
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
File: ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft (raw, json)
Hash identifier: wrQEA/NB/zhBT9hTfnv+ilq/F/YoxPC+2UMbXRtmDSE=
Subject key identifier: 19:16:F5:34:0B:AE:16:BF:AA:EB:74:4A:AE:14:56:AF:0C:61:4E:CD
Authority key identifier: 44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51
Certificate issuer: /CN=A914D3B0/serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
Manifest number: 24
Signing time: Sun 01 Mar 2026 10:18:07 +0000
Manifest this update: Sun 01 Mar 2026 10:18:06 +0000
Manifest next update: Sun 08 Mar 2026 10:18:06 +0000
Files and hashes: 1: ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl (hash: uddvxjGv7NPfX96IXvqvYWDDCA/davXTAUsVxyyOixk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl
rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D3B0, serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
Validity
Not Before: Mar 1 10:18:06 2026 GMT
Not After : Mar 8 10:18:06 2026 GMT
Subject: CN=69a4125f-2089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:42:5c:09:9d:17:a8:39:66:37:7d:43:17:
df:3c:7e:53:2f:58:60:f2:b0:c6:13:34:35:4e:1f:
9d:f6:bd:10:ab:24:25:3b:02:f2:0d:21:0e:2b:01:
0a:ff:a8:5f:ee:27:c7:d7:d6:43:7d:b0:c9:7b:5d:
f7:6c:b0:56:7f:f3:7f:e6:7c:4e:83:4d:a8:37:a5:
e4:d6:e9:1c:7c:95:70:73:58:d0:b6:9f:18:24:3f:
7e:a2:46:1b:b4:23:32:0d:15:f7:73:90:12:27:ef:
4c:7a:71:4c:1f:8b:9c:50:41:6d:96:33:cc:a4:ae:
20:e8:0b:45:78:a2:71:13:ac:f5:db:25:97:33:2f:
b5:f7:89:a8:a7:80:1f:0a:b0:7d:d4:ea:e0:86:45:
22:f3:f0:8c:5c:b7:c0:1d:90:2d:13:57:c6:25:9b:
58:13:a2:95:84:1e:8e:3f:b7:13:ab:e4:50:7f:3f:
af:1d:91:b1:34:bf:99:82:26:b2:2e:5f:cb:8a:9a:
b1:d9:49:39:1e:ce:ba:70:80:79:11:dd:04:78:78:
21:9a:8a:d6:30:e8:40:d0:f6:1a:14:a2:4b:89:9e:
f6:e9:2c:c4:0f:57:37:d5:57:4e:88:a6:63:d1:50:
a8:e9:08:d8:24:f6:99:eb:f0:dc:18:79:bc:cf:95:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:16:F5:34:0B:AE:16:BF:AA:EB:74:4A:AE:14:56:AF:0C:61:4E:CD
X509v3 Authority Key Identifier:
keyid:44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:56:ee:23:b6:8a:d7:bf:48:de:90:92:3c:50:01:fd:f3:ad:
b1:1f:1c:29:08:fa:14:ae:24:d6:58:a1:70:89:ee:43:3a:8f:
a8:74:04:01:6a:9b:d7:4b:91:53:3a:de:38:47:5a:40:ee:b8:
1e:aa:48:b4:ec:32:ab:38:f9:9a:e0:3c:b9:83:94:f7:79:33:
52:11:d8:85:2e:eb:f6:5a:b4:7c:e0:93:21:c9:77:e9:16:fa:
40:30:8c:ed:64:8b:80:e7:92:32:8a:5a:78:46:92:33:9d:b9:
48:4f:f6:19:b1:e5:7e:21:41:b9:b2:d7:fb:0d:6d:ab:82:40:
a0:a9:8b:26:67:5e:01:21:5b:9c:96:ae:c1:52:3e:5c:ef:47:
4d:22:e7:cb:33:c1:71:f4:1e:a7:4e:81:61:d4:17:0f:49:05:
eb:8d:c5:69:3c:bb:2e:3b:58:4f:2f:00:15:29:d7:b3:44:ec:
cc:fb:d6:ff:45:42:0f:74:a5:b8:1b:41:3b:46:64:68:b6:44:
a7:60:69:ec:a2:bc:25:d5:8b:a5:7c:79:3f:3b:12:4f:2b:90:
e4:62:64:6f:9f:6c:68:bc:b8:79:05:f9:55:d3:75:03:ae:41:
86:f4:9b:26:24:a1:1a:77:22:41:ab:19:c9:e8:3b:8e:51:18:
15:94:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:34:44 2026 by rpki-client