
$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
File: -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json)
Hash identifier: ZYVBBXU0EO3DOzd3IU9D1oi/JIoc9JU5hUtwKJffNa8=
Subject key identifier: 86:BB:DD:AE:DF:5C:57:B3:A7:E6:E8:C6:52:CD:00:57:B8:21:D5:36
Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
Manifest number: D1
Signing time: Sun 01 Mar 2026 07:54:19 +0000
Manifest this update: Sun 01 Mar 2026 07:54:18 +0000
Manifest next update: Sun 08 Mar 2026 07:54:18 +0000
Files and hashes: 1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: TPZ02puicx8C5xRVbnU8SB/ezZ+/3l18VmFIOy2v+/E=)
2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: Q8ipP3E5cVxqpK+wwh4P32pECYgAwVU6B1+eB8QC8yE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Validity
Not Before: Mar 1 07:54:18 2026 GMT
Not After : Mar 8 07:54:18 2026 GMT
Subject: CN=69a3f0ab-6651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:bf:3e:94:e8:b7:62:08:3d:1a:c0:50:21:
5d:43:95:11:24:78:24:e8:4e:f9:d3:d0:e3:9d:6c:
54:ad:f1:06:b7:61:a3:49:30:3e:dc:24:a4:eb:46:
fb:95:66:23:4d:2b:87:74:bc:be:14:23:3c:14:60:
d4:fe:52:8d:7f:5e:7d:74:b4:f2:35:6f:f1:7d:42:
e9:1e:c6:bf:82:36:de:56:6a:ba:80:bf:89:94:0e:
ba:db:b5:e5:11:09:d2:9a:4e:3f:95:57:80:57:24:
24:b9:11:38:d7:9a:71:6c:f1:30:48:e4:bd:6e:ce:
88:de:35:42:db:39:69:3f:f1:50:7e:a4:7e:74:6b:
f7:73:9b:58:b7:1e:dd:89:d0:38:2d:95:66:2d:45:
0b:09:bb:36:5c:5f:c1:a3:22:bb:e4:65:cb:ea:3e:
ad:01:ca:ff:88:50:46:10:40:a2:2f:f4:3f:9b:93:
86:6e:22:35:63:a1:53:91:b1:fb:26:b5:2b:db:02:
41:64:ff:1e:2f:a1:ba:d6:9a:8c:c5:cc:02:b1:8b:
c4:9a:3b:69:8e:f9:ea:f3:7b:17:71:ec:b4:73:a4:
b6:c2:0a:78:88:86:c3:b6:fa:2c:90:f5:38:2d:12:
f6:40:54:20:4b:aa:e8:c8:58:bc:21:9d:1e:25:21:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:DD:AE:DF:5C:57:B3:A7:E6:E8:C6:52:CD:00:57:B8:21:D5:36
X509v3 Authority Key Identifier:
keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:74:d1:08:56:51:6e:38:08:c3:bb:64:41:09:07:77:63:40:
dd:95:c4:57:d4:1c:32:21:50:58:96:36:f6:52:49:cb:be:a4:
38:f4:ae:21:30:94:56:08:b4:26:82:4f:11:a4:22:de:c1:64:
5d:8d:14:04:ba:58:09:51:ad:ad:bb:c6:69:d1:4f:25:18:04:
b5:88:67:ab:ac:81:30:8e:6d:96:81:46:58:e7:e5:54:cb:64:
dd:65:d1:4e:02:c7:c2:98:e5:f1:10:13:a6:50:cd:21:14:bb:
cd:bc:34:3c:aa:5b:41:72:2f:8d:00:c0:0a:7b:b8:27:ca:eb:
84:53:d7:68:2b:42:01:e4:9d:5d:85:ff:27:4d:71:09:cd:9d:
e8:a7:08:10:9c:d3:18:ae:43:b4:fa:bc:80:61:11:86:38:c1:
cc:68:c2:ff:02:cf:e4:71:96:e6:9c:e4:1e:78:bd:cd:08:87:
84:cb:b8:5d:93:30:af:5e:c8:6a:8e:13:79:89:14:a9:1b:fb:
1c:9d:eb:ab:91:38:43:6f:bd:11:a6:73:3d:ed:81:4f:a9:38:
b6:0f:e1:ae:c4:b7:9c:2e:1b:e9:bc:9b:bb:23:24:07:30:d0:
f4:75:b2:ae:d4:28:af:da:32:16:6e:ae:e6:4b:76:af:e1:5c:
1f:81:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:42 2026 by rpki-client