
$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json)
Hash identifier: phDSgI9/dCC3jLNgVAqz6iu5G5MblJdcapF7kEZAK4M=
Subject key identifier: C1:20:C7:07:CC:1D:EC:E5:59:6E:B8:5D:21:08:E8:54:F7:2E:92:C0
Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Certificate serial: 0878
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
Manifest number: 0866
Signing time: Sat 28 Feb 2026 21:04:51 +0000
Manifest this update: Sat 28 Feb 2026 21:04:50 +0000
Manifest next update: Sat 07 Mar 2026 21:04:50 +0000
Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: hKH7FVzVocSDrL/sTJmSHt/6uNkXNC1504VhoAX+Zag=)
2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: mDiyXguFaGa3vR8D07iQ+K1O3uq6pL2JeIG9VyLGezQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Validity
Not Before: Feb 28 21:04:50 2026 GMT
Not After : Mar 7 21:04:50 2026 GMT
Subject: CN=69a35873-d92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:69:3d:87:76:b7:2e:d8:d5:5b:40:13:61:
2b:74:fd:65:9b:c9:72:60:9c:d4:e8:75:bf:6a:25:
3c:cb:ed:97:19:16:ce:2f:af:61:06:09:c4:d6:c7:
2c:02:bf:14:6c:8d:13:02:53:88:56:f6:8e:8a:69:
09:10:79:d4:55:a9:6e:e1:f1:6e:cc:d0:f1:8a:d3:
eb:9e:cf:04:e1:0d:5e:bb:56:2d:c1:2b:27:a8:69:
17:10:4b:8d:a3:1f:2f:52:04:87:5e:da:26:1b:87:
29:d7:86:23:e0:c7:df:de:b6:3b:b4:85:8c:14:5c:
36:eb:10:2d:01:61:77:4c:db:5b:05:ce:52:d8:6c:
67:2c:32:da:28:17:cd:88:73:df:d8:f5:53:83:36:
aa:e4:7c:0d:88:00:07:3c:8f:5c:76:e5:0d:f3:34:
b8:27:52:cc:0f:f8:00:aa:73:13:a5:85:34:1a:0f:
7b:24:11:9c:0b:12:16:8e:51:bb:7c:2a:39:02:61:
01:71:67:e8:e4:2c:d2:46:d7:d9:21:46:20:c4:07:
77:d9:9f:12:ed:67:51:2a:4d:8b:fc:bd:9b:ba:2e:
97:9d:7d:2b:e8:41:ac:b4:ac:cd:08:69:9f:27:3d:
58:9e:5e:cf:b7:0f:81:ca:ff:81:58:5c:15:61:c3:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:C7:07:CC:1D:EC:E5:59:6E:B8:5D:21:08:E8:54:F7:2E:92:C0
X509v3 Authority Key Identifier:
keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:b8:e4:d5:b1:a5:71:0c:04:53:30:d3:e4:d7:99:3c:81:ab:
bb:1b:c7:3c:ca:8f:9a:4a:38:86:28:e6:a0:29:7d:d0:ce:8d:
29:8b:30:2d:4f:25:30:31:19:f0:a8:b8:8a:c6:65:05:d8:c1:
d4:19:60:91:c8:c7:dc:09:0d:d1:32:cd:bb:d6:88:43:f2:c4:
44:b3:64:47:ed:99:b4:ef:52:6c:6f:8b:ad:db:55:02:58:fe:
99:47:1f:49:54:55:c5:64:c9:6e:70:7f:32:69:62:cb:cd:c4:
ef:60:47:5f:05:96:06:df:35:2a:22:6a:83:29:c0:26:77:77:
62:d3:79:84:35:53:24:4a:13:4b:45:46:06:0d:e2:9e:ef:31:
ad:cf:59:70:48:e6:27:43:42:45:cb:cb:cd:48:e2:19:e9:a9:
d7:22:ac:5e:d4:29:59:59:48:d8:c2:7a:b0:1e:e6:f1:24:99:
25:fc:66:4a:12:c3:da:59:9d:52:d9:7b:a2:06:f5:8a:69:04:
d1:09:a5:3e:77:1c:0c:f9:21:63:b6:67:29:45:8f:4a:7f:63:
19:77:ec:22:f0:b9:f3:17:88:da:b7:ce:ee:9d:53:d3:8b:25:
69:b8:25:8c:42:49:61:ed:44:82:0d:b4:ce:d1:c2:56:cb:a9:
16:24:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:16 2026 by rpki-client