
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
File: s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json)
Hash identifier: Z6Rz6HqoWWUYAyU1Y9BH2vYhPYZaxOmEKlDI4S0ahig=
Subject key identifier: BD:94:78:34:F6:FD:2E:A9:AC:94:BD:FB:BB:1B:1A:CB:8B:84:90:60
Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
Certificate issuer: /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
Manifest number: 61
Signing time: Mon 02 Mar 2026 02:00:26 +0000
Manifest this update: Mon 02 Mar 2026 02:00:24 +0000
Manifest next update: Mon 09 Mar 2026 02:00:24 +0000
Files and hashes: 1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: 8+LtxEtXdtrVCjvdXGbmD5ihkSVFNjXnwsn61kpsko4=)
2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: kk5sjyLutQjUsbYJim6fXXwfLma+mT+CCDWR+53e7jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl
rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Validity
Not Before: Mar 2 02:00:24 2026 GMT
Not After : Mar 9 02:00:24 2026 GMT
Subject: CN=69a4ef39-2da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:e6:6f:30:f4:4e:9c:7f:6a:b4:81:be:28:
d9:96:78:e0:49:47:fc:02:ac:91:6b:45:e1:68:1f:
d8:26:e9:aa:83:b3:9f:1c:ea:60:b4:fa:17:85:89:
b2:eb:dc:f6:03:25:3f:b5:92:25:9b:e4:55:8f:c5:
29:35:91:5b:e5:54:ab:b3:c7:a6:55:fb:cd:f2:cc:
d5:4a:1c:9b:9b:f5:54:16:ec:cf:1a:a6:66:60:a8:
89:13:ae:1f:c9:ed:69:14:b5:8b:cc:df:c1:bd:cd:
72:3c:67:ff:ed:b0:56:c5:0c:5c:83:ed:58:85:75:
a1:5f:c0:86:85:a7:cc:69:3a:57:e0:98:c5:5d:8b:
f2:29:bc:b5:46:a4:af:69:4e:2f:62:12:c3:7c:fd:
5c:60:c9:f0:1d:86:8f:aa:79:72:a8:60:25:9a:a3:
03:9b:9d:ca:cc:ce:ce:38:39:d1:d5:8b:cb:26:32:
5a:5a:21:32:4d:fa:07:a0:2f:71:4e:dd:25:56:8b:
70:9c:b6:96:b5:b7:8c:43:49:d8:2f:7a:d4:ce:b5:
73:93:90:40:91:9f:5f:44:8c:1f:bf:d3:e7:c1:71:
d6:aa:9b:90:2b:64:0b:5d:70:ca:e6:c9:ad:43:3a:
7b:37:bd:08:18:48:8e:6d:4d:a2:b0:53:83:21:ab:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:94:78:34:F6:FD:2E:A9:AC:94:BD:FB:BB:1B:1A:CB:8B:84:90:60
X509v3 Authority Key Identifier:
keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:1d:50:11:5f:75:0f:43:00:1c:59:14:b7:55:61:08:30:85:
87:ce:5c:11:de:b2:cd:b0:06:1c:aa:f2:5f:06:73:47:53:52:
58:c2:c2:ac:f4:b0:7e:ac:fd:db:c3:96:18:ca:67:24:09:3e:
28:e8:ec:a2:e9:90:5f:b8:44:99:a8:2e:fe:3c:44:cd:35:41:
25:ee:b6:d3:28:83:3a:a9:1d:f8:4c:fb:5e:02:ab:20:27:1f:
9d:7d:66:00:5c:af:68:b2:b5:01:0a:5a:7c:5c:3e:89:c8:29:
6a:73:16:dd:a8:23:9f:db:de:fa:3c:4a:f1:2a:e3:6e:62:43:
a9:26:48:0c:6c:cb:79:dc:ab:03:03:36:9c:5b:c3:04:11:63:
3e:c1:f7:2e:c9:28:bc:7b:19:8a:4e:d0:89:66:46:69:e2:12:
55:a8:c2:b7:06:91:78:bb:42:70:1c:10:8a:34:38:b0:25:59:
43:7b:b8:57:58:cb:5b:3e:e0:b1:c3:da:35:0d:69:a1:41:c2:
73:4b:26:11:d9:10:bd:72:14:2c:26:89:8c:71:3d:2c:62:9b:
43:12:9f:12:2d:cd:21:be:70:29:da:8b:9e:67:ee:17:d1:a1:
d7:d7:50:1a:21:3d:7d:4e:53:7d:92:78:53:4e:33:3f:e6:df:
5d:7e:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:40 2026 by rpki-client