
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
File: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft (raw, json)
Hash identifier: pRzRdtc7UgDb7mtuqvgj4z6iqj0XmflylAN5t84A0TM=
Subject key identifier: 43:FE:28:83:10:6D:41:94:D7:2E:42:9C:48:58:79:D7:1D:15:B8:9F
Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E
Certificate issuer: /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
Manifest number: 065F
Signing time: Sat 28 Feb 2026 23:29:19 +0000
Manifest this update: Sat 28 Feb 2026 23:29:18 +0000
Manifest next update: Sat 07 Mar 2026 23:29:18 +0000
Files and hashes: 1: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl (hash: lvrc/vsOdYvb8JX30rWZ55zw86JW2BON0f/azak+Z0I=)
2: 8F3586B40DF511F18DE23E02043D8C67.roa (hash: UaQPKROKo5CR0WKZ9vKVB7kEZfJR6kJK1U+EFr3ZkQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl
rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
Validity
Not Before: Feb 28 23:29:18 2026 GMT
Not After : Mar 7 23:29:18 2026 GMT
Subject: CN=69a37a4f-e749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:1c:03:ec:e9:4b:71:e7:6c:58:06:8c:5f:
da:ae:23:be:75:35:b4:17:6a:fa:fa:eb:58:63:55:
c4:a9:9c:52:81:40:40:d6:29:fb:f5:a4:2c:ca:d2:
89:f4:81:fe:5e:ee:e6:b3:c8:af:c9:ae:7e:ad:e0:
37:da:33:fe:0a:e0:d3:16:27:f0:3a:cd:bc:96:28:
32:a4:8f:3c:61:32:5e:d5:e4:17:72:7e:e0:15:db:
64:02:9c:d0:22:3d:05:ac:5c:9b:15:f9:52:f9:fd:
0d:d6:b5:3a:76:b4:18:d3:bd:cc:58:39:02:19:35:
14:87:ac:13:77:65:c5:7d:e4:ac:78:70:7b:38:89:
27:86:fc:d0:6d:a3:c4:1f:cc:97:8c:69:47:9a:01:
25:78:4e:28:23:ba:09:8a:52:c4:41:9f:3b:11:72:
40:83:4c:86:b3:75:cd:66:e6:6e:16:1c:31:ce:73:
8a:51:9d:de:7d:1f:06:7f:09:05:ff:b5:d2:bd:00:
8b:d3:26:75:a0:a6:2c:c7:03:fd:19:86:0b:b0:91:
88:58:2d:97:00:b9:e0:78:dd:f2:84:a3:17:9a:2f:
24:ad:bf:f1:29:b0:cd:85:28:ef:d2:ef:39:27:63:
c9:4a:3d:14:76:38:fb:fb:53:29:07:47:ef:13:94:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:28:83:10:6D:41:94:D7:2E:42:9C:48:58:79:D7:1D:15:B8:9F
X509v3 Authority Key Identifier:
keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:aa:c8:ff:99:01:17:71:da:bc:ce:81:0b:81:30:21:f5:57:
93:8a:17:e4:53:eb:71:80:c7:d3:b5:7e:d8:d8:1b:57:ba:a8:
88:1e:36:ee:b3:02:12:7b:7f:3f:53:86:ea:90:cf:08:bc:02:
ae:6d:13:39:36:bb:5f:80:dc:dc:79:ae:e8:f6:cc:1c:94:a3:
96:e4:e5:94:1b:4e:50:24:ec:7d:48:13:99:d6:84:36:0b:9a:
55:de:96:e1:1f:ef:bd:b9:31:c8:73:c0:ef:2b:b2:16:fa:6c:
7c:0e:36:c8:86:5d:6b:4e:b7:8d:01:cc:97:44:77:b3:22:00:
cc:b4:39:94:49:e0:9c:48:85:d7:2e:03:87:e4:7a:bc:d1:76:
e5:34:b2:89:9f:e6:c7:54:9b:4d:e8:b7:6b:bc:c3:1c:6e:eb:
c4:68:07:91:72:8e:f8:d7:45:2a:b4:68:c1:04:7a:4c:e2:a4:
41:82:88:65:bd:ec:89:ec:eb:99:d6:c8:14:44:75:47:f9:16:
c3:99:b3:b5:b6:3e:c8:f4:d6:ee:d4:ac:d2:a5:aa:65:dd:03:
65:af:3a:87:62:32:4c:71:b8:2f:5c:5e:ca:d3:bf:63:91:33:
11:28:24:40:0b:f6:a3:9d:fa:21:9c:09:d7:15:44:a2:c0:d5:
78:d9:74:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:34 2026 by rpki-client