
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json)
Hash identifier: zvtnFA6WMuxdu06gWOoz4oMTv5gx/IfVmgDbT27IVMo=
Subject key identifier: CF:EC:97:73:CF:F0:5D:E5:28:70:40:85:D4:11:9E:5A:1E:33:79:39
Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
Manifest number: F8
Signing time: Mon 02 Mar 2026 14:29:21 +0000
Manifest this update: Mon 02 Mar 2026 14:29:21 +0000
Manifest next update: Mon 09 Mar 2026 14:29:21 +0000
Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: L78wYPncPrM2nC33LGkic5MLWNWnNFKTgztp/GmnzF4=)
2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: Hu4k/NqzAGOhZjU80rFAqOtaPO4XcnFZGlunYG4Pvw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl
rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
Validity
Not Before: Mar 2 14:29:21 2026 GMT
Not After : Mar 9 14:29:21 2026 GMT
Subject: CN=69a59ec1-7104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:80:03:34:11:b8:fc:d8:30:d7:94:2d:94:
ff:43:26:72:12:06:80:e4:88:41:45:e8:c5:1e:c8:
fe:db:86:86:89:72:b2:f7:bb:4d:6c:03:e4:be:dd:
4d:4e:79:2e:20:15:bf:c3:68:f7:65:58:03:c3:6f:
1d:d3:69:28:98:c0:02:c7:69:cf:f0:4a:7f:e2:79:
8a:fb:6a:6f:68:25:ba:e1:8a:09:37:fc:89:b5:1a:
9d:9b:ae:d0:e0:c6:5f:73:a8:6c:3e:cf:56:b3:54:
54:71:34:1f:6d:4e:78:74:58:7e:52:f4:f6:2c:94:
40:80:e2:8a:0a:0c:6d:4e:16:f6:2b:45:bf:c6:7e:
7f:f7:2e:f4:90:86:16:72:6f:fb:9c:c7:ea:f0:bd:
f5:fe:5b:62:6b:ad:b1:92:1c:f6:bb:c7:35:30:1a:
c1:72:75:cb:0f:7a:65:2b:81:da:3a:f3:1c:5e:23:
7c:4e:9c:aa:00:26:08:9e:a1:d6:df:22:af:5c:96:
c2:cb:ca:ec:c7:d1:93:dc:0e:cf:0b:c6:ed:88:94:
58:23:95:11:3e:03:96:e6:a9:a2:bf:34:38:a9:d7:
22:b9:b9:6c:e3:98:3b:7f:5f:d8:4f:23:3b:02:cb:
bc:8e:f4:fc:eb:04:d6:f9:55:70:af:90:b4:b9:64:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EC:97:73:CF:F0:5D:E5:28:70:40:85:D4:11:9E:5A:1E:33:79:39
X509v3 Authority Key Identifier:
keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:22:b9:31:59:97:ef:48:bb:0d:9c:9e:ad:c5:22:09:d6:f7:
27:2d:74:8a:43:67:da:e0:e7:65:16:f8:ae:bd:3b:03:0e:5b:
d3:27:fc:8a:2a:20:43:c6:21:ac:35:51:51:df:c1:57:89:df:
8a:a9:0f:73:80:1f:60:47:45:3d:65:3a:a1:db:f2:d7:fe:97:
fb:e6:1e:73:80:3d:04:3c:d4:8e:4a:e4:da:09:2c:e5:a4:30:
ec:c8:d6:5c:2e:33:85:9b:f9:8f:9e:2e:9f:9a:f3:9f:b3:0f:
d3:a4:f9:18:bd:d5:af:9e:92:04:77:96:a3:d4:6e:22:7f:20:
c4:b8:bd:e7:47:2b:d7:c6:5b:89:63:88:8b:36:4c:35:16:20:
d9:ad:e5:59:ba:e0:f3:d6:70:cd:c9:e1:49:b0:41:d0:b8:7c:
43:40:84:f5:b4:75:ae:fc:cb:1f:01:75:ec:7f:10:21:32:7e:
2a:2e:8b:34:ed:5d:3a:1f:0d:70:2f:13:7a:f9:03:6b:e0:e5:
82:c3:82:ed:93:8f:1c:b9:90:d8:7c:1f:15:c6:a6:47:d6:fb:
b6:8a:1f:5d:ec:d7:46:af:2a:84:6a:a2:c0:47:db:bc:a3:67:
c6:e4:d5:24:e7:5d:eb:e6:20:61:3d:c9:01:4c:4d:3e:53:53:
b8:71:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:59 2026 by rpki-client