
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
File: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json)
Hash identifier: QD/KD1AiZrNrSlzwTUePORs5prqr3W8wIBpmNzWXf8c=
Subject key identifier: B7:0B:67:76:2B:04:18:BD:D0:28:63:3E:63:E5:BB:3F:AE:8F:E7:49
Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Certificate serial: 0E37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
Manifest number: 0E2C
Signing time: Mon 02 Mar 2026 02:47:40 +0000
Manifest this update: Mon 02 Mar 2026 02:47:39 +0000
Manifest next update: Mon 09 Mar 2026 02:47:39 +0000
Files and hashes: 1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: LLRSKjGLP7NwA278t1/REjoDQLuf18xm3SdppmI539M=)
2: BB691FBE889111F09BDDFE1FC4F9AE02.roa (hash: aKgTE44Ui4Km2SlMzbMZshdm2FGBkzXAI+GmGPjCfyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl
rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3639 (0xe37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Validity
Not Before: Mar 2 02:47:39 2026 GMT
Not After : Mar 9 02:47:39 2026 GMT
Subject: CN=69a4fa4c-dd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:38:d9:f4:77:bb:52:dd:4f:4b:63:25:5e:
dc:ce:55:0b:3a:af:8b:fa:47:e0:99:40:31:8c:7c:
c4:80:f2:2e:d2:15:f9:48:f7:14:63:f0:1e:86:f8:
2f:1e:90:fc:06:fd:3f:25:fc:a8:a2:0f:a5:4c:30:
e0:a4:51:13:8a:5e:61:8c:c8:50:fe:af:82:7f:6e:
86:2f:73:1a:4e:9e:5e:a1:63:b7:59:c5:91:9b:82:
ec:25:bd:ae:e8:03:ba:ef:02:06:8a:a1:49:05:19:
80:c6:e6:6e:18:b5:83:d0:38:44:d0:fd:d0:79:30:
ef:2c:a9:0f:25:53:24:a4:4c:e6:77:cf:10:18:c4:
d4:91:e5:f4:8b:0b:38:b7:93:63:3b:f5:96:a0:f3:
ac:cf:d7:2e:84:5f:44:a0:dd:0d:10:39:45:36:10:
bb:57:6e:e6:a0:62:ea:ef:54:d6:bb:aa:00:59:52:
02:0f:fa:31:7c:a4:30:36:5e:e9:bd:69:f8:0d:8c:
56:54:85:b4:48:9c:db:bb:53:aa:1c:43:25:b2:5b:
3b:ce:49:aa:ef:f3:97:82:89:db:5d:1d:9c:a4:c9:
9e:87:f8:c0:fb:38:25:1f:46:33:1f:9a:c4:69:e5:
5d:5b:f8:6c:d6:78:c5:cc:09:d6:9f:d0:b4:4a:8f:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0B:67:76:2B:04:18:BD:D0:28:63:3E:63:E5:BB:3F:AE:8F:E7:49
X509v3 Authority Key Identifier:
keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:d5:31:15:43:7a:c1:af:d0:f7:b0:35:5f:e4:44:c4:a8:d8:
76:41:01:34:cf:90:76:f8:ec:f8:2c:1a:88:92:48:67:14:6f:
8d:14:b6:0f:a1:f8:0c:26:6b:e3:45:a2:fe:8a:bf:1e:f1:50:
bb:87:a9:a4:1b:3c:de:0a:2a:8e:f8:19:cd:12:b4:b2:d9:e4:
ac:e1:d4:0c:c8:cc:59:31:aa:9c:51:84:fd:b5:30:4b:97:8f:
61:e9:45:a0:af:90:e4:37:0b:24:ed:1b:df:02:91:11:60:d2:
22:11:eb:e8:bc:37:bc:41:e6:a3:2d:9d:ce:a0:30:77:e1:7f:
6a:6a:9c:11:36:40:45:de:81:24:6a:d0:93:cf:9a:56:e8:95:
6f:55:09:3b:c9:ad:a5:f1:92:2a:b9:a9:17:28:f1:c5:09:44:
e1:c5:6f:45:20:ec:e6:4a:d6:fa:8c:9c:f6:13:be:a6:5c:e1:
a6:2a:87:34:23:73:5e:31:3e:23:aa:d4:1d:5e:83:e7:87:47:
81:7d:95:49:f0:1e:ec:19:ed:3d:17:83:8d:54:9a:bf:98:32:
42:c5:0f:76:46:db:bb:19:8f:f0:53:ab:42:d5:32:42:e5:2d:
25:fd:f0:44:9e:1e:13:eb:43:d8:db:1d:9d:e5:eb:3c:16:ac:
6c:2e:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:01 2026 by rpki-client