
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
File: rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json)
Hash identifier: 9728xqsfspUc8K8m/Onq5O3tl3dwI+36nD+CS5yZfvQ=
Subject key identifier: 64:16:4F:E3:14:F6:5E:41:6C:25:41:F2:9E:AE:A8:D5:FC:27:17:BC
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Certificate issuer: /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial: 06E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
Manifest number: 06DD
Signing time: Mon 02 Mar 2026 01:09:10 +0000
Manifest this update: Mon 02 Mar 2026 01:09:09 +0000
Manifest next update: Mon 09 Mar 2026 01:09:09 +0000
Files and hashes: 1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: mEVMGru/3No1qSH2C5oWhtFs2BLO27aT4cN+7kPEcyM=)
2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: 1TSa0PPd+7pwYyolW0O6jfoDGRjZIL5Y7Dutt5Dic1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1768 (0x6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A5E7, serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Validity
Not Before: Mar 2 01:09:09 2026 GMT
Not After : Mar 9 01:09:09 2026 GMT
Subject: CN=69a4e336-79b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:f4:ba:f1:10:f1:fc:f0:71:ad:36:dc:45:
14:f2:5e:41:a8:b4:2a:0e:6c:bb:c0:19:8e:2c:df:
72:d1:82:df:f5:f7:cb:4b:df:1a:b5:36:cf:fe:15:
49:98:21:fc:f0:b5:0d:73:fa:d6:a6:3d:eb:eb:5a:
df:d7:67:ce:16:d6:f7:68:5e:93:2a:18:f6:20:98:
ae:4c:35:cb:00:61:cb:78:60:23:88:f3:5e:c2:fe:
11:38:0c:c8:c2:02:06:82:65:48:05:28:3b:f5:1d:
44:25:5c:24:0d:0e:da:4b:ce:47:11:6c:cf:71:eb:
21:af:26:96:8d:ff:6a:95:c3:40:9d:69:21:5d:1f:
12:59:60:6e:34:58:eb:7f:c1:b9:6b:9d:8d:e9:12:
22:aa:16:8f:d5:49:8a:4b:45:aa:e5:18:10:3b:cf:
b7:b6:07:b5:9b:ea:63:96:d8:6c:e0:27:df:3c:f9:
4f:b6:31:2b:c4:79:f8:e9:74:75:1f:8d:6c:e2:3b:
46:24:e6:c9:ef:ec:12:eb:08:c3:29:03:37:83:be:
7c:2f:d0:f5:f7:f4:a5:2c:7e:f7:65:15:40:34:00:
80:e2:05:1c:cf:64:65:9f:35:99:74:42:5e:df:9a:
ac:5c:23:e1:1a:9f:79:5e:68:d9:7b:42:9b:69:59:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:16:4F:E3:14:F6:5E:41:6C:25:41:F2:9E:AE:A8:D5:FC:27:17:BC
X509v3 Authority Key Identifier:
keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:60:99:1b:48:45:29:74:6e:06:e1:de:db:18:e8:5d:c7:e9:
2f:fd:e8:d6:26:bb:89:91:a5:06:8b:75:84:15:07:77:4c:2d:
72:8b:aa:e1:b4:8a:de:d2:68:ed:4e:6f:32:a3:73:87:1b:44:
0e:2c:7b:75:51:43:cd:e1:f4:bc:9f:a8:78:94:f6:cc:17:43:
44:2d:7a:84:82:24:0b:07:46:43:8c:23:f4:b0:ea:b0:ec:3f:
63:8c:22:02:c3:e5:fa:08:85:26:df:d4:7a:38:3d:63:f9:c5:
c7:2b:cb:44:a3:7b:c0:10:80:7a:01:18:f8:ff:10:f6:1b:ca:
04:f2:67:b4:75:c0:7b:d4:3f:ee:25:ae:5d:d4:66:c8:c6:1c:
1b:bf:8e:89:f2:f7:ad:e8:ce:ef:73:9e:4f:88:58:a5:23:64:
f7:fa:c2:b8:81:0e:90:35:a9:33:7f:25:9d:1e:71:d0:58:64:
b6:55:9c:0c:bf:74:96:38:5c:9a:5a:62:59:a8:32:84:8d:7b:
48:11:67:0b:18:7a:9e:5c:94:ba:8b:c9:02:bd:f5:60:14:09:
74:09:fb:42:d6:96:b6:a6:10:18:92:6d:c4:c6:f5:31:4e:92:
e5:4b:6f:51:c7:01:e5:60:50:ed:88:d9:3d:dd:40:f0:37:aa:
d8:ca:ea:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:10 2026 by rpki-client