
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
File: CKtUearwyEilFC1v5NyZFitFwzc.mft (raw, json)
Hash identifier: AH3fMCUY3ezoE0wswSQkkzGI6JCdc8UKMz618NO4Fds=
Subject key identifier: F8:1A:0A:8F:4B:20:77:D7:C6:01:FA:6A:C3:51:D3:CD:0F:56:5D:07
Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
Certificate issuer: /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
Manifest number: 0129
Signing time: Mon 02 Mar 2026 00:45:53 +0000
Manifest this update: Mon 02 Mar 2026 00:45:51 +0000
Manifest next update: Mon 09 Mar 2026 00:45:51 +0000
Files and hashes: 1: CKtUearwyEilFC1v5NyZFitFwzc.crl (hash: 8RUB8LYGFYf7RzXFUfoNNxwsgDz8Kpd/DF0LtFz3lZA=)
2: 710957A8559411EFA07E1C5AC4F9AE02.roa (hash: JxJ+obmiwGl4JMUMgK/WuBnQLS29iCXEyXAVzTMCR8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C, serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Validity
Not Before: Mar 2 00:45:51 2026 GMT
Not After : Mar 9 00:45:51 2026 GMT
Subject: CN=69a4ddc0-4508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:5b:14:67:ea:92:d2:c9:98:48:4b:d0:36:
a8:3d:c4:0a:ed:66:3c:7d:00:a1:dd:05:92:14:38:
51:67:25:f2:03:26:06:6c:79:6b:6a:ba:23:c3:2b:
f4:25:38:b2:b2:31:40:2f:aa:75:d8:ad:d3:3e:6e:
f9:2d:12:bf:50:14:7c:d9:20:8f:20:5f:9b:d0:c2:
af:89:a8:5d:32:9c:f8:4c:e0:c2:75:75:6d:ab:eb:
73:a6:ce:ef:22:ec:0b:e1:9a:30:30:82:53:04:eb:
c5:1e:1c:d9:cc:e9:b7:49:86:14:22:8e:5f:3b:36:
a2:85:20:7d:f8:c3:e9:f4:d2:1c:74:39:3c:bc:b1:
03:68:9b:3f:8b:59:9c:81:b3:5c:92:be:12:bc:55:
a7:c6:17:75:9b:f3:c7:37:4a:db:08:d5:db:6c:e3:
bb:6d:57:e6:32:e6:66:97:75:b1:73:70:c5:98:fb:
58:f7:e9:22:57:89:62:17:99:3c:93:87:af:09:12:
28:60:e4:ff:9f:68:0e:a9:26:52:84:34:1c:41:fc:
8c:93:60:e7:47:ec:26:f3:25:8c:7b:d7:a2:71:83:
34:80:88:71:c9:da:6e:0a:a3:9d:e5:6c:fb:20:37:
0e:7d:b1:56:ad:b8:1b:26:08:0b:0f:80:07:be:b4:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:0A:8F:4B:20:77:D7:C6:01:FA:6A:C3:51:D3:CD:0F:56:5D:07
X509v3 Authority Key Identifier:
keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:d4:52:af:c1:f2:6e:ce:e4:a9:fc:e7:1b:b2:50:91:a4:be:
59:d4:ec:25:9e:70:30:73:1a:db:8f:74:f6:08:11:45:a1:ad:
c2:4b:64:44:a8:2d:79:08:77:2d:80:3f:a8:19:63:d6:7f:ec:
91:c8:b2:57:b2:52:de:22:ce:83:57:75:af:76:f9:5b:58:54:
ff:29:8c:8b:ab:be:8a:d7:2c:fe:14:6c:f9:2b:2d:d2:db:8b:
c3:7b:21:e5:01:a6:fb:ba:5b:bc:b0:24:eb:a9:f5:95:af:da:
b6:68:56:90:09:e1:d0:4a:39:11:1c:f5:1d:85:1c:7f:69:2a:
81:4f:c7:08:79:48:8b:ea:ed:0b:06:73:94:88:6d:5a:b1:03:
1a:07:82:fa:27:19:f7:78:2b:ba:7b:2f:3b:53:55:83:40:91:
b9:4c:d3:0b:e9:15:b7:63:e3:98:d1:f9:05:84:72:ac:a2:df:
f9:bd:60:5a:e8:9c:5c:c2:3c:8b:44:a1:5d:9d:a2:85:4b:d8:
6f:a4:0d:4a:dd:37:17:59:ae:a7:ac:76:05:db:4d:50:d1:79:
34:62:b9:81:98:87:f8:b1:a4:59:44:c2:14:3b:d1:0c:ab:5b:
56:b0:39:df:34:90:88:da:c2:3e:0b:2d:85:6c:0e:a5:be:07:
01:87:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:39 2026 by rpki-client