
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
File: 1O0zil4gh9gu9ML2RZm0ERJy5eA.mft (raw, json)
Hash identifier: Rl+NUW9IYqwgpwp05auru3dGL2TEuL5B0dDtzlzhIQg=
Subject key identifier: 06:2E:C3:8D:1C:43:B3:6A:80:95:3D:EB:E4:F9:13:90:5E:99:ED:34
Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0
Certificate issuer: /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0
Certificate serial: 07AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
Manifest number: 07A5
Signing time: Sat 28 Feb 2026 21:54:25 +0000
Manifest this update: Sat 28 Feb 2026 21:54:24 +0000
Manifest next update: Sat 07 Mar 2026 21:54:24 +0000
Files and hashes: 1: 1O0zil4gh9gu9ML2RZm0ERJy5eA.crl (hash: pl6MAxMn5oOk3wBY2GNtXwnRS6i9p1pR4zmgplySwLQ=)
2: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (hash: gBZ45Ahcw6RfwL3mlFFuHRRbvWj8T4TaJokdj0B0Q2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl
rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0
Validity
Not Before: Feb 28 21:54:24 2026 GMT
Not After : Mar 7 21:54:24 2026 GMT
Subject: CN=69a36411-07af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:aa:3c:5f:1b:34:94:02:3a:6b:0d:06:af:
f2:81:90:43:53:63:88:b2:bb:11:f1:48:8e:58:96:
b6:4d:e0:21:a3:15:b4:05:57:e9:82:8d:8b:48:2b:
c3:93:27:03:30:27:fb:39:7d:9c:2a:f4:82:91:e3:
38:30:b4:95:0e:b9:20:f6:37:f3:bd:2b:fe:e0:18:
d5:02:48:7a:7e:26:63:41:38:a5:72:6b:42:25:75:
c0:1a:5c:08:b8:be:7f:31:46:e7:cc:0f:47:84:ce:
4c:20:e7:17:64:32:28:13:91:85:d5:78:25:31:90:
d5:39:41:c8:55:c2:c1:e6:72:02:15:2f:fb:3b:d1:
e3:e4:b6:1b:66:e8:19:5b:27:66:32:01:4c:57:fc:
c0:3a:19:89:cf:5c:62:c1:0a:11:b3:c3:26:be:1d:
84:3d:75:14:87:69:ff:c8:e3:07:15:44:4e:6b:bd:
0c:aa:8d:c3:52:de:b2:20:c1:21:ad:fa:40:72:7f:
e2:b3:be:a0:7f:88:b8:1b:9d:39:d5:db:a5:69:3a:
97:72:43:b4:01:b0:67:6c:4c:d5:1a:71:40:cb:66:
df:c7:95:58:91:c5:f1:3a:24:f7:e0:a0:0f:9d:65:
49:23:09:47:d9:3f:3c:8b:49:9f:fd:1b:3d:27:ac:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2E:C3:8D:1C:43:B3:6A:80:95:3D:EB:E4:F9:13:90:5E:99:ED:34
X509v3 Authority Key Identifier:
keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:16:34:65:76:81:d6:1e:4c:b2:be:fa:59:cf:1c:e4:15:75:
0a:ca:fa:03:39:a6:8a:cb:fe:73:8f:a6:98:c8:59:b6:f4:89:
ba:5f:d2:27:99:91:0e:f5:2b:d7:71:fc:36:6e:2c:23:66:19:
e8:da:d5:78:5c:70:47:61:29:ee:76:0a:ed:f1:f2:f2:a9:cb:
9f:2b:2d:83:bc:f7:4a:a4:62:12:9d:f9:f5:59:6a:01:5c:aa:
a4:b7:a8:a7:75:38:bb:02:19:5a:5a:c3:ce:3b:75:8f:de:6b:
63:f8:98:13:57:8a:41:c3:24:44:30:66:12:c6:ca:77:1b:e7:
ef:d0:5a:87:81:f8:da:11:eb:23:ad:81:20:48:d8:11:3d:b6:
41:d6:47:14:39:a6:03:08:7b:20:52:d9:71:c1:19:a9:03:64:
da:41:c2:e9:0d:aa:29:95:5d:59:92:24:d8:18:19:63:5c:e2:
dc:82:ba:10:40:86:d3:8b:3c:15:7d:f7:ca:b5:85:75:1f:a8:
99:8b:85:c6:57:02:2f:00:d7:fb:1c:9b:8b:6b:65:53:d5:87:
d4:9f:3d:53:83:d9:3d:70:98:34:f6:b7:5b:3c:fa:33:db:9a:
8f:05:b0:2f:ea:5b:18:02:c1:a7:3b:23:1d:53:82:76:99:6a:
dc:e0:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:13 2026 by rpki-client