
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json)
Hash identifier: ntERrUOZnpjguqmfAtorRcXoCkn8rii6jCjxLYbMY2w=
Subject key identifier: F6:09:F0:3C:72:68:57:DF:48:79:1E:BE:09:EB:4A:DE:61:52:0D:D2
Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70
Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70
Certificate serial: 04CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
Manifest number: 04C3
Signing time: Sun 01 Mar 2026 23:28:05 +0000
Manifest this update: Sun 01 Mar 2026 23:28:04 +0000
Manifest next update: Sun 08 Mar 2026 23:28:04 +0000
Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: fiCdqHwMUoDqwWVLVBdUXYU+5QcJKH0XPtZnIgyyYK0=)
2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: 9CfqYYl4auSjx9zjrb6Pvsma7el5RM6zCTL8hx3B2ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl
rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70
Validity
Not Before: Mar 1 23:28:04 2026 GMT
Not After : Mar 8 23:28:04 2026 GMT
Subject: CN=69a4cb85-0c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:e9:00:96:a2:bb:f9:c6:40:71:01:f8:05:
6f:77:53:6f:08:ca:61:a4:f0:41:22:18:d7:93:11:
0f:52:13:75:ae:1b:9e:5b:bf:03:44:ea:7e:9f:8e:
13:74:93:9f:4b:b2:ab:80:9b:07:f8:5d:bd:3b:82:
d4:53:cb:d1:a5:55:bb:15:30:aa:6a:7d:dc:7a:0c:
fd:48:f1:b3:2a:d3:97:c7:e7:13:3a:cc:fb:28:bc:
60:4d:0f:8a:54:60:19:bc:f3:3a:00:7b:00:df:83:
b1:41:99:74:6d:24:35:36:d4:de:5a:6f:c7:81:a3:
1d:20:fd:68:73:ad:e3:54:e1:b5:6e:64:97:42:bf:
cf:7f:71:c9:14:e1:f0:97:a3:b4:bd:99:96:4b:b0:
ee:5d:9b:b4:a5:1f:f0:7c:8d:f0:49:41:74:cc:ba:
3f:bc:4d:cf:57:7e:3e:0f:83:1d:2b:53:f4:1c:e0:
ff:2c:08:2a:e5:ed:d3:60:30:5a:90:7d:2a:f7:da:
68:da:40:67:de:8e:b2:e3:e5:59:53:0e:8d:c1:3d:
ec:57:12:d3:95:22:dc:f3:96:8e:f4:a7:2f:ca:56:
49:7b:94:7d:8f:54:96:fd:80:b9:ad:15:71:e8:e9:
15:47:69:9c:c4:7e:37:b2:76:d4:99:b0:b7:e1:31:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:09:F0:3C:72:68:57:DF:48:79:1E:BE:09:EB:4A:DE:61:52:0D:D2
X509v3 Authority Key Identifier:
keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:25:f6:0b:8b:b8:36:f6:7a:2d:d9:f9:4f:55:4a:18:16:cb:
9e:d6:bc:0f:26:3d:f2:cc:3f:8c:80:38:56:cf:07:2e:2c:3f:
89:c7:dd:16:77:33:ef:83:0d:b7:01:7d:dc:fa:22:e4:f7:87:
4f:d6:03:8a:ac:ac:dd:60:bc:29:b0:13:cc:a1:10:80:ff:2d:
10:46:33:f3:c0:8d:b2:89:7a:50:0c:88:d5:75:1c:7b:86:3b:
f8:5c:0c:a3:12:78:b8:26:15:e3:ea:45:1e:5a:bd:6b:06:68:
29:71:38:d5:90:85:5d:1b:07:72:2b:4d:b4:9f:35:e6:0d:8f:
6c:ef:55:74:16:4a:27:89:45:5d:4d:4c:97:30:c8:f6:aa:9d:
4b:7c:56:52:17:18:b0:27:e5:57:e3:ce:b4:8c:c0:d4:bd:12:
f3:8f:3a:a5:76:5b:51:ad:7c:91:d7:29:fa:48:98:77:35:c9:
e2:30:49:ed:37:81:53:ba:ef:69:03:f6:df:62:d3:83:aa:0e:
9b:30:7d:22:97:2b:f5:b1:33:3e:0e:1d:2e:12:c5:7f:fe:d1:
2b:4e:18:6b:14:59:40:d4:4f:4f:c8:bc:4e:e0:38:fa:85:49:
65:b5:5b:5d:47:b5:69:2f:18:16:45:5f:fe:5f:c6:c5:52:e5:
ca:ce:0b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:51 2026 by rpki-client