
$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json)
Hash identifier: jvLWU5FliyR9yCk2jPL3IZQFV7vhFMgSvTEn8SjQrJY=
Subject key identifier: 18:5D:02:3D:3C:25:E4:69:22:8D:D4:B3:34:33:5B:E8:8B:3F:B7:FB
Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Certificate serial: 3544
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
Manifest number: 3526
Signing time: Sat 28 Feb 2026 14:46:18 +0000
Manifest this update: Sat 28 Feb 2026 14:46:17 +0000
Manifest next update: Sat 07 Mar 2026 14:46:17 +0000
Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: LvNw9G8G5/Z3Okt8ejtexj38Sa5epr9HJNK0ww0XCLo=)
2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: Z9gsewhzEhlUHszkRSNsuOY1JzZl8Vjgyk5xiyq8V24=)
3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: iWI19VTOrnz2nGN4modDRd0Vbot3Y2khTy6hDIMLekE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13636 (0x3544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Validity
Not Before: Feb 28 14:46:17 2026 GMT
Not After : Mar 7 14:46:17 2026 GMT
Subject: CN=69a2ffb9-6015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b6:b1:56:98:69:08:f8:00:d1:ed:e5:7a:7e:
be:8b:c4:25:bd:df:31:38:b0:20:9a:f1:70:cc:25:
28:6a:c2:1e:3c:8a:12:9c:60:5a:d5:43:1b:6f:8f:
66:a6:d3:7d:1d:25:50:2e:31:a9:3d:6c:ce:d1:fc:
f7:28:9a:0b:60:03:c0:23:28:c2:1f:82:51:e4:06:
95:08:a1:af:6b:c4:aa:dd:02:d2:d9:54:11:da:60:
98:a7:05:82:f2:74:c8:aa:31:5b:a1:cf:9c:25:4f:
a7:8a:e1:00:dc:78:ea:02:02:1e:bd:a1:b7:8a:63:
a4:48:9d:a2:85:68:a3:06:fe:a9:fc:14:b9:b5:54:
86:fe:8e:28:af:04:c2:9e:da:82:e9:e4:6c:f6:23:
17:70:71:10:0b:bf:97:fe:c2:f3:df:fb:8a:b9:ee:
39:46:fc:a1:16:fa:0e:d1:1d:47:61:af:f7:35:b4:
9c:1b:6a:a3:6f:80:54:54:f2:2f:36:e0:a3:3a:0e:
ec:05:f8:73:a8:18:54:98:f2:12:02:ac:3a:1b:d3:
17:d4:6d:a7:2f:4f:45:21:46:e2:13:9f:97:00:da:
4d:47:9c:6c:a5:c3:7d:e3:a9:7c:cd:36:9f:c8:fc:
ea:95:ae:0c:cf:96:79:36:0c:b6:93:42:2f:11:6e:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5D:02:3D:3C:25:E4:69:22:8D:D4:B3:34:33:5B:E8:8B:3F:B7:FB
X509v3 Authority Key Identifier:
keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:46:26:ec:48:3e:ff:d0:55:27:46:df:3e:e5:75:00:b4:91:
85:d0:d0:a6:e8:05:91:37:fa:73:12:bf:0a:61:59:fb:be:61:
03:b8:cb:82:d4:b4:7e:f0:59:cc:73:23:72:98:dc:dc:1b:44:
71:c6:c6:99:ce:68:1f:03:fc:ae:b8:0e:ba:46:29:84:0a:66:
c1:75:21:a0:ed:30:52:dd:71:5d:7d:c3:15:11:77:c3:97:45:
2c:2a:93:44:46:2c:a5:db:bb:14:24:ef:ba:a1:5e:8d:0c:27:
89:e6:60:7d:09:03:dc:2c:01:56:6c:96:a4:b0:82:2e:c7:f3:
d0:e9:e8:c5:16:c2:b5:33:3c:28:24:14:56:ce:ce:85:ae:d9:
8d:d3:43:0a:26:fc:7a:86:01:f4:ab:b2:a6:fa:d6:c0:f8:02:
73:02:6b:7d:84:5d:6f:9b:4c:45:7a:40:f3:01:d4:82:2d:1f:
0d:aa:71:94:20:92:54:0b:5b:67:e1:53:4c:6f:eb:a2:31:fe:
5f:38:96:9b:e5:b3:07:e3:c3:f4:48:54:5b:fc:a2:77:86:15:
27:c2:08:71:2a:28:f0:45:37:55:1a:66:d8:67:54:51:da:22:
73:24:22:a3:a3:c9:72:dc:ac:2c:05:a8:0a:fc:38:92:0c:5c:
b6:94:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:51 2026 by rpki-client