
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
File: CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json)
Hash identifier: I0d6/kQ0vNveZz/7Mo3Z6nv4UVsb8yaIrF7ZgFKIVbQ=
Subject key identifier: 82:91:27:AE:2A:9A:6C:C7:4D:5E:69:27:E0:A4:0D:D3:A1:79:61:A6
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial: 0526
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
Manifest number: 050C
Signing time: Sun 01 Mar 2026 00:17:16 +0000
Manifest this update: Sun 01 Mar 2026 00:17:16 +0000
Manifest next update: Sun 08 Mar 2026 00:17:16 +0000
Files and hashes: 1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: 0d7sB5DE/kEvG1vg3gqGILxweq+hRQ1rxEj9o27YYl8=)
2: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: TGHGZPpqAj2jmtX8lTQMi8kBaI8ojiWWIFj1IWycEgs=)
3: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: o+VIx3yy8oMDW/C3RImP2D9X9JrFefZYlsNOIecQzAE=)
4: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: Y2Z1jehKepnssjRVP8joGvXLmK9adM98wErhHrOtaeg=)
5: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: i1mD+r6XwMu6On3/bUlN+PaLdP6khHenZ0Z0HUab9AI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1318 (0x526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Validity
Not Before: Mar 1 00:17:16 2026 GMT
Not After : Mar 8 00:17:16 2026 GMT
Subject: CN=69a3858c-7f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:67:48:46:06:7d:5d:2c:c1:9d:25:82:9d:
49:bc:a4:95:56:b0:db:c4:ca:32:e0:f3:03:c5:10:
db:e9:d4:dc:f3:6a:5d:2e:d9:1a:c7:6d:7a:31:a5:
09:14:c2:4a:b9:7b:b5:a8:ee:5f:59:26:7e:08:a4:
b4:63:f0:8d:db:fd:0a:10:3a:b3:ff:40:20:a9:29:
9d:a1:3e:b9:a8:f9:80:dd:38:84:01:65:7d:27:dc:
fd:3a:7f:30:66:35:6b:f5:60:c6:99:06:b7:a5:1a:
7a:9d:27:6d:45:2b:91:b0:f9:f9:c9:83:28:d8:7d:
f7:f3:20:fe:a5:25:87:32:a5:12:e6:d9:1b:f2:3e:
fd:e7:64:2b:73:4f:b2:d5:c6:29:a5:dc:90:57:f2:
72:f5:29:4f:8a:f2:38:75:00:06:10:d6:36:9a:67:
f1:1c:69:e0:4c:b3:89:b3:26:9e:fc:f5:93:60:8c:
8f:9f:3d:cd:ca:e6:24:08:ba:ef:b6:96:25:3d:7e:
89:cd:4c:36:89:ae:09:ec:bf:3b:2b:67:14:80:9b:
fb:de:d1:26:31:eb:e9:44:4a:6e:e2:61:53:e8:31:
84:82:51:57:e0:65:8d:e0:10:d4:55:73:4d:e0:a5:
34:00:03:2d:07:cc:a1:68:51:13:fb:e4:c6:c2:15:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:91:27:AE:2A:9A:6C:C7:4D:5E:69:27:E0:A4:0D:D3:A1:79:61:A6
X509v3 Authority Key Identifier:
keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:d5:8e:52:4d:e1:2e:33:1a:e9:de:5f:53:f1:a8:15:3e:34:
39:97:df:26:15:1c:3b:bf:46:ed:91:68:d2:97:75:8a:94:18:
88:76:80:01:e1:bb:a7:01:dc:7d:d9:62:d9:49:34:95:94:ef:
ef:d4:da:61:65:f5:88:3a:e7:3f:36:4e:cf:aa:ee:8a:bb:72:
c6:60:82:4a:68:b6:3a:13:cf:af:40:35:76:72:75:c7:9b:97:
23:ad:d5:8f:ef:44:ba:86:45:83:4a:b1:2a:41:d8:9d:5c:87:
d7:ba:e5:c1:0b:91:aa:cc:1c:14:76:43:c3:08:94:16:30:8f:
a9:aa:b6:20:fe:47:a1:30:01:dd:9f:2a:e7:4d:d3:47:f2:e3:
4b:24:7c:a7:c8:27:b0:ea:65:b2:13:96:aa:92:31:f6:8f:85:
65:a4:bc:7e:2b:85:3d:49:03:67:2d:88:e3:e2:ad:4b:d3:73:
99:49:38:f6:f4:35:74:46:5e:e6:ba:ce:6a:db:7d:56:38:34:
86:72:9c:57:d1:a2:6a:1e:47:37:15:19:7d:cb:f0:fc:9d:5b:
1f:92:e7:b8:eb:5e:73:28:25:d2:4d:10:91:e1:d4:87:b7:47:
a3:b0:0e:c4:df:21:2b:12:f4:20:ff:e1:fa:3c:ac:75:56:8e:
7e:87:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:26 2026 by rpki-client