
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft
File: 433E2CR2A-hIwAZsRFuc2NpzUNY.mft (raw, json)
Hash identifier: YgZFDueIxkMv2oJYeP25z9NxbrdwrXFpke9etsQLt1Q=
Subject key identifier: 40:43:77:A2:DF:9B:78:8B:6E:0F:D3:03:A3:0F:DF:A3:63:EF:E0:92
Authority key identifier: E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6
Certificate issuer: /CN=A916C8F2/serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft
Manifest number: 80
Signing time: Sun 01 Mar 2026 09:00:38 +0000
Manifest this update: Sun 01 Mar 2026 09:00:37 +0000
Manifest next update: Sun 08 Mar 2026 09:00:37 +0000
Files and hashes: 1: 433E2CR2A-hIwAZsRFuc2NpzUNY.crl (hash: WY4mWd3c3AYpgmPD1m860oBVqoQFkR1xVj7z3FDqTnQ=)
2: 730C503A56C611F096620043C4F9AE02.roa (hash: qw1/w7y9/Mj/XuC7T4zOXFPPf11Ba4kPhPFLRXjZiuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl
rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C8F2, serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6
Validity
Not Before: Mar 1 09:00:37 2026 GMT
Not After : Mar 8 09:00:37 2026 GMT
Subject: CN=69a40036-1729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a0:ef:20:d3:d2:c9:6d:51:85:09:9b:ea:95:
4d:af:e4:d4:9c:04:45:e8:11:d0:0d:4f:59:48:b7:
2b:24:8c:bd:fc:02:b4:7a:83:69:9e:64:61:af:90:
7a:3b:32:38:bc:0c:c9:1f:db:95:1c:10:ac:69:80:
74:11:93:31:45:1f:60:86:3f:7e:9c:95:0b:e9:2e:
ea:03:22:0e:3e:d2:42:1a:82:86:45:92:03:08:e3:
54:5d:e1:52:d6:7d:a3:4c:cb:48:26:ea:3d:45:4a:
dd:5a:40:55:cf:45:9e:b8:26:13:1c:3a:79:3c:a1:
4c:ac:e2:c8:94:33:b9:c2:f0:81:be:78:00:10:e2:
0f:0a:c4:66:1b:49:ae:5d:48:f1:9e:01:af:5b:59:
57:88:07:51:76:6e:d1:13:54:3d:3d:f5:ca:67:81:
b8:b7:fb:38:bc:db:9e:79:ca:7d:2d:4d:9c:0d:ed:
41:65:c4:4a:a6:11:3d:bd:d5:68:6d:47:88:0d:98:
40:e1:24:98:f3:c2:6d:25:90:ad:6c:0b:0c:81:26:
d1:8b:b8:93:ec:95:36:fb:3f:e4:22:79:b2:a3:39:
6c:4e:f8:52:63:db:f0:d0:e6:b6:d5:ea:2c:1e:a9:
64:51:5a:5a:d4:b8:7f:1f:fd:7f:ee:89:7f:05:63:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:43:77:A2:DF:9B:78:8B:6E:0F:D3:03:A3:0F:DF:A3:63:EF:E0:92
X509v3 Authority Key Identifier:
keyid:E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:65:74:d4:88:08:7a:03:1d:e5:6a:89:1f:56:e5:e0:1e:f5:
cd:76:ae:f4:56:39:24:8c:42:7f:20:ee:3b:7a:c7:13:fb:31:
1c:6d:bb:64:44:85:b9:1c:f3:7b:45:f3:79:e0:60:f7:19:db:
7d:0d:91:23:22:08:d7:b6:8a:c2:b4:e8:e9:ab:c8:bb:08:5b:
17:50:51:6f:fb:20:2d:83:4e:b1:8f:ab:6a:06:8e:d0:57:6e:
62:95:35:59:ba:05:b0:8b:e7:f5:1f:39:74:e0:8d:63:27:f3:
37:51:f1:9a:6d:bb:c4:42:9c:db:4a:a7:d0:79:2e:12:53:70:
17:ff:72:1c:63:e8:43:4b:2a:93:db:13:85:85:10:53:e1:a4:
a9:6f:c9:d2:e2:2b:94:86:48:3d:99:8e:b7:41:1a:d5:87:4f:
6a:ea:62:c8:bb:eb:5c:f2:21:e6:7a:d6:a4:ba:9b:57:ea:d5:
86:9a:a8:21:b1:12:23:70:aa:24:7b:ac:20:41:8b:1d:b0:11:
8a:34:61:f3:b9:1d:50:54:d3:fc:19:7d:18:6f:eb:78:61:95:
cf:8d:ce:f9:03:1d:f0:ba:db:fe:ac:00:aa:7a:f6:d6:51:d5:
84:de:49:24:cb:47:9e:b3:68:90:12:3b:45:c3:66:a0:95:3e:
b5:b9:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:16 2026 by rpki-client