
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json)
Hash identifier: bi8+Jv1QMODyOkAjPUWvRoYLrlYHDfxEjEN4GG9nsk0=
Subject key identifier: 75:40:1C:4D:36:AE:53:57:48:B7:61:FB:DC:45:86:F9:E0:43:FC:0A
Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7
Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
Manifest number: F7
Signing time: Sun 01 Mar 2026 23:10:27 +0000
Manifest this update: Sun 01 Mar 2026 23:10:26 +0000
Manifest next update: Sun 08 Mar 2026 23:10:26 +0000
Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: I6zlqu9BnJicJqzXABH5RhsVHlvRH/PSA2mu712IzHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl
rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
Validity
Not Before: Mar 1 23:10:26 2026 GMT
Not After : Mar 8 23:10:26 2026 GMT
Subject: CN=69a4c763-db82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:19:67:e7:71:ed:45:33:3e:24:7e:6f:e4:
19:dc:2b:34:52:db:ef:d5:7a:e1:95:0c:2f:19:85:
48:98:79:df:6a:c2:96:2f:ac:e6:7c:56:a3:18:ee:
b7:0d:a9:94:c5:53:51:af:cc:ff:c9:c8:12:e9:a2:
8e:b4:71:9a:e8:aa:47:6e:ba:de:3b:e6:dd:51:cf:
50:c7:f3:22:00:92:ed:cb:0c:41:f1:de:e5:bc:95:
a9:65:06:98:d2:d3:7c:67:8b:b7:d2:68:e9:12:90:
7c:db:db:c8:b2:71:86:b8:c5:77:41:56:26:d7:c5:
0d:1d:f4:c7:a9:fd:42:9a:15:e0:86:2e:e3:f2:24:
e2:a4:d4:ce:f2:b1:f7:8b:7a:b3:61:a8:df:dd:e0:
3c:bb:d9:11:f3:a8:3b:c0:91:99:00:ff:19:a0:8a:
92:ee:0c:3b:a2:18:62:51:8e:d3:36:4e:76:35:7a:
c2:41:df:7e:51:ba:f1:64:28:11:0f:fc:38:0f:e3:
2a:e4:f2:e7:ee:bb:f6:ee:fa:3b:63:c9:54:72:81:
9b:0f:a7:55:4b:5c:58:14:b8:37:fe:6e:3a:80:c2:
1d:73:77:b9:1a:8e:c5:e3:c9:8d:1b:6c:3f:96:81:
4a:d7:60:4b:3e:50:9e:5e:21:0a:56:37:88:85:e9:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:40:1C:4D:36:AE:53:57:48:B7:61:FB:DC:45:86:F9:E0:43:FC:0A
X509v3 Authority Key Identifier:
keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dd:d7:b6:50:e4:ff:3a:4c:21:8d:bf:f4:e3:de:a4:d1:6c:
ec:82:ba:68:b3:9d:be:2f:31:e7:1c:f6:ff:72:e2:f2:20:5c:
be:21:36:e9:d3:0b:2e:e7:c8:d0:2b:68:3a:54:f7:22:c7:50:
cb:2f:12:a3:02:f6:f9:34:2d:72:9a:55:af:96:be:28:6e:23:
dc:03:69:19:a1:9b:54:29:02:ca:72:87:52:db:b5:a3:c7:b4:
4c:b5:12:53:33:b7:80:96:b7:7d:f1:73:e9:09:9c:d6:38:18:
72:dc:c5:c4:6b:1d:35:5a:92:c4:a7:42:03:4c:11:26:a6:45:
4a:4d:66:55:29:0b:6f:e0:e4:4c:be:04:3b:d0:83:73:37:8f:
2d:ff:e2:a0:23:a4:3c:98:6f:f0:64:34:4c:a0:7b:2c:e3:6c:
77:ea:e0:61:1e:66:10:3a:6d:ee:5d:48:c7:7e:4d:1a:61:87:
d7:53:15:63:67:89:42:b1:73:0a:3c:3c:d0:6b:4d:fc:2e:78:
ed:31:50:4f:29:7a:13:97:4e:30:0a:5a:a3:cc:c1:c2:5a:4f:
da:11:9e:4b:d4:04:18:b9:2e:e6:a1:14:ec:64:fc:a5:f3:28:
3e:ad:78:8b:58:11:ba:d9:f1:70:87:6f:fa:65:c5:b5:34:1c:
63:9b:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:49:08 2026 by rpki-client