
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json)
Hash identifier: VIeBGYu0MzEyMXUlovffO8tMnrCH6XIuYDNeUG0JrPA=
Subject key identifier: 84:99:C5:BA:F8:0F:FD:63:3A:2A:93:EA:70:0D:9F:8B:25:97:DF:84
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial: 18F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
Manifest number: 18E1
Signing time: Sun 01 Mar 2026 23:06:16 +0000
Manifest this update: Sun 01 Mar 2026 23:06:16 +0000
Manifest next update: Sun 08 Mar 2026 23:06:16 +0000
Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: osQ5MT1vFT7qt9WFQp1ejVfEioLxyY7LXlDJAtfrcHg=)
2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: eo5Er8iuxT75wLcKVzFBlRXEOJUUc8Rit00G+PSlQNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6389 (0x18f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Validity
Not Before: Mar 1 23:06:16 2026 GMT
Not After : Mar 8 23:06:16 2026 GMT
Subject: CN=69a4c668-ec31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:35:14:86:2e:d2:58:4f:27:26:a9:6d:ec:
c8:19:a7:65:12:3b:b0:2d:b3:97:15:70:ba:02:c3:
1a:0b:c4:72:d8:e6:3c:39:ee:79:4d:0d:71:87:c7:
26:50:c9:8b:51:1f:05:de:aa:60:02:5c:1b:d7:34:
9b:91:e6:fc:ea:29:84:58:29:f9:1c:6c:b3:42:db:
da:06:09:8a:67:92:e2:18:ed:f4:14:55:2d:53:7c:
98:74:97:09:eb:e7:b1:95:31:b2:ca:52:f9:da:0e:
d4:26:c1:ca:c3:f8:2c:79:a4:e0:d3:e1:71:a6:c7:
dd:03:5d:5a:ff:d8:bb:83:d5:87:a7:ab:73:e5:98:
b3:97:71:e5:e5:b6:5c:55:34:ef:cc:27:6b:b1:a4:
22:49:9d:2c:5a:c2:1f:b0:53:17:56:7c:2c:8d:a8:
d7:10:71:7f:17:57:37:1c:0a:2e:b2:a2:0f:d4:f3:
54:c1:8c:72:e8:8a:10:d7:98:42:d8:ed:67:4f:4b:
2b:ee:e5:68:39:44:ac:b0:8d:e4:73:e6:02:9a:5b:
34:59:e8:b3:33:c9:31:08:e8:0c:d4:7c:7d:f8:4c:
b6:9a:9f:5d:34:c3:38:e9:0e:0c:3c:f4:ac:89:65:
1b:91:14:62:42:94:33:ed:27:f2:8d:ef:0a:db:cd:
13:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:99:C5:BA:F8:0F:FD:63:3A:2A:93:EA:70:0D:9F:8B:25:97:DF:84
X509v3 Authority Key Identifier:
keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:72:c3:e2:8f:24:e7:84:a5:7b:8c:8b:0c:fc:99:f0:1e:5a:
58:ae:cb:8f:87:13:9d:32:81:2c:42:35:54:0e:99:18:0b:c1:
2f:bf:de:3b:77:2e:91:2c:95:c4:b9:60:b4:0c:93:e3:8c:cf:
a0:4e:20:7b:88:fa:c2:12:87:65:00:13:aa:19:73:a5:fc:43:
c9:15:88:11:02:78:e5:1b:3c:da:bc:6f:90:51:41:4c:e5:00:
48:53:54:7f:00:2a:15:d9:89:28:56:d6:b4:10:a3:ea:de:26:
99:a6:ef:d1:bd:5d:17:b2:8f:60:f8:d5:b4:63:70:d4:29:28:
bf:26:6b:15:dd:d8:12:2b:30:e0:ab:61:11:9b:26:b0:1c:63:
98:81:21:70:c1:78:92:2f:a4:6e:39:4b:53:04:9d:76:ef:f9:
a3:bf:27:c1:0f:a4:66:fa:62:2a:33:84:e9:28:02:03:49:d6:
a6:98:92:c8:e3:ed:83:7c:06:fd:00:8b:d8:e0:fd:a7:89:fe:
e5:b7:2e:3e:0a:71:3d:d5:25:f1:05:b5:5a:e1:2f:4c:b4:68:
45:93:1b:2f:6a:6f:d6:25:5c:12:c3:08:1a:e2:a4:4a:7f:0a:
a3:d0:34:13:ab:3e:f1:fb:0c:ae:33:b8:5e:aa:90:40:18:5e:
31:8b:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:13 2026 by rpki-client