
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft
File: RNKGOHOg4Xndk_snhK0EhGYj5-4.mft (raw, json)
Hash identifier: wcVJnQan5LwnoEa+Y+KVKU3WGucVrtziuHSpygsGuZg=
Subject key identifier: 91:B3:AE:B9:CE:04:B2:D1:27:08:65:E8:52:8A:5D:AF:F5:4C:A2:36
Authority key identifier: 44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE
Certificate issuer: /CN=A914E4E2/serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft
Manifest number: 2A
Signing time: Mon 02 Mar 2026 01:07:03 +0000
Manifest this update: Mon 02 Mar 2026 01:07:02 +0000
Manifest next update: Mon 09 Mar 2026 01:07:02 +0000
Files and hashes: 1: RNKGOHOg4Xndk_snhK0EhGYj5-4.crl (hash: 4z3bMBz3Bb5Mf4M1RemAphgdEMNhPxFm4Pb7P/jDe4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.crl
rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4E2, serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE
Validity
Not Before: Mar 2 01:07:02 2026 GMT
Not After : Mar 9 01:07:02 2026 GMT
Subject: CN=69a4e2b7-3dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:8c:b8:a2:fb:79:af:07:f7:3b:2c:ff:2f:
68:b9:db:0a:27:50:1e:10:89:79:55:08:18:48:23:
0b:16:71:7e:8f:e4:34:03:61:83:0a:69:ab:48:91:
2e:cc:d5:25:45:02:4d:e2:f9:d1:cb:92:c9:66:17:
7f:85:fe:e5:a6:c6:ec:69:04:31:18:0e:d6:b5:97:
76:43:ff:60:90:ea:34:6b:de:b5:6d:cb:34:8d:5e:
b8:7a:dd:4c:7e:b6:3f:ba:de:a5:0a:83:7f:dc:73:
26:c3:de:97:5f:5f:4f:f4:24:33:53:98:a1:26:ae:
14:23:b9:48:07:e5:c5:e5:1e:ba:29:2b:4f:4c:cf:
32:97:97:33:21:d1:6f:61:90:71:9c:f6:b3:99:d9:
ba:05:62:cc:05:99:ef:d2:5f:c4:09:f7:41:fe:c1:
b9:fa:39:92:a0:1b:e4:ef:b4:06:7f:72:fe:e0:3b:
ba:58:dc:de:6c:de:bb:52:d4:63:8c:77:b9:86:5b:
7a:da:de:30:47:ed:d4:6d:40:d5:31:2b:a5:90:fe:
b1:46:23:2a:ef:a9:b5:dd:09:7a:44:ae:74:19:42:
3b:d6:d4:84:07:e0:59:61:8a:5c:b8:9b:fc:66:44:
39:71:1d:33:1b:89:f4:a1:1c:e6:52:23:c5:a8:e9:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B3:AE:B9:CE:04:B2:D1:27:08:65:E8:52:8A:5D:AF:F5:4C:A2:36
X509v3 Authority Key Identifier:
keyid:44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:4d:a0:5d:18:21:3d:1b:ea:54:57:75:7f:0f:cc:b3:8f:c9:
b1:7d:2b:42:5d:c4:e6:6b:70:5f:fe:60:0f:8a:3a:a5:0c:3e:
f0:c4:8f:25:15:c1:5f:d8:4a:e1:d8:6a:9a:15:67:cd:8a:55:
e1:fe:69:ae:d4:bb:ec:60:bb:fc:03:0b:92:67:cc:6d:da:d5:
7d:9d:76:22:10:e1:4d:e0:2b:35:53:10:dd:3e:58:f6:f9:ff:
15:05:82:b8:1a:49:98:96:67:b0:39:c0:5f:c8:d5:eb:c7:10:
c1:d5:6d:c1:5c:23:8b:2b:0c:d7:c5:63:cf:98:86:8c:3d:22:
d1:12:07:ad:12:a1:22:14:ba:a9:d7:14:3e:62:bd:1a:66:5a:
8a:a9:85:66:01:92:54:d5:46:a7:9f:03:bb:8f:e1:b1:2f:5e:
00:57:63:21:a6:9c:6d:7b:6d:0b:81:67:1f:23:26:13:6a:0f:
5a:03:e4:81:a2:00:fc:7a:c0:52:0c:ba:1e:a7:f6:f7:ed:94:
f2:f4:b1:c2:90:e7:7f:e5:78:f0:cd:40:0d:65:bf:5b:36:e7:
83:bb:6a:e3:2b:20:a1:9a:22:eb:d6:7e:2e:54:70:a2:70:ee:
64:20:57:26:2d:9c:e6:82:27:2f:2a:00:4b:52:33:6a:d3:9d:
1e:f7:a9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:42 2026 by rpki-client