
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
File: t88LJwp_2x1xeui5edHuD_iL1E8.mft (raw, json)
Hash identifier: O01CFaeq/+ltgfDXZKCZAHEdvxjeIFsxg7LqVLPsjV8=
Subject key identifier: 55:E9:08:45:94:C8:47:7B:FE:CF:9E:30:89:03:7A:B7:BB:62:03:3B
Authority key identifier: B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
Certificate issuer: /CN=A915B50D/serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
Manifest number: 0111
Signing time: Sun 01 Mar 2026 07:00:51 +0000
Manifest this update: Sun 01 Mar 2026 07:00:50 +0000
Manifest next update: Sun 08 Mar 2026 07:00:50 +0000
Files and hashes: 1: t88LJwp_2x1xeui5edHuD_iL1E8.crl (hash: mNnaLuzzsOpbeLTQ0haFZxvx4ljOaBDwi+hyUbN8Hpw=)
2: 85CDB6087C1211EF8E490677C4F9AE02.roa (hash: dg3/bJiVaiz5v44anOkDfbtlZGRX3EFlzFQApjSj5Nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B50D, serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Validity
Not Before: Mar 1 07:00:50 2026 GMT
Not After : Mar 8 07:00:50 2026 GMT
Subject: CN=69a3e423-5ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:f5:82:1d:4a:ae:13:78:83:70:e0:49:bb:
8f:ac:38:e2:87:70:24:e8:48:4c:59:3e:7a:3e:ae:
bd:14:03:e5:90:93:8a:cd:f1:84:8c:6c:cb:56:4c:
e6:9b:0a:31:42:e5:38:5a:a4:f9:6d:39:9e:f8:f5:
ff:97:de:89:db:9c:0e:26:61:a7:86:29:95:ea:e9:
11:08:c4:b5:47:28:52:6b:5f:d6:a5:1f:1a:e5:c7:
3b:b3:7c:aa:cd:7d:74:91:78:92:0c:10:37:2d:d2:
59:40:a1:68:03:88:f1:12:d5:da:27:a0:cf:fe:47:
2c:29:c1:25:3e:b7:b4:b6:67:3b:ea:cd:b6:5a:ca:
3e:b0:7f:61:07:5f:a7:70:ea:d1:f3:e1:a4:75:1e:
1a:de:d9:8f:1a:ea:c5:58:5d:aa:26:39:7d:1d:91:
4e:5e:ca:7b:51:0d:c4:a3:03:50:47:63:11:56:56:
4b:0d:38:35:64:53:19:8f:74:70:76:61:b1:58:26:
a3:51:f2:93:e3:79:d2:9d:cf:8b:10:15:b5:54:c6:
47:58:e8:c0:df:dd:63:dd:98:a2:b8:d3:35:3a:20:
2a:6a:11:0f:68:1e:2c:a2:dd:e6:69:94:f9:d2:b6:
d7:9b:f9:d7:39:16:a2:4c:94:67:2a:69:2c:58:65:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E9:08:45:94:C8:47:7B:FE:CF:9E:30:89:03:7A:B7:BB:62:03:3B
X509v3 Authority Key Identifier:
keyid:B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:5f:32:e7:bd:ff:de:56:31:af:a5:79:18:2a:13:9d:87:a8:
d8:4b:0c:1e:46:96:ea:0f:cb:1f:c2:17:ef:a3:e1:12:48:36:
c8:16:e3:66:e6:19:85:a5:5d:da:5d:e1:ab:44:49:bc:8b:64:
e5:34:16:9a:cb:f4:6b:64:6c:c0:78:a9:9d:01:94:fe:0d:51:
0a:81:26:39:53:af:e8:cb:dc:b0:a9:56:5e:42:61:23:6f:95:
78:98:bb:bd:55:de:52:19:e5:ee:cc:b5:b0:d9:70:21:b5:ec:
7d:11:59:24:6e:09:ae:5c:94:6c:05:08:24:fc:14:9b:8f:80:
b0:9a:3e:e9:0a:06:cc:00:99:ae:bd:16:f4:5b:6a:94:e6:3c:
f2:91:35:79:c4:39:19:88:9e:8b:9b:7f:4a:fc:88:ec:9b:d3:
25:bb:94:1b:e2:d2:9a:c7:4f:78:ab:37:36:25:ef:cc:93:19:
42:40:19:6b:3f:5e:dc:2f:7d:6b:dc:ce:3c:99:35:ec:ed:4d:
5d:4f:83:2f:f7:6f:75:f7:38:d0:99:4c:15:51:a2:0b:68:ec:
47:62:75:f9:8f:8d:c9:f9:b3:9d:a7:bd:be:01:49:c0:bc:07:
56:1b:3a:2e:1a:b3:8a:3d:b2:08:c8:69:58:a4:74:fd:b9:4a:
9a:89:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:22 2026 by rpki-client