
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json)
Hash identifier: GdSlwRdU1dOqPCtYR61QDutId68Q9gH3kbKpddAOf68=
Subject key identifier: D4:B4:28:CD:B7:30:78:12:81:14:15:C4:CC:97:AF:26:5A:0E:A3:F8
Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8
Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8
Certificate serial: 0917
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
Manifest number: 08E7
Signing time: Sat 28 Feb 2026 14:47:06 +0000
Manifest this update: Sat 28 Feb 2026 14:47:06 +0000
Manifest next update: Sat 07 Mar 2026 14:47:06 +0000
Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: DoAvqJRRJ+okjWE0f/6xVf14zLlFFOeS2Hy2yuFdrdU=)
2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: geYBmD1DM/AUXSPUgRalrZ3WyRIJCoCzSg/oC0uheIE=)
3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: zD1hAOWgfFf8imPdjoaN6Kre5zSjJhCHRQDKqb4UceI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl
rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8
Validity
Not Before: Feb 28 14:47:06 2026 GMT
Not After : Mar 7 14:47:06 2026 GMT
Subject: CN=69a2ffea-f351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:36:bf:40:2b:f9:4a:e7:57:e7:f8:5d:0e:
cf:f7:de:72:24:fa:bc:08:1b:ae:4a:ca:9a:71:18:
60:1d:7f:97:88:80:cd:09:c9:ef:35:7b:2c:16:7f:
28:a7:af:58:31:21:26:d2:ad:d7:b3:08:cb:68:a2:
3d:ff:c7:65:f6:db:5e:62:43:96:f5:e0:ee:86:ad:
a6:65:47:6c:13:17:90:26:82:eb:8b:7d:49:a5:03:
a7:99:17:d7:44:60:57:c8:73:c0:93:97:cc:ba:6d:
6b:4d:1b:24:90:de:28:c9:0a:e6:6e:d2:40:a2:e4:
84:a0:8e:15:f0:74:7e:58:a9:3b:c6:b0:19:bf:f5:
9d:70:66:a1:f5:83:81:c7:58:f2:51:e1:a1:19:2b:
fd:38:4c:ef:45:89:6b:f6:0d:78:a4:b2:b8:44:eb:
7c:44:a0:5d:19:9f:e4:8c:96:d6:aa:2a:94:70:df:
f8:47:2a:94:92:0a:da:98:37:c3:1d:b4:a5:7d:a8:
04:05:53:eb:ec:58:07:01:8c:a1:54:1f:10:25:f1:
1b:01:8e:fd:dd:46:c3:7d:34:80:31:bd:33:41:24:
46:af:04:1d:ab:41:cc:2c:88:66:d7:07:2a:fb:3d:
06:67:3e:25:c1:7a:fa:07:ef:bf:f0:0b:20:48:36:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:28:CD:B7:30:78:12:81:14:15:C4:CC:97:AF:26:5A:0E:A3:F8
X509v3 Authority Key Identifier:
keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:99:c1:f0:0a:df:ed:bf:9e:01:34:78:98:38:ed:18:c6:c2:
2e:01:39:4c:bd:bf:95:e4:6e:6c:67:21:76:bd:83:87:2f:5f:
67:62:b4:29:6b:88:5d:ee:51:bc:7e:fd:5c:22:0b:b4:93:bf:
0d:83:1d:17:19:bf:45:c2:53:b2:e3:f1:a1:ed:3d:19:ef:af:
94:05:ce:07:dc:5a:ce:2e:ee:e3:7b:1c:3e:50:9b:b8:5c:e3:
ed:7b:aa:0f:e0:c9:44:ce:fd:43:ae:69:36:20:a3:e8:9c:8c:
51:49:5d:51:07:3f:a1:f2:d9:42:4e:78:4b:90:bf:6d:04:ab:
e8:00:1b:af:ef:43:7a:24:3f:eb:b4:63:ba:50:34:c8:e0:64:
42:a3:23:93:31:c2:9a:8d:c5:aa:c0:3c:22:19:49:97:63:e2:
d2:45:1b:01:ca:98:43:ea:fc:1e:43:b6:36:4a:a9:40:8b:4c:
81:d0:8e:95:66:24:d2:b3:3d:60:d1:26:f3:09:72:eb:23:a8:
13:bd:09:dd:41:7f:86:78:de:ae:8a:9d:05:ba:3e:77:fc:f2:
52:6c:67:4f:71:3c:e5:b8:16:16:5c:c1:8a:0d:8b:59:2e:19:
83:c5:2c:cf:d7:9f:8f:18:04:e2:10:35:42:19:a0:10:90:18:
e4:47:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:09 2026 by rpki-client