
$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier: ApRecOwkubSo/ubGJf5BRm85dSYSd4yV3AxxP6+uC5c=
Subject key identifier: A2:15:5C:5B:EC:20:32:2A:3D:AE:4B:EB:6C:BF:37:E9:AC:9C:4F:AC
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number: 01FA
Signing time: Sun 01 Mar 2026 03:54:04 +0000
Manifest this update: Sun 01 Mar 2026 03:54:04 +0000
Manifest next update: Sun 08 Mar 2026 03:54:04 +0000
Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: ibgxb0mZ4DkcPGGPEdN8+ngsqeM0uXj0Vxvbii3mEFY=)
2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: Hgvy/rbsLEaWAnrB/PMoMX/RB2XdkdZAeykYpDBMbDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Validity
Not Before: Mar 1 03:54:04 2026 GMT
Not After : Mar 8 03:54:04 2026 GMT
Subject: CN=69a3b85c-b23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4b:62:04:ff:3e:fa:0d:bc:4b:35:d3:76:09:
44:96:ff:db:85:74:f2:4c:bf:97:80:60:eb:bd:15:
6b:9d:01:3d:5e:e2:0a:cc:de:db:07:4c:41:39:5a:
43:08:cf:5e:45:f6:c8:7f:bb:23:f1:5a:d1:9b:df:
15:6f:fa:aa:33:d6:a9:ac:8f:c2:fe:bd:ce:57:24:
af:3f:d0:ec:d8:2e:83:b6:a4:c0:b8:dc:53:7a:e1:
d4:0a:12:36:a3:8d:65:c3:e7:b8:ef:cc:03:7f:4d:
59:34:0c:11:8f:0c:40:29:4c:ba:17:44:f8:2c:42:
92:9b:fe:15:d8:c0:98:dc:f0:1d:58:69:56:28:bf:
bf:04:5e:10:f8:d3:03:31:0a:0c:df:08:e4:68:63:
7e:80:d9:01:b2:38:87:33:02:89:b3:99:6b:78:c3:
e2:39:77:16:c9:5a:fb:9b:99:e8:47:66:df:36:ef:
09:6b:86:52:62:e3:46:6d:51:14:c7:dc:36:40:1a:
09:32:b8:3b:95:48:5d:18:a8:fd:ac:d9:15:4a:d1:
7a:b6:b2:83:13:19:5a:fa:a7:6a:43:63:de:97:bf:
a4:12:db:b5:91:7a:fd:3a:e1:ce:73:f9:c7:0d:83:
dc:64:ff:48:64:47:78:8f:e3:28:5a:c2:86:ab:6d:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:5C:5B:EC:20:32:2A:3D:AE:4B:EB:6C:BF:37:E9:AC:9C:4F:AC
X509v3 Authority Key Identifier:
keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9f:ce:17:eb:a9:c2:4d:c3:81:e0:08:73:92:ca:6f:0a:87:
51:26:d2:51:3b:f1:bd:0e:36:2a:a7:4b:1b:e4:7c:f4:45:ce:
fc:ee:c9:26:bf:c8:38:68:6d:55:44:14:10:29:f1:cd:a0:e5:
cf:95:db:2d:63:03:95:d8:e2:91:e1:49:74:99:4e:ac:b8:9e:
d6:86:ca:cc:fa:8a:9f:a9:1e:c8:4d:d9:5a:0a:ee:fa:b5:2e:
e3:8c:1b:b8:6a:7d:d1:ef:ae:11:d7:ad:8a:db:cb:37:88:79:
4e:e2:3a:a8:1c:af:2f:e1:c8:04:ee:c4:1b:f4:24:ad:8e:22:
15:66:6c:80:1d:54:c6:a2:22:ae:7a:94:2d:06:5b:5f:33:89:
62:76:99:f6:be:b7:4e:eb:c9:f5:20:11:75:0d:8b:f1:b8:e7:
f3:e7:41:03:c3:b7:9d:9a:07:b0:bc:1a:a7:01:0b:f1:63:58:
28:ca:48:30:db:50:e1:e7:53:f9:b1:a9:13:6f:22:da:6b:c7:
a7:18:e5:1d:6a:be:63:1f:53:37:f5:ba:05:74:45:be:a2:c1:
57:f6:f7:3c:4f:61:36:db:78:41:cd:b9:ec:0e:d7:e7:00:36:
11:f9:87:a0:6b:23:bb:37:58:e9:91:13:05:7b:eb:59:e3:ea:
62:bb:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:48 2026 by rpki-client