
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier: A5miRIkGKHvYEH2zhSpMwP0/rE5qMWlZC0/tCWOkJWU=
Subject key identifier: A5:DC:41:BC:BE:F8:A5:26:54:33:42:68:A5:5E:A4:42:7E:57:B7:E2
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial: 093F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number: 091D
Signing time: Sat 28 Feb 2026 20:35:27 +0000
Manifest this update: Sat 28 Feb 2026 20:35:27 +0000
Manifest next update: Sat 07 Mar 2026 20:35:27 +0000
Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: A49UkqHTf7aj3/vGhM589xe0p5Qb2LK1FIOKv/9UJYA=)
2: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: XAx1J/DLce82S0DJ6QETMIUPs/8svCL35NE1zYijtJ8=)
3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: cndw19Zty56t27dvRNtU0GtVAt1H5pGdcRIcu3Z2IPk=)
4: F814A546C01411EA912AC365C4F9AE02.roa (hash: VCA7ATdoKb3bc3VrnHWvqH8lcWu2vv1KBpe9G26/lek=)
5: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=)
6: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: K91u4jcxoGdVwNsfyPrjf+VTjR+CX+rH0W4KKBUnjNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Validity
Not Before: Feb 28 20:35:27 2026 GMT
Not After : Mar 7 20:35:27 2026 GMT
Subject: CN=69a3518f-7366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:35:9f:a0:26:fb:fa:5f:83:33:20:2d:5a:
89:45:65:30:70:c1:49:cf:80:f7:3f:3f:87:ea:f2:
b2:72:82:43:d1:bc:27:cb:1e:c7:ac:60:2b:73:0b:
19:19:e1:96:cb:e8:df:48:a4:71:88:05:f8:84:47:
f6:15:11:8f:09:19:46:69:d0:eb:2a:14:24:c0:b1:
73:e7:44:e1:42:41:d5:94:a8:a4:35:81:99:07:ab:
61:70:59:99:ea:23:45:c7:5d:4f:78:68:9a:6e:62:
50:ce:76:71:33:a2:25:e9:fa:8f:3d:dc:4b:af:bd:
c9:8f:0e:06:4f:8e:1a:43:e8:b1:cf:7d:68:57:41:
b0:c9:86:b8:14:69:fe:9c:01:d5:10:5b:06:5c:43:
fe:6a:d2:aa:79:32:0e:2d:d9:e8:57:b4:26:3b:40:
cb:e1:f1:90:58:d4:9f:5d:ef:45:2f:34:3c:ba:5c:
0b:2f:40:ec:7d:2e:14:68:6b:15:de:28:9d:f0:3b:
65:a1:10:59:df:a0:e2:e3:dd:5c:b1:fe:09:e0:3e:
83:60:f3:1b:26:8e:a8:57:f4:2f:23:a3:5e:5c:db:
4e:b4:17:d4:bd:42:fe:f8:3b:d7:d4:c2:61:14:0f:
cf:02:d6:24:c5:50:b0:03:fe:73:ab:54:1b:2d:e5:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DC:41:BC:BE:F8:A5:26:54:33:42:68:A5:5E:A4:42:7E:57:B7:E2
X509v3 Authority Key Identifier:
keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:88:85:66:b7:be:94:8a:c7:9c:78:3e:ea:2c:6e:0d:cd:3c:
ef:35:aa:f1:f8:19:68:80:94:2e:84:65:d3:bc:5a:ec:97:14:
33:ee:68:de:3a:e3:d5:32:79:a7:d3:02:47:e5:eb:4f:1e:7c:
7a:da:5a:2b:9b:92:ce:7a:54:87:01:2e:79:0a:72:ec:6f:3c:
57:64:5b:14:21:e1:d3:52:ac:4b:5f:7a:f2:19:3c:36:6a:9a:
05:60:0b:61:c4:d3:7e:71:e2:98:1e:59:26:61:6d:17:ba:32:
7e:64:f5:1c:6b:9c:28:a6:73:99:9d:6a:97:93:16:28:94:93:
fc:b4:17:d6:31:ea:cc:c9:19:96:0f:c4:59:cb:ce:cb:6e:35:
79:55:d0:78:a7:86:78:84:b1:a6:73:eb:b1:35:e2:91:31:1c:
0d:3a:4a:e6:12:9b:27:d3:db:b2:92:7f:2b:e3:aa:74:d4:4f:
55:c0:18:0f:dc:d9:74:fa:9f:6e:a1:c0:b5:83:ff:0f:a2:c4:
45:fb:92:95:15:ed:c8:91:13:2f:f4:ce:61:f7:0e:29:9c:c8:
98:aa:41:0c:5f:f8:0e:08:16:02:09:00:4a:78:bc:3c:e0:4d:
ba:8f:80:69:2c:ef:e1:99:3b:a6:91:c2:b8:ce:ca:76:89:52:
4a:ee:3e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:14 2026 by rpki-client