
$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json)
Hash identifier: Jx8Wf274+7Jiy1+zLyhVMyQ+28RwG2N+INqXu3kRnHQ=
Subject key identifier: F7:EA:39:AB:F9:1F:61:01:CF:94:15:53:7E:8A:84:BB:A8:54:4E:32
Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
Manifest number: 0124
Signing time: Sun 01 Mar 2026 06:45:04 +0000
Manifest this update: Sun 01 Mar 2026 06:45:03 +0000
Manifest next update: Sun 08 Mar 2026 06:45:03 +0000
Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: Z8MZuP+53qMZQyjG129RppC7LHuPRbpp4qyQWA+hoHE=)
2: 99DDC906ABCF11F09186B30FC4F9AE02.roa (hash: ERTLamQHXAize+DQS050C0oNyt0XOaqRatFR9EGeJt8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Validity
Not Before: Mar 1 06:45:03 2026 GMT
Not After : Mar 8 06:45:03 2026 GMT
Subject: CN=69a3e070-efae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:c0:80:2a:c4:32:ad:6c:f0:03:ca:a3:01:
1c:36:37:52:a0:9f:1e:14:69:79:3b:5d:40:2a:94:
a3:31:39:f6:47:ac:cf:31:69:c1:af:3a:c9:22:c3:
46:58:51:83:1a:54:81:c1:4b:ae:5c:8b:74:77:14:
ae:e7:bd:12:01:38:7d:c5:0d:4d:8e:88:44:90:3f:
59:fc:86:d9:69:cd:25:5d:6f:4e:f4:82:b3:a2:98:
96:a5:12:4e:6b:38:0c:2a:3d:66:57:cc:d9:06:26:
d0:29:ab:ea:87:65:68:cb:0b:09:aa:c9:a6:13:f4:
14:ba:75:60:f7:3d:c3:40:4b:aa:98:97:db:c0:a4:
d3:d8:30:0b:74:2c:29:2a:94:a3:e9:e6:9b:63:78:
9d:a4:dc:35:8f:97:81:0c:5a:d5:ff:99:ce:f2:01:
45:fc:63:a0:52:0f:6c:76:5b:51:64:dc:94:8b:4c:
6a:73:cc:fb:1d:00:21:9d:d4:cd:6f:88:25:8b:af:
aa:b7:d0:60:d1:71:e5:72:56:a8:43:49:24:22:3b:
c4:40:d5:17:0a:96:97:9a:07:a2:be:88:c8:3c:fd:
dd:5c:76:7f:f0:38:30:81:41:3b:94:cf:02:66:51:
f9:f6:2d:15:1a:3c:d4:65:8c:03:be:a6:37:8c:76:
ad:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:39:AB:F9:1F:61:01:CF:94:15:53:7E:8A:84:BB:A8:54:4E:32
X509v3 Authority Key Identifier:
keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:68:80:c3:e4:5d:65:6f:cd:b1:ca:32:40:6b:1b:bf:f7:f6:
69:79:aa:ea:7c:d4:36:11:c7:35:4a:72:31:14:ea:e2:eb:fa:
13:0d:4b:d4:f8:a8:9e:90:e7:6b:b3:6c:c2:b7:d6:be:c9:3b:
0a:af:91:af:c2:aa:77:49:26:d3:4d:73:9e:da:cc:18:fc:fb:
fb:53:72:22:18:88:ed:03:5e:ad:c2:83:b1:f9:e0:be:93:12:
ca:b5:63:2a:a3:97:87:4a:32:8c:ed:03:34:df:8f:74:fb:84:
73:90:1f:a1:8d:36:e8:e6:d5:94:17:65:e0:8c:01:34:c2:ca:
03:0b:16:a5:fa:76:70:64:d5:b7:c6:99:80:ba:2f:25:1c:a0:
3a:2e:5b:0d:d5:ef:ce:b1:06:08:4d:fd:cc:41:fc:c7:78:1d:
ef:3a:b2:95:71:54:64:cf:5c:ff:ee:51:d4:70:54:a2:5b:6c:
a4:7a:6c:e5:6f:46:bb:57:b7:ef:5a:c7:0c:85:54:63:55:32:
8c:87:3d:c3:35:16:2b:4f:7d:ef:8b:6e:09:b8:df:f4:c6:6c:
0d:f2:c7:af:6d:1b:56:1b:d8:34:1f:83:59:d6:a0:03:65:25:
d4:02:60:df:44:94:74:eb:50:43:1b:18:3e:e1:6a:92:22:06:
52:eb:30:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC
Mjk3QkI4MDEwHhcNMjYwMzAxMDY0NTAzWhcNMjYwMzA4MDY0NTAzWjAYMRYwFAYD
VQQDEw02OWEzZTA3MC1lZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQ3AgCrEMq1s8APKowEcNjdSoJ8eFGl5O11AKpSjMTn2R6zPMWnBrzrJIsNG
WFGDGlSBwUuuXIt0dxSu570SATh9xQ1NjohEkD9Z/IbZac0lXW9O9IKzopiWpRJO
azgMKj1mV8zZBibQKavqh2VoywsJqsmmE/QUunVg9z3DQEuqmJfbwKTT2DALdCwp
KpSj6eabY3idpNw1j5eBDFrV/5nO8gFF/GOgUg9sdltRZNyUi0xqc8z7HQAhndTN
b4gli6+qt9Bg0XHlclaoQ0kkIjvEQNUXCpaXmgeivojIPP3dXHZ/8DgwgUE7lM8C
ZlH59i0VGjzUZYwDvqY3jHathQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfqOav5
H2EBz5QVU36KhLuoVE4yMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE
REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1
QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF
c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADGiAw+RdZW/NscoyQGsbv/f2aXmq6nzUNhHHNUpyMRTq4uv6Ew1L1PionpDn
a7NswrfWvsk7Cq+Rr8Kqd0km001zntrMGPz7+1NyIhiI7QNercKDsfngvpMSyrVj
KqOXh0oyjO0DNN+PdPuEc5AfoY026ObVlBdl4IwBNMLKAwsWpfp2cGTVt8aZgLov
JRygOi5bDdXvzrEGCE39zEH8x3gd7zqylXFUZM9c/+5R1HBUoltspHps5W9Gu1e3
71rHDIVUY1UyjIc9wzUWK09974tuCbjf9MZsDfLHr20bVhvYNB+DWdagA2Ul1AJg
30SUdOtQQxsYPuFqkiIGUusw3w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:24 2026 by rpki-client