
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json)
Hash identifier: rHXmX3s3pUUUkmUtHyHo/EEj4CjQJsr6MWGYs7t62X0=
Subject key identifier: B5:55:70:EC:73:D5:17:FF:72:33:F3:12:36:0D:96:5B:42:F8:83:60
Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Certificate serial: 1BB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
Manifest number: 1B9C
Signing time: Mon 02 Mar 2026 01:19:26 +0000
Manifest this update: Mon 02 Mar 2026 01:19:26 +0000
Manifest next update: Mon 09 Mar 2026 01:19:26 +0000
Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: GC7Z024teuyqUrvvzYfgXr7A7D0ZzwAoJwRcrHaZsW4=)
2: 90C8D27021C211E786829418C4F9AE02.roa (hash: BIi83IQ7eYgpac+6JC2FcGYhkLEvBbvlv/VGfN/XOPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7093 (0x1bb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Validity
Not Before: Mar 2 01:19:26 2026 GMT
Not After : Mar 9 01:19:26 2026 GMT
Subject: CN=69a4e59e-b65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:85:de:26:7b:b2:3b:ac:c5:8d:f3:53:57:
26:d4:64:65:6e:eb:43:8e:90:9c:ce:4f:4f:89:fe:
83:ef:04:6c:30:4d:3a:45:84:b2:c1:a4:5b:86:16:
54:52:12:bc:0f:98:ba:4e:58:a2:74:34:e8:23:43:
fc:32:89:e5:6d:23:24:32:b4:22:81:a8:d7:14:61:
33:14:e8:74:6d:be:05:29:70:49:59:cb:8e:3d:f6:
f1:22:74:d8:16:66:5e:22:fb:a2:72:8f:52:c4:1b:
d6:7b:84:3e:ac:6f:25:75:90:b3:e6:41:db:b1:71:
9f:d8:36:12:f1:b2:78:6a:85:d9:64:e7:66:ec:e2:
83:7e:30:28:66:ef:f1:76:04:1b:87:17:ff:2c:98:
91:96:cd:52:e5:0d:e4:12:26:6f:c4:34:45:a0:46:
90:ea:35:9f:a3:00:1c:cc:df:4e:56:07:99:dd:8a:
5a:7b:9b:91:a2:21:46:17:43:29:09:73:81:37:37:
06:03:9d:cc:07:16:30:67:6f:d7:ae:3d:48:0e:11:
fd:d9:2c:a4:c2:81:12:d2:6d:4c:54:e5:cb:7b:95:
bb:57:5c:d3:45:63:35:56:e9:89:6f:b5:96:67:3e:
1b:29:31:6a:71:97:17:d2:01:c8:43:c3:67:0a:2c:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:55:70:EC:73:D5:17:FF:72:33:F3:12:36:0D:96:5B:42:F8:83:60
X509v3 Authority Key Identifier:
keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:e6:3a:5b:92:d3:35:c6:56:f2:fa:98:b1:6b:8b:a8:39:16:
0c:e8:50:08:f2:bf:4a:9d:28:c9:6a:1f:0f:ad:f5:f0:f2:07:
c0:1e:13:92:10:2a:f8:03:c3:3b:09:1b:cc:aa:5e:41:9f:cb:
00:49:f7:66:a8:73:d0:55:8e:5d:0b:22:fe:db:50:21:e6:35:
97:fb:6e:b5:54:1b:d2:26:ba:98:21:57:d5:a8:c7:64:fd:cf:
b3:fb:3e:f5:53:a4:58:76:a8:38:63:7b:56:7d:56:77:e9:2f:
31:ae:26:93:cc:1c:b0:e0:76:9f:bd:c0:91:80:ed:a4:4f:fd:
0e:0a:4e:e1:72:40:74:c8:02:9f:b8:58:42:89:53:69:63:94:
02:ea:5a:ee:3a:17:c3:b6:a0:8b:82:25:77:a6:d8:b1:cf:0f:
c0:bd:0e:b5:f2:40:64:7e:1f:c7:65:61:31:dc:b6:29:a9:af:
cd:e2:cf:7d:c4:da:5f:f6:8b:f5:20:dd:85:d8:22:4b:fb:ae:
f1:53:ea:48:90:3b:5d:b7:94:64:ab:c2:48:65:fe:b6:4f:55:
b5:ec:dd:ed:04:31:4b:b9:df:2c:c2:5c:12:7d:22:04:16:ef:
60:c2:9e:f1:df:c5:05:72:64:9e:e1:dd:a4:73:ab:00:9e:aa:
db:ed:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:12 2026 by rpki-client