0e:8d:09:8d:aa:87:66:fd:7a:8e:37:ed:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B4:73:62:CD:73:E5:EF:F2:A1:2A:C6:39:C0:02:87:4B:41:22:1A
X509v3 Authority Key Identifier:
keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:d8:57:53:65:8b:53:88:cf:04:1b:e5:c2:1b:3b:2e:47:1f:
a2:b2:a8:66:f8:b1:f1:c1:d2:fd:5a:c0:48:6c:c8:7c:1b:b3:
a8:05:89:90:6d:42:07:b6:86:dd:9a:c5:2d:3f:53:01:f3:47:
7d:6c:7d:2b:2b:f0:1e:5a:d8:d9:47:a9:ef:35:22:4e:85:66:
20:cd:b4:2f:27:68:94:01:6e:82:9b:cb:b0:69:b0:c7:c0:68:
55:4d:5d:5c:82:8d:d5:5b:1c:0e:1a:c2:27:3a:60:fe:72:8a:
f8:77:f6:8c:83:8e:01:fe:93:d1:28:1a:4a:0b:d3:9a:52:76:
d7:8a:a7:8f:06:2a:93:d5:b4:74:90:21:a8:c3:e6:13:09:13:
44:08:9d:c1:ea:b3:c2:02:61:d2:eb:d3:5a:f3:ea:2b:3f:9e:
e9:2d:53:b4:24:28:93:75:27:74:36:2b:89:61:b6:a4:0f:24:
a2:58:27:aa:1c:e4:c9:98:98:8e:e2:46:c3:85:4b:2b:ff:29:
17:4d:6f:5f:48:7a:49:a8:f0:9b:ad:aa:94:4b:a9:5a:17:df:
50:c0:6b:e5:b7:21:af:5e:8a:55:8a:0d:a2:88:27:47:56:53:
7f:c1:47:f5:06:86:bf:cc:f1:84:cc:15:cc:b1:8c:52:0a:8c:
a7:97:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:42 2026 by rpki-client