
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
File: r1VYG6En4gkKClRi_nvOcGFvLNw.mft (raw, json)
Hash identifier: 37TdA1XleJOyqOl2qCV6v8DQ1fNmWICp+EchcrDbCP0=
Subject key identifier: DF:B7:0B:89:60:24:B8:E1:BA:29:84:56:60:F4:29:58:41:D9:42:6E
Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
Certificate issuer: /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Certificate serial: 03A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
Manifest number: 039C
Signing time: Mon 02 Mar 2026 00:34:55 +0000
Manifest this update: Mon 02 Mar 2026 00:34:53 +0000
Manifest next update: Mon 09 Mar 2026 00:34:53 +0000
Files and hashes: 1: r1VYG6En4gkKClRi_nvOcGFvLNw.crl (hash: A3hdq0oC4ysW+TWbLb16KdFVxpREM5hYZWEQCSn3Up0=)
2: 1B22E756D37711EC9A8FF526C4F9AE02.roa (hash: OFMvnZfCLjiSwnf1cPBu30hzFhRBACJBgYSyDP0KQYg=)
3: 1CA2FA08D37711EC9A8FF526C4F9AE02.roa (hash: iFAiKmbeS48rOELgvs1ZiWGavpi+F11E+IY53nPuF8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl
rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B758, serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Validity
Not Before: Mar 2 00:34:53 2026 GMT
Not After : Mar 9 00:34:53 2026 GMT
Subject: CN=69a4db2e-1c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:1e:a5:ef:d0:66:90:b6:4e:83:37:ae:f8:
f4:0e:e8:a2:0d:c4:84:46:bc:43:84:e5:b1:db:c7:
49:8f:0d:d6:2b:9c:ae:26:f4:f6:72:44:af:4b:b5:
ae:d7:0f:00:3c:f8:43:4b:ac:99:eb:2f:48:13:69:
06:c8:72:5f:74:d9:a8:c7:e9:03:6c:1a:1f:cc:55:
a7:d6:56:99:87:e2:ea:6b:1b:2f:17:78:54:59:b7:
d7:d3:c1:e6:d8:dd:cc:56:47:e9:b6:7d:13:ca:ef:
b9:ef:26:8d:28:7a:e0:5d:d7:62:62:01:b9:3b:6a:
39:55:9e:aa:ed:89:f9:86:a7:01:11:4b:96:48:94:
e5:03:6f:bd:9c:bf:1a:49:2a:af:ab:25:3d:e5:1c:
fd:24:c3:cd:c6:c7:ab:d7:08:fd:d5:1d:75:4d:b4:
11:cc:99:3a:09:c4:8d:1c:0d:23:26:36:fc:e9:5b:
41:7f:ac:88:c3:cd:60:bc:be:8d:be:91:94:01:bb:
c8:a1:70:aa:98:91:8e:e4:03:96:b1:e1:12:39:cf:
eb:fb:ae:aa:f3:70:9f:7b:6c:42:80:00:4e:37:6b:
f4:dd:0e:5c:27:87:4e:10:a2:f8:44:9b:ad:cb:c9:
59:dd:a7:0b:95:e7:21:cc:95:c8:66:c5:17:ad:5d:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B7:0B:89:60:24:B8:E1:BA:29:84:56:60:F4:29:58:41:D9:42:6E
X509v3 Authority Key Identifier:
keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:43:64:b3:0e:cc:35:4c:3b:c7:4f:b0:45:04:46:cc:f2:c9:
36:40:f0:0b:4d:a4:83:bb:83:63:d9:72:27:98:64:59:1e:79:
b0:cf:b3:5e:53:2e:b4:a5:cc:2d:55:81:23:bd:ff:ad:e8:d5:
d6:a9:0a:cf:11:66:e9:25:5d:1d:59:be:c5:85:b5:85:33:1d:
05:c8:8b:a7:a8:d9:a4:79:94:ae:f7:b1:8a:58:36:86:3b:25:
ae:72:b0:68:37:0e:e5:58:4b:66:4b:50:ea:fb:b4:91:32:b6:
44:d5:62:ae:fb:66:13:ea:81:ae:cb:a7:8e:44:bc:f0:93:4f:
e3:3d:aa:09:25:bb:a6:e8:be:1d:93:a7:08:e6:e9:c7:80:3b:
d8:ef:01:55:c9:6d:d7:72:ab:07:8f:04:dd:d0:cf:c0:52:24:
9a:43:87:61:81:1f:bc:9f:3a:0c:55:f8:0d:be:c4:66:74:2c:
74:27:71:4e:b2:2d:b0:77:de:e7:a3:2f:77:5a:ac:16:e5:ff:
0a:41:11:24:e5:c9:11:df:c0:e1:1d:c3:b1:c4:2a:74:35:22:
ab:bf:bd:32:e7:b7:b2:f9:5f:a5:6d:17:17:f5:17:f7:d8:51:
60:bb:2b:99:9c:df:24:b9:97:fd:a4:1b:37:2d:0a:94:9b:ec:
8c:41:16:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:39 2026 by rpki-client