
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier: db0EDrgzmNiipEboCi2mzhM/OCKl9rIF3bq1ElYqm1M=
Subject key identifier: 18:3E:9B:BD:65:10:CB:5E:DF:3B:42:41:47:27:56:00:86:6A:80:A4
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number: FF
Signing time: Mon 02 Mar 2026 01:47:40 +0000
Manifest this update: Mon 02 Mar 2026 01:47:38 +0000
Manifest next update: Mon 09 Mar 2026 01:47:38 +0000
Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: jUe4A6z75HuoeZ59jwhJBeH7GgMoAZysTppMHQ8+OsQ=)
2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: FNB/Vhah+1KKF+D8+8ZX+5xp4x5bxuKgnMy6uZOCSaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Validity
Not Before: Mar 2 01:47:38 2026 GMT
Not After : Mar 9 01:47:38 2026 GMT
Subject: CN=69a4ec3b-f898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8e:44:24:5c:a2:43:a8:63:57:13:9d:dd:c4:
6e:eb:bf:1a:cb:72:76:27:72:8e:46:51:36:c2:06:
fe:ec:9f:bf:85:9d:d9:8b:40:45:ca:b4:ef:75:d2:
30:37:71:08:47:00:9c:df:73:64:c1:d1:7b:22:aa:
63:51:54:05:2e:69:f3:89:66:68:a1:0a:29:76:49:
05:df:fd:86:de:61:7d:53:aa:fe:67:4b:5a:8f:b8:
ee:7f:42:6c:b0:8a:08:8b:ed:34:d3:d0:06:99:c7:
59:fd:37:bc:6f:ac:76:21:bd:95:d6:4f:27:d6:91:
09:8a:65:43:e2:ee:7f:60:91:af:3a:a9:7d:36:ec:
7f:76:81:f5:bf:a0:63:26:29:66:55:54:96:30:84:
f9:0c:4d:2c:64:38:34:95:ea:7e:fd:b1:78:75:d2:
8b:d8:a6:c5:0a:05:7b:61:a6:d1:ab:e3:79:51:98:
51:9e:2f:bb:71:93:58:1f:fb:b5:91:3e:9c:b9:13:
55:56:29:3a:54:b0:92:ff:0b:68:fa:f5:c7:e3:cf:
d1:16:b5:08:14:48:e2:c7:6c:61:82:97:73:64:9e:
7b:99:df:31:ac:2a:9b:7c:6c:81:fd:25:ac:1f:d5:
1f:a9:6c:5a:7a:c2:c3:0f:c8:96:ff:8f:45:3b:4a:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3E:9B:BD:65:10:CB:5E:DF:3B:42:41:47:27:56:00:86:6A:80:A4
X509v3 Authority Key Identifier:
keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:ba:d8:dc:a4:f9:29:1e:9e:06:1c:84:57:d5:16:28:d7:05:
51:4f:b3:06:cb:cd:08:e0:dc:fe:7d:89:cd:fc:37:b0:09:ca:
b0:bd:f4:c2:9f:dd:a1:09:60:2c:90:1e:27:ea:cf:53:85:6e:
e0:1b:04:84:f5:f5:85:80:12:47:d9:27:5e:f1:7d:2e:a5:22:
94:cf:e0:8e:d2:cc:c3:28:3d:8e:38:6c:7a:64:be:91:c8:21:
81:66:22:f1:7e:dc:7e:74:fb:1c:25:be:6b:4e:78:7a:60:cc:
d2:10:9b:59:20:71:b9:c9:16:17:71:55:d4:22:1f:50:a9:62:
a0:d5:27:b5:1b:06:7f:44:f4:e6:b3:68:ad:2e:80:6b:67:48:
21:83:11:ca:5c:52:69:a8:f7:71:bf:a0:d2:f2:86:f9:af:15:
ee:74:19:e8:2e:b8:d1:98:24:f3:ee:dd:e6:a5:63:50:45:44:
e9:84:61:77:11:46:7d:be:79:13:cc:eb:18:92:17:6b:73:13:
dc:b6:e1:f6:ab:d0:1c:96:64:81:f4:37:14:55:55:46:36:11:
09:e8:4f:5b:54:74:da:64:31:ef:db:39:7c:03:51:61:7b:68:
2d:75:7b:fa:b4:a4:b8:7f:be:40:48:44:af:8f:88:b0:7d:bc:
b9:e5:78:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:18 2026 by rpki-client