
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
File: M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json)
Hash identifier: PaL3rMIRiZIzQ+uC/oGF784gJe8eBRvPLUanoyaSZpg=
Subject key identifier: EE:A9:D4:1C:2F:D1:12:5D:E5:06:0E:56:65:64:99:80:5E:EB:FA:39
Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42
Certificate issuer: /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
Certificate serial: 0C57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
Manifest number: 0C4B
Signing time: Mon 02 Mar 2026 00:10:55 +0000
Manifest this update: Mon 02 Mar 2026 00:10:53 +0000
Manifest next update: Mon 09 Mar 2026 00:10:53 +0000
Files and hashes: 1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: 7xQkoZJ9iGj9M0eUxETm4mXTypjIZsQz2i4i2tAzPg0=)
2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: 8VC3Iar+Y3S8HPOKyWalo2kgaJJ+RCJUC6oDDTxpM3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl
rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3159 (0xc57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
Validity
Not Before: Mar 2 00:10:53 2026 GMT
Not After : Mar 9 00:10:53 2026 GMT
Subject: CN=69a4d58e-a1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:1f:f6:79:93:0f:49:ae:63:fb:67:54:62:
ec:bd:41:54:49:c3:bb:b3:e6:f0:72:64:19:4f:3f:
53:1e:2a:59:52:9e:0a:ae:3f:ec:d0:17:64:4f:a3:
21:81:a8:27:0a:ab:2a:d1:a3:f8:c7:2e:d5:e6:2d:
a0:82:bc:02:a9:46:0b:4e:f0:51:7a:a9:c5:7c:14:
8e:b6:43:00:67:27:03:b1:0c:2e:10:b6:4e:37:9d:
db:3c:ae:36:e0:4f:bf:64:c9:db:e0:9b:41:33:dc:
23:06:70:95:26:8b:e7:66:dd:c8:0e:94:77:33:40:
9f:0e:b6:71:de:46:8a:1d:d9:32:ef:55:e3:fa:e8:
f3:43:c3:2d:92:48:c0:6d:fa:01:98:24:b1:a2:73:
95:a3:75:a8:bc:cc:c9:c9:bb:25:56:8b:3e:27:20:
29:80:a6:80:95:32:0e:43:c2:bc:62:47:16:f0:f5:
04:03:35:f8:a5:85:2c:dc:7c:ae:41:9a:3b:66:99:
52:36:64:1c:73:66:1f:a7:cb:0d:68:29:33:2b:d5:
69:70:7c:77:db:fa:14:05:93:28:34:5d:48:a3:74:
1b:0d:07:ca:7c:1c:13:a0:9f:67:ca:7c:b9:3d:78:
e8:3f:f4:a5:d0:fb:83:eb:bc:66:6b:9c:87:dc:4d:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A9:D4:1C:2F:D1:12:5D:E5:06:0E:56:65:64:99:80:5E:EB:FA:39
X509v3 Authority Key Identifier:
keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fe:6e:c6:e8:33:ad:c6:12:78:7a:10:67:fe:43:51:f9:68:
42:6f:7a:12:a3:c6:12:44:83:9d:52:8e:f7:60:45:9f:e7:1a:
f9:14:01:d1:ce:57:eb:1c:68:cd:de:f8:ab:87:02:5a:07:6b:
05:40:1d:1a:67:fe:7b:1b:b6:b6:b3:5f:a4:0e:c9:80:39:46:
a0:7c:e0:cb:4a:ee:81:26:80:1f:b1:46:bb:b3:67:cb:e0:2d:
fe:ee:90:25:84:b0:d4:a7:ba:86:b9:e9:76:93:3f:f8:7f:75:
ea:72:30:9e:85:93:3e:3b:d7:a5:4d:ce:30:32:99:b8:5d:a2:
21:06:9d:cb:29:9e:17:c1:5b:68:95:12:bc:da:e6:9c:b1:04:
1d:95:d7:bd:1a:30:35:a6:2f:91:ca:11:f8:3e:6b:34:f3:7b:
fb:96:4b:fe:9c:6f:7f:81:01:6b:d8:6a:71:fd:cd:98:53:ab:
e7:9c:a3:bb:67:ee:3d:40:ad:3f:39:59:b2:51:90:f4:75:33:
a6:d6:e7:0c:ff:26:60:1a:c7:d6:0e:e4:2e:a1:83:2a:31:21:
09:20:9a:d7:6f:49:4e:93:92:52:d4:1b:49:54:54:05:3c:9a:
27:26:20:b5:f7:46:db:0f:e3:7b:30:c7:2e:78:95:22:b8:21:
05:0e:46:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJCRUYxMTAvBgNVBAUTKDMzQTNCMkE1MzAzQjUxMTdCMzJFN0U0NTg2QUNBOTQ0
MDg5MTg3NDIwHhcNMjYwMzAyMDAxMDUzWhcNMjYwMzA5MDAxMDUzWjAYMRYwFAYD
VQQDEw02OWE0ZDU4ZS1hMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpof9nmTD0muY/tnVGLsvUFUScO7s+bwcmQZTz9THipZUp4Krj/s0BdkT6Mh
gagnCqsq0aP4xy7V5i2ggrwCqUYLTvBReqnFfBSOtkMAZycDsQwuELZON53bPK42
4E+/ZMnb4JtBM9wjBnCVJovnZt3IDpR3M0CfDrZx3kaKHdky71Xj+ujzQ8MtkkjA
bfoBmCSxonOVo3WovMzJybslVos+JyApgKaAlTIOQ8K8YkcW8PUEAzX4pYUs3Hyu
QZo7ZplSNmQcc2Yfp8sNaCkzK9VpcHx32/oUBZMoNF1Io3QbDQfKfBwToJ9nyny5
PXjoP/Sl0PuD67xma5yH3E3W1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6p1Bwv
0RJd5QYOVmVkmYBe6/o5MB8GA1UdIwQYMBaAFDOjsqUwO1EXsy5+RYasqUQIkYdC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFRi9GOTAzMDI2MDFG
QUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VSZXpMbjVGaHF5cFJBaVJo
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL002T3lwVEE3VVJlekxuNUZocXlwUkFpUmgwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkJFRi9GOTAzMDI2MDFGQUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VS
ZXpMbjVGaHF5cFJBaVJoMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK/5uxugzrcYSeHoQZ/5DUfloQm96EqPGEkSDnVKO92BFn+ca+RQB0c5X6xxo
zd74q4cCWgdrBUAdGmf+exu2trNfpA7JgDlGoHzgy0rugSaAH7FGu7Nny+At/u6Q
JYSw1Ke6hrnpdpM/+H916nIwnoWTPjvXpU3OMDKZuF2iIQadyymeF8FbaJUSvNrm
nLEEHZXXvRowNaYvkcoR+D5rNPN7+5ZL/pxvf4EBa9hqcf3NmFOr55yju2fuPUCt
PzlZslGQ9HUzptbnDP8mYBrH1g7kLqGDKjEhCSCa129JTpOSUtQbSVRUBTyaJyYg
tfdG2w/jezDHLniVIrghBQ5GIQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:43 2026 by rpki-client