
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: 9zwkNJ5kGJI7tFnFaX4IOMSXmzpeowNMLf/DEupKvIk=
Subject key identifier: DC:9A:18:88:CC:C7:07:63:D1:F8:FC:A3:1B:0F:C0:7A:20:DA:C4:58
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 04ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 04DD
Signing time: Mon 02 Mar 2026 00:10:56 +0000
Manifest this update: Mon 02 Mar 2026 00:10:55 +0000
Manifest next update: Mon 09 Mar 2026 00:10:55 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: bNVqS+9VxM4wcEDWJ5MGPdxyIPGZcyP7+eLAs2UKJfM=)
2: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=)
3: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Mar 2 00:10:55 2026 GMT
Not After : Mar 9 00:10:55 2026 GMT
Subject: CN=69a4d590-73a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:9f:92:5e:05:e0:04:d2:63:c0:82:c6:74:
67:35:6e:7b:0f:34:6c:00:56:54:60:b8:d9:4c:bf:
79:d1:dd:46:a2:c8:2d:14:3a:2c:f0:0e:c0:13:26:
69:eb:f4:56:72:fa:ae:a2:f9:97:74:aa:0b:70:7e:
d3:3e:5c:cb:d8:92:3c:69:c5:f9:9d:3a:cb:c9:ca:
29:34:b3:d1:df:8a:15:c4:40:22:30:3b:f6:95:c2:
9e:fc:72:48:bd:73:e7:41:67:7e:b1:a7:15:4d:ef:
48:6b:53:bb:59:9a:f4:2f:3c:77:64:d6:b5:e0:f1:
e8:b9:ca:cc:81:c5:5f:7b:6c:30:dc:1e:1d:34:0c:
57:7e:28:46:04:0c:f5:ac:c0:fc:16:2b:4a:4c:31:
2d:72:e7:73:5b:8b:5e:57:2f:13:75:3b:20:91:4c:
12:03:3a:f6:03:38:13:10:c8:c0:0d:9c:2f:93:3c:
a4:ac:f8:75:6d:02:ea:e8:eb:4b:cf:35:8e:19:81:
6e:5f:16:61:28:6c:12:78:d8:e8:b3:80:c4:f2:cd:
cc:eb:91:1d:e6:78:2b:e8:ca:f4:d7:7e:27:88:2d:
af:e3:2d:77:21:85:ca:0d:e2:24:25:e8:15:eb:8e:
17:44:22:2c:9c:69:0d:f5:33:80:3b:3c:d2:ac:fc:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9A:18:88:CC:C7:07:63:D1:F8:FC:A3:1B:0F:C0:7A:20:DA:C4:58
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:15:73:b3:e4:ff:06:fd:64:d0:74:87:c9:ee:31:3c:f2:8e:
42:ab:48:e3:2e:58:17:45:d0:4e:48:ad:3c:97:4b:cc:06:79:
b8:b5:20:d1:4f:85:89:be:2d:08:ae:e6:77:2f:49:88:b7:ae:
30:5f:a2:e6:68:b3:9c:f9:15:ef:7e:0b:09:78:8f:09:91:c4:
d0:a1:50:b1:54:b9:5a:5e:dc:8e:ef:a4:34:03:26:1f:1e:05:
6c:69:f6:ae:e8:52:45:a1:f7:56:87:a4:7d:ea:2e:79:48:d1:
a7:67:2b:f0:8c:9a:0e:96:a9:a0:72:2c:d5:7a:94:81:fc:ea:
16:b3:e9:44:7f:a4:9d:c0:82:50:de:78:ce:d5:93:cf:0a:df:
a9:08:71:2b:e4:fd:3f:ab:8f:fb:2d:b7:3a:ba:14:0f:4f:a6:
f6:80:f7:98:20:7c:d3:9b:bb:f6:85:c8:c1:3b:8d:23:20:ba:
bd:57:9f:87:94:52:52:0f:04:5e:00:7e:fb:c4:5d:99:55:43:
c7:a3:7d:39:f8:21:f8:85:c3:d2:0c:aa:fb:6a:c3:0e:44:ab:
06:2f:04:6f:db:cc:8b:97:b9:7a:24:e5:e0:8a:38:d8:c0:12:
a6:e8:f2:c6:98:34:18:11:34:52:ba:fb:39:6f:a9:3f:93:95:
97:af:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:59 2026 by rpki-client