
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
File: 0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json)
Hash identifier: EznTPJfp3FdsNNw24AB8YIuD5j3M42nJfM7fZLkJjAk=
Subject key identifier: EF:C3:08:C6:E5:FC:D1:74:85:9A:7A:76:8F:0A:6B:57:96:02:E2:69
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Certificate issuer: /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial: 356F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
Manifest number: 353B
Signing time: Mon 02 Mar 2026 02:06:53 +0000
Manifest this update: Mon 02 Mar 2026 02:06:52 +0000
Manifest next update: Mon 09 Mar 2026 02:06:52 +0000
Files and hashes: 1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: Zv7WOQ3i/hltrzoQUQAouCMMm2C9lQSjMlQM/lCmKEw=)
2: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: WgXWHAaIOtzM5Xduzkgb83GHDBG9ZysSf4lZqq29oeQ=)
3: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: EsDpNgLrhYg/FBS1knEjEBTDiX3/7RrrGMbwFcOSNcg=)
4: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: CjO+8I3DQiWAPJtsp249rNJBqgAtu38CyLjJYCf1kgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13679 (0x356f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Validity
Not Before: Mar 2 02:06:52 2026 GMT
Not After : Mar 9 02:06:52 2026 GMT
Subject: CN=69a4f0bd-f0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:3f:a3:45:b1:9d:6b:54:5d:ec:d9:59:7a:
df:19:46:de:5a:8e:d1:a8:e2:c8:7d:b3:3f:1d:e1:
96:78:de:b0:83:e1:64:b8:24:97:14:d2:25:1a:65:
f1:74:a8:4e:8e:47:1d:ff:7b:18:7c:a8:ae:c3:7e:
54:20:ea:8f:dc:6e:0e:e4:f6:b2:7d:84:2a:bd:0f:
8a:a2:07:15:3c:f5:3b:2e:c5:80:df:11:85:04:90:
49:7e:80:c0:c6:1c:ff:65:fb:83:3e:23:bc:a2:d1:
88:13:2e:e2:73:e9:a0:e3:4d:ab:5d:9c:70:06:dd:
cd:e6:44:03:c6:26:75:89:75:74:4f:99:71:51:30:
46:a7:74:3e:de:64:e3:8e:dc:ae:65:59:e3:77:33:
10:7f:62:9d:de:9b:a6:42:00:76:6e:e7:a0:52:a1:
b2:0e:f2:96:08:0d:94:ae:a3:b8:4b:eb:bd:9a:6e:
9b:13:c5:9f:a9:22:fa:0a:60:77:86:e6:78:ed:07:
3c:01:7d:43:73:95:0e:5e:32:5e:91:47:0f:59:90:
67:00:70:dd:dd:5c:47:a6:a7:13:70:90:f8:fb:d4:
cf:b5:d0:85:bd:b1:6c:73:3a:ab:96:03:15:d4:54:
f7:06:38:c1:74:75:5c:76:d0:93:dc:f9:6b:76:4c:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C3:08:C6:E5:FC:D1:74:85:9A:7A:76:8F:0A:6B:57:96:02:E2:69
X509v3 Authority Key Identifier:
keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e8:38:aa:af:66:09:a3:fe:dc:27:18:fb:7a:43:64:83:d7:
ea:b4:e3:15:c7:7a:db:12:41:58:83:13:b4:b8:89:5f:eb:40:
2c:05:cb:5f:47:d4:8f:7a:11:a3:4e:12:02:15:60:c3:6d:92:
04:7b:b7:3b:4a:fb:4b:90:8a:b8:08:a1:a6:bf:b1:f6:ea:04:
6c:1a:48:70:8c:04:2a:24:68:7a:2b:fa:10:04:1d:be:a0:85:
22:d0:8d:51:4b:b2:7e:68:53:cb:bd:6c:d5:64:74:f2:ed:b0:
0a:f5:42:71:f3:47:77:cd:6b:f9:52:52:6c:d1:70:e7:09:34:
22:bf:88:c4:4c:e7:6b:ba:26:b6:eb:cf:6c:48:f8:a4:25:90:
e3:ef:73:c7:f0:39:f2:04:e8:3c:40:85:10:c0:51:92:58:4f:
6d:49:a2:cc:b5:3d:c8:52:91:e7:28:ed:80:84:55:b5:13:69:
cd:d0:a0:b5:b7:71:eb:d8:72:e4:76:41:94:85:6e:10:c8:0f:
97:c9:a2:2f:30:61:a5:fc:62:5e:d3:a4:3d:45:f2:9a:65:c9:
37:6d:c0:1b:50:68:c0:83:81:5a:26:2e:8f:fd:b5:ed:94:08:
bf:5b:2d:61:4b:d7:3e:14:3e:ab:6c:f5:3b:9d:9c:34:d4:f8:
fc:c4:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:08 2026 by rpki-client