
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
File: _MSmV91TDZU6LW8_FZMv_gHykdY.mft (raw, json)
Hash identifier: Wh6O6KdBTbXZryFLkqLyLXm4ZDtdj4lqRK8NYuNpTnc=
Subject key identifier: A8:C5:0B:82:86:E3:B7:FF:87:C3:47:52:B9:27:F9:6A:46:88:16:CD
Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
Certificate issuer: /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
Manifest number: EF
Signing time: Mon 02 Mar 2026 01:07:33 +0000
Manifest this update: Mon 02 Mar 2026 01:07:31 +0000
Manifest next update: Mon 09 Mar 2026 01:07:31 +0000
Files and hashes: 1: _MSmV91TDZU6LW8_FZMv_gHykdY.crl (hash: Hzgk1uZw3SET3ZrAR+DotbdbYgFKq/cJbDNqG0hPTqg=)
2: 7A3EF584AEAE11F0ADA6ED46C4F9AE02.roa (hash: O2Y5qdNXuqXf6sS2Ux7ySOCEWrMYJteRlUmnpam9FAM=)
3: 79553296AEAE11F0ADA6ED46C4F9AE02.roa (hash: 8G4+LrxGavZD1g4Almv5A5epZoTu0BQxeKIDgLrbAGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl
rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Validity
Not Before: Mar 2 01:07:31 2026 GMT
Not After : Mar 9 01:07:31 2026 GMT
Subject: CN=69a4e2d4-883a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:85:7b:a0:e6:47:65:90:ad:bd:01:26:6c:
5f:35:34:c7:8d:31:4b:57:03:e5:ec:06:27:d8:a8:
32:11:c1:0d:a9:4c:75:7c:12:9d:d0:56:55:b8:64:
71:fa:2c:61:fb:35:5f:3d:5b:08:07:e4:cc:ff:7e:
62:f6:43:f8:e5:0a:bf:2f:cb:4a:78:1a:eb:81:55:
cb:e0:6d:90:5c:ad:b4:ad:f6:4c:e1:7d:58:34:af:
05:a4:5a:8b:2e:a8:b7:06:ed:fd:f5:01:3e:7a:b8:
7b:cd:e4:5c:7a:ca:9b:ca:c3:a1:24:8a:96:0a:6b:
90:3f:26:37:73:e6:6f:b9:2b:c4:42:22:8e:8d:0d:
b3:3c:2f:77:e9:79:42:4d:58:37:31:07:a2:e1:af:
d2:56:8e:66:40:10:72:2f:3a:64:17:04:f7:95:62:
f8:5f:f6:0b:9d:8c:fe:c9:39:18:f3:38:2f:ef:d7:
1a:d2:be:44:f8:ee:a7:d9:43:e4:9d:2a:55:0e:ba:
86:86:2a:45:25:fa:56:58:e6:dd:79:73:90:e2:9a:
d1:c0:5b:23:2a:4d:51:94:02:e5:84:2f:0c:92:4c:
c4:db:ab:eb:06:5b:78:28:59:dd:71:ea:8a:1c:f8:
7c:56:2e:e3:2e:db:1c:98:52:c0:56:e7:ed:1b:fd:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C5:0B:82:86:E3:B7:FF:87:C3:47:52:B9:27:F9:6A:46:88:16:CD
X509v3 Authority Key Identifier:
keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:4d:3b:fc:a8:64:1d:c5:b0:3c:63:73:7b:bd:f4:cf:b8:83:
07:08:7e:a5:fa:a5:44:8c:1c:e0:38:c1:3f:8a:b5:c7:74:58:
5f:5d:df:d2:35:69:52:99:c9:55:9b:5f:cf:e9:f0:fd:60:8c:
e4:0b:00:f2:34:a3:90:83:74:1f:01:24:38:1a:c5:d3:30:31:
6c:09:44:f4:c0:37:39:4d:34:52:91:e2:49:8c:d9:e8:48:3f:
4f:0c:ad:e4:8c:89:5c:2f:db:70:85:ee:5a:1d:65:86:27:4f:
c4:48:d6:4e:ce:c7:81:e5:51:33:63:ee:40:d1:91:59:a8:5d:
14:3f:e1:c8:3b:c7:52:80:e2:f3:7f:44:9a:3d:19:1b:45:02:
b0:cc:1f:4a:b0:cf:b5:a1:7c:65:11:7a:5d:5b:f0:2a:47:49:
60:70:4f:29:5d:b1:ae:be:f1:b3:f8:b5:38:e5:58:2a:0d:13:
5e:dc:56:09:b9:cc:98:e9:4b:1b:52:a0:77:66:88:9f:a8:c1:
1f:64:4a:26:9c:4c:63:57:90:3f:e9:bd:1d:96:27:77:c8:0b:
6b:cd:ff:14:bc:15:0a:3f:84:ae:2a:80:8e:80:0c:54:e0:00:
13:97:e7:82:f3:8d:a0:d2:0a:7d:0e:db:75:a9:df:92:42:17:
6c:18:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:30 2026 by rpki-client