
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json)
Hash identifier: gd/F6rARIfnMYXQAce/dpeuD+w1PtTlcTMOrXzPlvak=
Subject key identifier: D7:31:BB:E9:A6:BB:04:43:31:56:9D:40:8E:89:58:5B:58:BF:FC:DE
Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4
Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4
Certificate serial: 0C68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
Manifest number: 0C5E
Signing time: Sat 28 Feb 2026 18:50:14 +0000
Manifest this update: Sat 28 Feb 2026 18:50:14 +0000
Manifest next update: Sat 07 Mar 2026 18:50:14 +0000
Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: SNjQV/me1QfBBjagAD+f5c7LgvS/o2oM3UPjRr4dDdE=)
2: 021496F2A4EC11F0A8EB5F7EC4F9AE02.roa (hash: k+6bL1sigdhJhsvVBlCJkl8BzQ8/uafB/3pyO3zl0nM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl
rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4
Validity
Not Before: Feb 28 18:50:14 2026 GMT
Not After : Mar 7 18:50:14 2026 GMT
Subject: CN=69a338e6-a9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:6b:2e:bf:cb:2c:04:e3:79:b7:0b:6b:e6:
ad:34:d4:77:d2:ef:7a:b4:18:ed:4f:9d:9a:2e:e0:
b2:8a:16:35:b2:d5:3e:fd:0d:60:e7:d7:b5:eb:5f:
07:d9:b5:1a:66:ac:49:d0:3c:2a:ca:d3:3a:78:fc:
c2:c5:33:d7:aa:da:0f:f2:d5:76:57:71:bb:ac:e0:
35:ff:db:4c:e7:f2:df:42:90:f3:57:4c:1b:b9:1f:
e9:f0:ca:05:b9:8a:fe:eb:39:b5:51:21:55:40:45:
4b:af:d6:56:79:fe:59:57:ea:c2:93:3d:11:82:3a:
52:ca:c7:ef:61:74:d3:68:2d:95:56:37:33:9d:27:
01:83:95:5a:59:1e:1b:67:f7:6a:ab:73:89:10:5b:
3e:3e:10:cf:20:36:01:17:0b:63:ef:e7:2d:e9:69:
75:33:c3:4d:79:d4:dd:94:4e:a3:42:2b:88:0e:38:
c4:46:62:82:1c:de:40:ee:8e:3e:76:80:77:52:37:
6a:b5:64:c0:75:ef:ce:f1:b6:81:56:09:ac:97:7a:
40:4a:6b:51:53:49:9f:1c:aa:5c:57:cd:5b:c3:57:
be:f9:a4:2e:23:cc:68:a8:99:0c:d2:8a:27:a1:98:
4c:09:59:63:32:ac:9c:0b:2c:51:e6:0a:fb:ee:26:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:31:BB:E9:A6:BB:04:43:31:56:9D:40:8E:89:58:5B:58:BF:FC:DE
X509v3 Authority Key Identifier:
keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d6:98:d0:52:a3:7b:5e:59:da:3a:f9:89:09:2d:05:73:eb:
eb:71:99:71:7d:43:ec:4b:bd:a0:89:3f:ad:0c:0e:56:60:0f:
45:a2:d2:6e:19:10:42:f4:11:ee:29:69:b1:55:c2:03:e6:af:
98:df:c3:5d:ce:53:88:93:4c:9b:ba:ce:a3:ff:9e:ae:26:50:
83:60:7d:39:cb:5f:5b:ef:c9:8e:10:07:2a:43:6c:82:cd:e8:
ce:b7:28:2c:f1:d4:9c:d4:d3:c8:58:97:65:3a:7e:e9:e5:be:
23:9c:15:c0:7f:4e:1e:0c:f0:eb:74:d5:d6:15:8b:98:69:50:
73:b1:ee:0d:73:46:94:fc:df:fd:61:63:0b:0c:ca:c9:de:b3:
fc:28:46:82:0f:50:67:7e:79:ef:12:92:3a:26:8d:75:95:12:
08:fa:9e:20:ea:07:72:dc:b5:a8:38:62:59:36:cc:92:f2:7e:
11:14:f9:ae:44:34:b1:dd:c5:8d:61:0f:7e:c4:ab:23:b1:a5:
44:61:5f:6c:a1:ea:f4:b4:76:29:3b:5f:af:a7:c7:7f:e8:28:
df:53:7e:d1:ca:ac:d5:c1:9d:01:59:36:35:97:64:ae:5b:fd:
f8:16:35:22:6d:29:3b:20:58:a4:b5:b7:d6:c1:dc:1b:0b:e7:
88:a5:89:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:24 2026 by rpki-client