
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
File: 529w4WvXl_FHD9HglUZu2f_XC94.mft (raw, json)
Hash identifier: CLvht2YQAidhgCazq+pb8tNxTcmm2cU3iIqSjkQFPAg=
Subject key identifier: 35:E0:4A:84:95:C9:B4:0F:7B:DD:4B:7B:2C:A5:F0:86:B7:C8:1E:CC
Authority key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
Certificate issuer: /CN=A914B6D8/serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
Manifest number: 3C
Signing time: Mon 02 Mar 2026 01:19:35 +0000
Manifest this update: Mon 02 Mar 2026 01:19:33 +0000
Manifest next update: Mon 09 Mar 2026 01:19:33 +0000
Files and hashes: 1: 529w4WvXl_FHD9HglUZu2f_XC94.crl (hash: UdWCByks9+ImO79/1OtHilfG2xWxTNU3xf2jpSS18l8=)
2: 551B0760BEBD11F0AD50D23AC4F9AE02.roa (hash: k/Bj5MFr5woGzZDRB9XxOYqM9e19oHws7ME7lRNdfok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Validity
Not Before: Mar 2 01:19:33 2026 GMT
Not After : Mar 9 01:19:33 2026 GMT
Subject: CN=69a4e5a7-e613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:cb:3e:d3:0d:02:40:c3:16:9c:33:ee:93:
ce:04:12:9c:e7:32:a6:f2:51:b1:51:4d:16:17:d7:
13:76:a4:42:cb:cd:95:c8:e7:e9:50:10:9b:3a:57:
2b:d4:9f:d6:27:42:c1:ac:4f:2e:d6:48:46:b3:ac:
92:3a:c4:f3:22:42:fa:5a:00:da:23:11:67:23:ef:
d5:b3:aa:75:d7:42:36:ea:72:45:0f:df:a5:8a:d5:
9a:a9:e8:77:a8:1a:3c:48:11:74:34:4f:a8:fe:25:
e2:e8:e8:e6:91:64:db:35:ab:f1:e5:e0:9e:2f:9e:
b4:8b:6d:4b:76:e5:e2:bc:63:2a:0e:84:81:00:e0:
fe:39:ad:4f:40:4b:14:52:c6:1e:7e:f5:c5:6c:e1:
e9:e8:56:13:ae:59:d9:5b:33:70:ba:80:07:bf:b0:
7f:43:e5:72:3d:7c:8b:f0:c6:84:42:13:8f:ab:e0:
56:ef:23:9f:c6:f5:c1:19:fa:ed:fd:c9:47:96:9f:
e1:41:bb:09:06:f7:e3:f4:4a:17:6c:9c:a8:13:b9:
4b:68:2f:7c:88:28:d8:5c:0b:6f:f4:48:2b:9c:07:
f0:d7:0a:d2:54:ee:f9:61:21:da:d5:97:cd:de:fc:
1c:1e:18:ed:48:7c:62:c9:61:c5:e3:70:a5:06:e0:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:4A:84:95:C9:B4:0F:7B:DD:4B:7B:2C:A5:F0:86:B7:C8:1E:CC
X509v3 Authority Key Identifier:
keyid:E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:64:35:18:dd:68:13:06:e9:35:63:98:30:05:5f:38:b3:50:
5d:18:ad:d4:c9:7c:d4:e8:be:1c:c4:0b:b6:f7:f9:15:f4:92:
89:d4:31:e2:85:0c:f0:65:0f:5e:b0:20:6d:b5:73:2f:7d:ea:
58:11:0b:16:eb:43:7e:d9:93:25:44:cf:a4:02:5e:16:11:36:
45:e5:4e:b9:51:bc:1c:86:59:80:2f:be:dd:89:f6:b7:03:a1:
8a:cb:0d:71:fb:27:16:66:0e:71:96:0a:74:7a:a5:51:fa:67:
10:f7:3a:91:09:97:ea:52:cf:2b:af:19:27:9b:5d:d0:94:2f:
03:45:18:49:7c:b1:7a:09:6b:4c:b5:51:ff:0c:25:84:6b:ae:
2a:99:1d:ed:c7:5c:fc:ef:9b:c7:09:45:82:ac:37:6c:d7:dc:
da:3d:37:39:36:56:a8:30:a2:5b:0e:a4:02:a2:7f:90:cc:77:
1a:64:39:5f:38:2b:a3:07:2c:5f:76:17:e4:d7:f5:a2:9e:e3:
27:f7:98:19:53:e5:0d:3b:92:95:1a:31:05:ad:7b:41:61:ca:
cb:5e:46:de:e3:24:ca:a9:48:11:14:52:29:a2:f2:0d:94:ba:
c1:ab:8e:c8:db:c1:d2:39:14:5d:9f:18:9b:65:ad:74:03:38:
82:4b:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:45:11 2026 by rpki-client