
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json)
Hash identifier: XA8Yl2nXtWkj3jCF9NVjmdjSpibKqOObq6MH2ey0cC8=
Subject key identifier: 5D:8D:DF:75:AF:73:02:1E:03:CA:38:20:75:57:B6:B5:11:41:71:D2
Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D
Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D
Certificate serial: 0829
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
Manifest number: 081C
Signing time: Mon 02 Mar 2026 01:44:07 +0000
Manifest this update: Mon 02 Mar 2026 01:44:05 +0000
Manifest next update: Mon 09 Mar 2026 01:44:05 +0000
Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: ppm4OxnKGPaVvTKRuuqQdwzevM1j0XSZ6OGtiUv/hJQ=)
2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl
rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2089 (0x829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D
Validity
Not Before: Mar 2 01:44:05 2026 GMT
Not After : Mar 9 01:44:05 2026 GMT
Subject: CN=69a4eb66-f6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:d7:83:14:01:f2:dc:93:4a:a4:e1:24:9e:
8c:ff:44:f1:ea:fb:fe:6c:85:ef:68:6d:6e:b4:7c:
11:3f:07:6c:9c:0b:1a:76:9e:03:3c:87:d1:fb:d3:
f8:25:bc:41:0c:fd:11:a6:77:b0:a9:26:3c:ec:d5:
ec:f9:83:45:f6:81:b7:2e:70:e5:b4:7b:2a:ca:8a:
69:e3:03:0c:b6:f9:37:45:ce:2e:81:85:eb:52:9a:
b7:fa:36:a9:d7:c0:04:5f:c9:0b:6d:81:d5:81:75:
80:01:7d:26:67:ee:42:33:8c:df:3d:6f:0e:45:aa:
e2:6b:b2:ce:c0:6f:5b:44:b3:0d:b6:01:31:49:5b:
44:d3:91:ba:6a:03:cb:8a:8c:ba:f3:01:51:a2:db:
92:2c:db:8d:8d:23:18:2d:b8:7b:31:50:3f:c1:3a:
ec:4b:00:ff:44:63:da:b0:dc:7e:6d:a8:08:7f:34:
c4:16:26:bf:9c:6b:f9:4d:3d:e9:ff:be:94:1a:00:
e3:07:a3:8f:45:4d:2c:17:da:b3:f7:77:86:f1:cf:
98:4f:4c:d4:fe:12:c0:36:90:76:5a:29:d1:b6:6d:
73:9d:92:95:79:7a:d6:8d:ba:81:8a:34:61:e4:60:
ca:43:3d:b1:b1:fe:35:a5:64:58:59:e0:96:96:3a:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:DF:75:AF:73:02:1E:03:CA:38:20:75:57:B6:B5:11:41:71:D2
X509v3 Authority Key Identifier:
keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:c9:9d:71:82:87:70:f8:21:17:3c:e0:f6:f3:e0:77:37:f4:
66:4d:55:c4:00:2e:e2:b4:df:1c:7f:da:d2:f5:bc:99:3d:9f:
3d:d2:9f:de:31:a3:d5:b6:df:94:e1:47:4e:c2:12:24:d4:10:
10:8f:79:23:e3:3b:37:42:e4:dd:5d:2c:d4:56:07:2a:01:f9:
4a:3e:8e:0a:5e:37:67:d6:86:15:87:5d:c6:d0:66:97:7d:d5:
1e:aa:d3:b2:29:6c:55:10:d7:7b:f7:16:7e:fb:37:fb:47:84:
d6:8a:e8:ef:df:34:9a:07:a7:e6:a2:32:cf:ab:37:ec:bf:ec:
a6:39:cc:d0:9f:01:cf:f3:2c:c1:56:eb:4c:ba:1d:fd:fa:7f:
ef:f6:2e:19:17:4a:84:22:28:c5:13:35:fc:b0:9f:6d:ac:82:
fc:1a:04:a6:bc:78:da:cf:d3:08:ab:1d:71:98:d9:65:ad:dc:
c3:49:b5:49:b7:35:42:a7:de:3b:33:d5:98:cd:4f:85:43:0a:
c5:0e:59:4a:1a:02:77:88:61:8e:5b:bf:e5:8e:8b:5e:46:46:
66:d3:dc:63:8d:18:29:b6:49:23:03:df:63:5f:cc:43:c3:b4:
d5:d8:b1:a9:48:05:09:e6:d3:7a:c4:ed:0e:96:5d:43:14:eb:
d6:e4:80:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:45 2026 by rpki-client