
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
File: pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json)
Hash identifier: HTxlSJB+5d9u3xHzRoB6UEHwhV2vVB+DdFLVZnxAcs4=
Subject key identifier: 28:35:D8:55:0D:80:AC:DF:27:13:C2:39:EE:AB:4E:2E:D5:B1:2B:AD
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Certificate issuer: /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
Manifest number: 01DF
Signing time: Sun 01 Mar 2026 04:16:40 +0000
Manifest this update: Sun 01 Mar 2026 04:16:39 +0000
Manifest next update: Sun 08 Mar 2026 04:16:39 +0000
Files and hashes: 1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: f3iFUO+GFhas6YiQCrLNGMbLguE6fvRLCpcGW6xkB4U=)
2: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: 2j8iHRJYXJmCGizWbVLt4sqtXFvaUv3FR/z4mF6gpbA=)
3: 966CB516179B11F080B9434CC4F9AE02.roa (hash: kuUZFxBY6WLWD5ahHlBCDWPPvTA6XXIjOYW0/VKo7rM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Validity
Not Before: Mar 1 04:16:39 2026 GMT
Not After : Mar 8 04:16:39 2026 GMT
Subject: CN=69a3bda8-2013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:8d:1d:8b:8e:28:f0:1f:17:06:bc:a3:65:
5e:63:df:7b:d5:43:12:0f:40:53:7d:26:54:87:49:
72:9d:22:11:f5:a5:ca:da:be:c6:96:fc:94:bd:c7:
e4:ae:a7:7e:73:ca:da:2b:94:b4:40:16:37:b9:b3:
96:f4:f7:4e:1c:82:0c:05:eb:a4:14:be:d1:e1:ba:
04:9f:af:5a:73:00:63:48:d1:81:87:50:84:8b:3b:
52:0e:2a:5d:f2:dd:51:53:e5:48:64:74:95:1d:36:
27:1b:a3:18:04:1e:4e:53:ab:5e:af:57:a2:80:f6:
1b:13:69:88:31:09:d8:7c:9b:18:70:aa:56:de:89:
ee:f9:43:91:ac:ca:f0:1b:38:a5:67:2e:67:4c:82:
62:4d:cb:b3:48:96:58:91:a7:a9:0d:2a:98:00:12:
6f:88:37:eb:3a:ef:5b:3b:54:08:b6:fd:4f:cc:16:
ac:ad:b5:2e:71:c6:49:68:64:ef:35:20:48:87:ec:
b2:7e:50:7f:dd:fe:6c:69:01:fc:bf:56:cc:59:c4:
9b:b7:3a:33:af:23:2b:0a:45:b7:80:1e:52:2b:54:
81:28:de:b9:b9:0f:28:6a:83:05:bf:c0:b6:4c:fa:
a0:2e:cc:e9:fe:a0:2c:29:cf:1c:70:29:3a:eb:9e:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:D8:55:0D:80:AC:DF:27:13:C2:39:EE:AB:4E:2E:D5:B1:2B:AD
X509v3 Authority Key Identifier:
keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:53:b2:9e:81:57:87:ff:0c:c6:23:aa:08:4a:37:ec:5d:
25:db:56:07:36:3f:87:32:f6:3c:13:23:64:7b:68:a3:5a:87:
0f:05:6d:ee:7a:2d:92:a3:c0:03:37:1b:35:10:6c:84:53:00:
08:b1:ec:fa:31:2e:1e:35:5d:ab:b9:51:50:8e:64:e0:ad:21:
82:f9:8e:33:60:67:d4:95:c7:0c:1e:25:2c:c6:be:31:7d:53:
c2:39:da:99:94:ed:5b:7f:b8:73:7c:6f:ca:da:76:33:ac:84:
3d:c9:16:11:13:17:50:ed:2e:61:be:ee:84:5f:3f:f9:88:85:
97:b8:50:d0:63:c9:21:2e:ed:76:2f:da:17:01:88:0c:a8:16:
a9:2f:12:12:a2:62:69:d1:db:87:57:93:64:aa:ab:9f:27:9f:
c1:a7:90:03:9e:25:70:5e:0d:b0:a4:43:bc:4f:0b:72:33:c1:
51:85:56:d4:80:59:12:3b:5b:62:9e:4d:02:75:9e:e4:2f:b2:
b5:3a:d3:cf:4a:c3:86:82:50:e3:38:3e:0d:9b:f1:0e:35:fe:
63:6a:96:ec:b5:04:94:a4:66:a8:52:e3:63:9d:d9:1e:4b:98:
6c:ac:6a:7a:4d:cd:71:75:86:6d:53:3f:1d:6e:e3:e9:1a:7d:
4b:97:7a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:24 2026 by rpki-client