
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
File: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json)
Hash identifier: NgbP+sI0MGqayXqpYaeMkzNDaN+Ku6O3vB7wZIFYwLU=
Subject key identifier: A7:90:50:59:E3:62:67:E0:B5:14:53:D6:74:83:68:5B:58:DB:F5:A7
Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
Manifest number: 0103
Signing time: Sun 01 Mar 2026 07:11:56 +0000
Manifest this update: Sun 01 Mar 2026 07:11:55 +0000
Manifest next update: Sun 08 Mar 2026 07:11:55 +0000
Files and hashes: 1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: V4p/DIbycTspD6PiAi7a5SzMMVqjXyP/jDhmUHCiXlY=)
2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: omrZAUzqP7gMHmT5OJsVyadDZTS200Mcd28sOHG7NiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Validity
Not Before: Mar 1 07:11:55 2026 GMT
Not After : Mar 8 07:11:55 2026 GMT
Subject: CN=69a3e6bb-6e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:bb:fd:8f:38:61:17:74:7f:ea:34:42:ec:
6b:02:1a:14:34:72:03:64:1f:e4:e8:ab:1c:3b:c2:
cc:07:13:fa:49:72:2b:93:5c:3a:99:32:4e:e4:e6:
3c:45:12:5f:7f:99:2b:1e:45:34:69:77:ff:48:04:
eb:29:9c:68:bf:ab:82:9e:9c:c6:59:ab:e7:45:ab:
3a:ad:1b:83:c0:67:0a:d0:6f:55:04:f1:67:44:90:
7d:dc:d7:de:12:ac:51:d8:f5:82:ff:a3:58:d5:aa:
2d:27:5f:69:4b:21:33:1d:a0:aa:bd:46:57:78:01:
d2:9e:70:fb:73:ab:5a:18:86:cc:39:be:a3:9b:a7:
86:da:d5:dd:81:01:57:94:03:2b:8e:6b:27:c7:b3:
ce:bf:da:f5:7f:9d:be:d7:03:8b:c7:cf:2f:30:9e:
fa:ab:ab:e2:3a:ed:f3:a7:01:ff:57:fc:97:a5:bb:
19:3d:69:30:86:49:43:63:43:65:61:42:b2:80:75:
39:27:1d:bc:53:38:0c:de:79:35:0b:b7:b6:fd:c2:
fb:81:fa:e4:b8:09:2e:d0:87:a7:a4:0d:44:35:be:
df:0a:31:0f:a1:09:52:a8:d2:aa:36:93:38:0c:f7:
d5:a3:fc:af:41:a6:e4:e8:73:cb:d1:a8:38:92:20:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:50:59:E3:62:67:E0:B5:14:53:D6:74:83:68:5B:58:DB:F5:A7
X509v3 Authority Key Identifier:
keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:19:08:30:15:ff:67:c8:2a:d2:e8:60:ba:a7:02:0b:37:55:
cc:31:b0:3c:d5:da:c4:c0:1a:1a:02:f8:66:de:c3:43:57:b7:
f0:0a:21:a6:d2:ec:44:d3:e9:27:08:08:57:94:55:2c:4f:bb:
ac:72:f8:ea:b2:a5:79:71:4f:23:8b:98:f1:09:86:d5:10:79:
e6:c8:8c:0b:ea:83:d9:8b:ea:f9:23:d3:cc:25:c2:37:66:7e:
2d:f3:91:97:2a:64:a0:b9:a8:72:66:98:9c:c3:3e:c3:22:74:
96:89:21:94:bf:97:7b:1b:bb:d2:74:8c:8d:2e:2d:46:dd:71:
1d:78:41:cd:49:a0:d0:17:cf:31:ea:de:0d:b6:d3:1a:84:21:
4e:0a:00:27:4a:bb:09:a7:cd:63:eb:7f:4d:23:f2:33:39:be:
43:32:43:6b:17:49:02:c7:fc:db:51:96:2b:05:39:a4:33:9e:
3e:60:7e:21:d5:42:94:8e:35:56:db:4f:b5:a1:f0:4e:89:f4:
dd:5c:37:d0:fc:b7:7c:7c:c3:cb:05:9f:da:21:c1:e7:ed:02:
8a:a0:5c:29:85:01:20:70:a7:2d:6c:4a:12:be:ab:b7:68:10:
46:0d:05:ba:05:cd:ea:27:4d:cd:3e:e2:08:d5:aa:a9:8d:3a:
30:ea:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:11 2026 by rpki-client