
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
File: TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft (raw, json)
Hash identifier: s4Ix1b/QyLXnbgV7r0FI/8+GXCeA14zSnZgXnQqLpI8=
Subject key identifier: 31:70:F7:32:46:B9:B4:9B:C1:10:1A:01:7D:1D:E0:9E:7B:52:B3:00
Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
Certificate issuer: /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
Manifest number: 01F8
Signing time: Sun 01 Mar 2026 03:56:22 +0000
Manifest this update: Sun 01 Mar 2026 03:56:21 +0000
Manifest next update: Sun 08 Mar 2026 03:56:21 +0000
Files and hashes: 1: TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl (hash: HPmeR8N+Hmpc/5rTlryOX8hFKemKaS3fMkS2GkMGMXY=)
2: 5EAB725014A211EEA889E832C4F9AE02.roa (hash: mX0oS42d4Afnuz1c6BL0lN1MWESAc87z/AqUedcAt4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Validity
Not Before: Mar 1 03:56:21 2026 GMT
Not After : Mar 8 03:56:21 2026 GMT
Subject: CN=69a3b8e6-f66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:57:56:f6:c4:1a:05:7c:83:6e:a8:04:4d:
0f:bc:a4:8c:17:e9:42:3d:24:79:5b:ed:35:f0:ce:
68:7f:c6:8e:f6:26:4f:b3:68:18:b1:ca:44:48:a7:
ca:9a:95:7b:25:52:9c:22:d7:e3:5f:f1:48:32:40:
ce:93:b3:4e:f2:53:30:a0:3d:ba:5e:9a:bc:b1:b8:
12:84:e5:85:f7:94:73:f9:30:67:35:ca:a8:3d:72:
60:4e:aa:38:3c:1d:85:7f:99:6e:45:15:c3:a0:56:
c7:7c:34:f7:d5:92:70:40:77:99:98:36:dd:42:eb:
4a:46:54:4f:6b:72:dc:0a:8c:2e:67:ed:97:d0:16:
14:74:e2:39:1b:29:e8:55:dc:45:26:46:7d:02:26:
04:19:b8:ef:89:6e:70:a0:af:dc:d8:dd:73:ef:7c:
75:24:de:15:cf:58:d5:da:c6:5c:1f:34:1d:d2:32:
c2:15:a7:2c:d2:f8:9d:65:be:33:86:19:31:82:ef:
0d:c4:0a:3b:c6:eb:74:3e:3e:13:80:98:02:16:3d:
c0:20:d8:91:70:d8:68:9f:2b:5d:d1:5b:56:8b:81:
6f:89:e5:d9:20:3d:b9:02:33:39:7a:18:a0:0d:eb:
ea:f1:fe:62:3e:e4:07:2d:8c:30:e7:62:14:33:aa:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:F7:32:46:B9:B4:9B:C1:10:1A:01:7D:1D:E0:9E:7B:52:B3:00
X509v3 Authority Key Identifier:
keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:19:44:70:f7:5d:0b:d5:a6:0b:ed:65:34:15:9f:5d:33:53:
97:77:7f:1e:f3:33:b2:52:76:98:b5:09:21:36:37:8e:38:4b:
7a:77:4c:62:54:86:9e:0a:2c:72:cc:32:f2:97:d5:e6:16:c7:
32:a2:47:66:c4:4b:11:b0:8f:07:81:b7:fb:a9:26:95:99:cf:
09:d2:6a:dd:9a:cc:7a:93:6a:cd:3d:4f:7a:2d:0c:72:9d:ad:
25:b0:5c:48:6b:7d:17:78:a6:4d:71:cf:29:ae:e2:bc:ab:24:
e0:c6:59:e1:1f:a6:35:5b:ce:f8:bd:98:45:db:fc:33:e9:f6:
d8:12:79:f4:5e:ca:6f:85:11:00:de:63:c3:bb:1e:34:31:42:
5f:b0:cf:65:4c:c9:bc:b5:cb:de:c8:43:2f:e2:b8:19:eb:41:
37:bc:6e:19:bd:45:8a:90:54:6a:8e:ec:17:b6:b5:39:db:0c:
cd:cc:74:d8:bf:ca:9b:bd:3e:84:bb:40:a6:2e:fb:d2:64:0d:
0e:8d:80:a9:ad:94:f9:e9:96:41:42:78:75:4b:53:a1:68:41:
b8:ba:ec:5d:ee:78:b2:6b:8f:f8:d7:27:90:d4:32:9d:52:0b:
dc:6f:65:8f:91:72:e4:47:f3:d5:db:8e:28:9a:33:6a:a9:63:
df:5d:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:39 2026 by rpki-client