
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier: D/JTDOGqtFXtHrsZPQSXt5DQqlkusoM4ht1X3eYCsdk=
Subject key identifier: D6:A3:C2:B7:5B:9E:DA:7B:98:30:9A:3F:A4:61:5E:0E:0F:B8:5F:BA
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial: 0E8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number: 0E76
Signing time: Sat 28 Feb 2026 17:53:26 +0000
Manifest this update: Sat 28 Feb 2026 17:53:25 +0000
Manifest next update: Sat 07 Mar 2026 17:53:25 +0000
Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: xXg9IPjILtFyl/wBkd03xE4SUG6Lgj46t1FuEWHguTU=)
2: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: cRBzFvwtKhO498akQMxVv4jrQ/Ofn1ctENdiE3NLHgk=)
3: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: TISln3OWwFMxrFHBXjhzJmsuAj7ldgpqpKcI/7qFxoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3726 (0xe8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Validity
Not Before: Feb 28 17:53:25 2026 GMT
Not After : Mar 7 17:53:25 2026 GMT
Subject: CN=69a32b96-2530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c2:74:8e:97:70:2b:bc:46:8f:ae:d4:d8:c0:
9b:4d:cc:5f:21:fa:a5:e3:08:94:40:4e:50:81:32:
38:4a:95:d0:b1:3b:90:b3:d1:f6:bc:71:c3:1d:56:
f4:c9:97:3c:79:27:8f:c4:c8:d5:56:3e:ba:7a:ec:
17:32:2f:f4:88:eb:56:15:44:e6:e5:8d:9f:0c:63:
3e:d7:ec:1b:8f:8b:7a:f9:5b:33:70:16:a8:54:b5:
87:6e:c7:59:d5:b7:f3:2e:49:a1:48:bd:d4:87:eb:
55:2a:f9:6e:1d:ff:2b:76:f4:73:a3:fc:b2:d1:e8:
73:1c:fc:04:0c:65:37:a5:03:c3:de:3b:3a:70:fa:
bd:60:6a:45:83:fa:91:38:e3:12:0c:64:24:50:a4:
1c:5e:5d:d2:80:d6:a9:a3:fa:81:87:bc:ef:97:f0:
04:01:97:e7:35:68:51:39:0b:1d:05:8d:a3:d8:54:
b5:cd:61:3c:dd:9a:49:44:84:e8:00:79:1d:72:1d:
ea:60:79:cc:a3:39:70:a2:ea:a3:c3:b3:b8:75:81:
b0:8e:71:48:50:4e:db:e0:22:fa:be:ff:bf:8c:9c:
ec:57:37:c0:0f:0b:72:75:17:1e:f2:eb:f8:91:c3:
68:b1:ee:81:57:d9:7e:08:30:b7:c8:66:06:ff:87:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A3:C2:B7:5B:9E:DA:7B:98:30:9A:3F:A4:61:5E:0E:0F:B8:5F:BA
X509v3 Authority Key Identifier:
keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:37:2e:b5:6c:00:12:42:e9:ab:8e:60:26:7a:bb:8d:a6:9c:
94:a8:fe:48:0c:43:c5:c0:81:4c:bb:c6:34:a1:61:1f:0d:38:
d0:a0:8d:32:42:1e:13:a6:e7:ee:a9:ed:00:cf:fd:44:42:58:
1d:ef:b3:a5:91:7c:54:3e:c6:87:bf:e0:14:70:6c:fd:7e:21:
24:aa:86:6e:b7:75:e6:c9:b0:a8:ff:ec:b9:f0:6d:83:67:25:
0f:16:09:7a:45:f5:38:e3:13:c4:8f:79:4f:78:80:20:83:6f:
7d:7a:4c:fb:eb:5c:4e:9f:37:06:ee:70:31:5b:cc:68:cc:1e:
f9:1a:0e:5f:15:8f:58:41:57:84:88:7e:f5:ec:d2:45:d8:7d:
f1:45:02:55:e1:57:33:b3:3e:8a:aa:bd:4d:ff:b7:ca:08:87:
32:4a:82:e3:17:f3:af:94:0d:fc:2f:70:15:b6:d6:7a:01:c3:
b8:a5:4c:ff:64:60:70:92:cb:9c:fa:09:60:d0:e1:c4:c6:03:
7f:52:5b:8d:b8:77:9b:c6:1b:1b:15:66:86:0b:b0:9d:5d:11:
86:dd:29:55:26:51:9a:82:e9:60:c7:a3:c7:ec:9d:aa:7f:57:
e6:dc:f7:fd:d5:fb:3b:3f:fa:4e:d2:e4:69:27:a7:cc:58:1f:
00:a5:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:24 2026 by rpki-client