
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier: C+Aa8Lyf/HB60IuJJwMRiLmJpMJue01rSEOoHF0hoa4=
Subject key identifier: AE:DD:A5:9C:5E:7E:E6:A8:9C:23:99:A4:0E:16:29:00:DA:21:6F:8B
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial: 3517
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number: 3517
Signing time: Sat 28 Feb 2026 14:36:26 +0000
Manifest this update: Sat 28 Feb 2026 14:36:25 +0000
Manifest next update: Sat 07 Mar 2026 14:36:25 +0000
Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: fgJjusxurrj0aShg51N46oYJQdT8kYXwSKwQIi1k4dE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13591 (0x3517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Validity
Not Before: Feb 28 14:36:25 2026 GMT
Not After : Mar 7 14:36:25 2026 GMT
Subject: CN=69a2fd6a-d93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:22:e6:7a:6d:af:08:6f:16:64:68:35:b6:
e1:0f:e9:5a:c5:b3:ed:be:fc:e8:84:83:60:11:d3:
d4:a6:94:4d:ee:34:f9:e8:e2:af:0d:5c:2a:33:5f:
fb:bd:ec:5e:3f:8f:be:06:ce:82:e1:e2:bb:a3:80:
00:e4:f9:2d:62:69:5c:99:42:fe:f9:74:65:72:76:
b8:d2:0b:05:f6:2a:bd:7d:06:3f:dc:10:ec:1b:e3:
03:6e:b1:df:6d:50:4f:4e:50:aa:3e:09:9f:19:32:
79:ef:23:43:fb:93:67:ad:2a:30:49:8b:2a:2f:63:
27:52:3a:8a:5b:5f:6e:80:ac:41:0e:93:60:04:d5:
68:4f:3e:6c:11:6c:88:6c:c8:03:cd:e7:b4:0b:43:
8f:c6:36:7d:34:d9:38:b9:1f:f0:e5:9f:27:82:7d:
f3:52:a3:80:b5:2c:0d:d9:c3:de:19:c5:3b:67:ff:
88:cc:4b:71:c8:fa:3a:ce:b1:d2:73:2b:23:e9:61:
8e:b9:46:07:a3:60:73:30:36:d5:51:4c:27:7c:e3:
1c:67:12:e9:f9:ea:89:a2:93:7d:17:92:bd:5b:ef:
04:6b:3d:84:ff:08:bf:5d:c5:fa:3d:20:97:ae:ac:
f2:26:50:36:65:ad:36:da:9c:81:94:58:e0:30:e3:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DD:A5:9C:5E:7E:E6:A8:9C:23:99:A4:0E:16:29:00:DA:21:6F:8B
X509v3 Authority Key Identifier:
keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:d7:8c:76:9e:88:0e:c0:6e:72:66:fe:52:0a:f0:82:6d:60:
6a:c1:7b:aa:78:cc:cd:2c:cf:5a:e4:d7:d9:9d:b3:8d:3f:51:
84:8d:d4:68:6c:36:e0:3a:cd:77:21:64:04:26:78:eb:00:49:
22:e3:54:c8:b2:23:1f:aa:76:b2:ea:8d:98:26:c3:da:ab:51:
21:80:8b:52:2f:33:41:32:d6:a9:8c:ea:d3:dd:ea:30:ab:be:
57:1f:5f:89:42:20:df:2b:e4:51:60:e1:61:07:5e:7b:72:1e:
0e:13:87:28:c6:17:0f:41:9c:35:c3:18:35:6d:b0:3a:58:2b:
72:6e:a0:c3:5f:b8:bd:8b:97:c8:9b:27:49:0a:da:00:5d:ac:
0e:e3:00:9c:14:53:2a:c3:13:42:c4:ad:05:ae:df:48:05:e5:
6a:79:8d:e2:3c:91:3e:1d:35:db:fa:1a:e2:98:d4:cb:ab:db:
e6:6d:ad:83:11:65:0b:7e:16:22:52:a0:73:4e:73:97:e0:39:
07:69:cd:e4:31:eb:a5:1e:2f:a8:13:92:7d:04:3f:00:50:63:
70:d1:fb:55:3b:6a:de:a6:d4:a2:b9:dd:c9:c8:6b:c6:ae:c5:
70:cd:61:15:22:0a:f5:8e:7e:bb:43:14:ee:db:4e:e2:dd:26:
79:07:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:13:06 2026 by rpki-client