
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json)
Hash identifier: UbdgUvAKakoSeABdzNN5qN7kjLNbA4schtrVz1tO2Hg=
Subject key identifier: 16:E4:C4:1C:8A:51:67:6B:B1:2A:67:DA:BE:08:4F:AC:BD:92:3B:C5
Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
Manifest number: 01E0
Signing time: Sun 01 Mar 2026 23:50:09 +0000
Manifest this update: Sun 01 Mar 2026 23:50:08 +0000
Manifest next update: Sun 08 Mar 2026 23:50:08 +0000
Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: FNyDxpT6E2qDqgA/1PXRfsgNGGoLX8xcpWYL6+Q/uzs=)
2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: +d//0YGkCcKL1FsuPM9/LDwxfVKY4NL0IuPYs6NjtuE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Validity
Not Before: Mar 1 23:50:08 2026 GMT
Not After : Mar 8 23:50:08 2026 GMT
Subject: CN=69a4d0b1-a33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:9a:02:64:bd:78:80:78:b5:8a:25:4e:74:
40:06:8e:5f:f0:62:bf:9f:1b:07:41:0d:44:5b:98:
f8:1a:bb:9e:12:c9:cb:6f:b8:91:1f:2c:b4:4f:f5:
15:0a:e0:a9:7e:a4:54:da:9f:70:7f:fe:e9:77:05:
d9:5c:9a:96:ab:fe:c8:52:08:41:6f:e3:dd:14:2f:
b1:ec:85:b3:86:1a:6b:48:64:46:8b:93:95:b5:26:
f1:d3:da:28:50:99:00:65:ed:9c:84:c8:2d:15:26:
e3:11:90:9e:e2:28:14:f4:0c:e6:ff:77:1c:ca:de:
a9:24:ab:55:20:ff:59:50:50:fb:5a:07:8e:86:d9:
af:e7:43:e3:63:fa:5b:a8:ee:b3:99:33:16:a4:c9:
f9:a3:16:70:e0:09:e4:58:79:84:bc:37:95:44:fd:
61:6d:e6:c9:24:2a:72:5c:a1:92:1d:55:bc:80:f4:
d7:3c:e2:65:76:08:24:23:8c:d3:b8:31:99:44:9f:
44:98:83:9e:b3:ff:3d:81:21:3e:7a:93:6d:64:5a:
37:f3:42:f4:d4:46:29:4d:8f:3a:53:e7:41:3b:07:
f4:10:2c:3c:fa:da:2e:70:3c:74:29:dc:65:ac:ce:
7f:d4:2d:f6:0f:d7:7a:ff:2c:fb:1e:56:53:24:62:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E4:C4:1C:8A:51:67:6B:B1:2A:67:DA:BE:08:4F:AC:BD:92:3B:C5
X509v3 Authority Key Identifier:
keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:30:25:7d:6b:50:b5:96:c0:af:ad:86:4f:16:5f:33:77:cb:
41:9d:9a:17:11:6c:34:25:68:11:de:af:8a:8a:7f:82:8b:59:
3b:9b:c1:15:1c:42:80:5e:6b:d6:f0:6a:31:1f:4e:f3:88:98:
c7:49:de:69:37:3d:1b:5c:0b:e1:b5:7d:bf:e4:5e:ca:b6:a2:
84:8b:b5:8f:95:47:df:f9:c7:a3:3d:cf:f1:0b:d5:87:1a:4d:
3f:67:20:87:b4:ab:a2:21:3b:2c:a5:86:09:8b:0c:c3:f7:63:
54:81:e1:84:7e:76:1e:ba:f4:b6:f9:8b:99:e4:f7:c7:92:f5:
a6:76:80:e6:72:88:6e:8b:fb:69:f7:36:7c:11:32:80:f8:ba:
6c:f6:3d:f9:92:a9:c2:47:fc:a9:62:44:a2:51:69:ac:c5:ab:
2b:26:e7:87:7d:2a:92:ce:a2:7c:54:3d:cf:2b:f1:83:61:00:
85:77:38:c9:02:8c:47:33:71:1c:48:9a:54:ba:5f:fe:25:f5:
65:b1:75:64:84:b9:f0:fc:fc:64:99:e3:ed:93:ea:ba:d6:71:
b0:fd:58:e3:fe:33:0f:5a:cc:5f:df:fe:11:0f:bb:86:32:b2:
d9:43:dc:f2:40:e0:90:9f:dc:40:ef:76:28:a8:93:a1:55:0e:
74:28:d4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:49 2026 by rpki-client