
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
File: R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json)
Hash identifier: zNxQyYiRrXrdxTKqj+Q6tpeRWQZPs6t5xr8YgJ6xKSM=
Subject key identifier: DB:1F:32:21:EE:D3:4A:D3:83:3F:43:76:FA:BE:38:73:95:93:A2:06
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
Manifest number: 0230
Signing time: Mon 02 Mar 2026 00:21:17 +0000
Manifest this update: Mon 02 Mar 2026 00:21:15 +0000
Manifest next update: Mon 09 Mar 2026 00:21:15 +0000
Files and hashes: 1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: 30stOoinxukZCDgXxZLfoNf9R4WVPOj3BBWW8TgyeEA=)
2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: P3ej5XFQlJcMQQxLttfvW/K/Ryt5xBSLQ4egcs4pQwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Validity
Not Before: Mar 2 00:21:15 2026 GMT
Not After : Mar 9 00:21:15 2026 GMT
Subject: CN=69a4d7fd-5268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:d0:43:41:c2:35:ac:d1:be:17:22:44:a2:
ae:ab:2f:f2:6a:7c:01:2a:c8:ad:4d:69:b1:89:a5:
5d:db:22:84:f4:3d:45:04:a1:dd:9a:f7:9c:c2:a2:
2b:fe:f0:c4:19:29:76:25:56:65:d0:a8:73:c8:5a:
ad:2a:2a:f5:68:8e:ba:ce:35:30:d0:28:e6:37:c3:
f8:3f:dd:e2:b8:4e:76:61:e6:62:07:3d:62:d7:7a:
6b:04:dd:f7:f6:0c:21:6b:64:f2:7c:87:95:aa:bd:
89:d6:20:ae:fb:66:dc:19:0b:1f:79:72:61:1d:d4:
41:15:c1:fc:04:59:7f:33:2d:9f:f8:58:92:1f:90:
6b:b3:6f:18:86:95:95:2e:d4:07:fe:89:44:fa:00:
3b:43:9c:74:c6:47:2d:e1:d7:73:85:ca:c6:98:8d:
13:b9:96:f0:c9:f9:b1:66:77:49:78:b7:b5:10:de:
b6:cb:14:e5:91:3f:a6:a4:2e:ad:3c:2f:52:5d:15:
b5:fe:a0:10:d3:c7:83:bc:ee:52:2e:28:e5:49:fa:
8d:c3:37:21:c9:ae:7f:d0:4d:d9:19:2e:4c:36:b2:
e9:95:01:c8:a2:c7:d6:bb:44:e4:51:8c:ed:cf:da:
dd:04:22:af:f5:37:01:d8:06:0c:08:c3:b0:90:5b:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1F:32:21:EE:D3:4A:D3:83:3F:43:76:FA:BE:38:73:95:93:A2:06
X509v3 Authority Key Identifier:
keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:28:fd:97:3f:02:dd:22:de:40:44:9b:99:1e:b6:e3:d0:ea:
b9:26:a8:69:c9:73:1e:eb:11:71:dc:1b:45:eb:19:c2:49:15:
9e:87:e7:d0:5a:93:1d:ed:fc:0e:d3:59:24:ec:20:a5:cb:b6:
19:78:55:43:d7:49:67:5e:0d:e6:de:67:02:bc:e0:a1:51:7f:
87:40:d8:a2:ad:84:d1:68:f2:98:04:f6:9d:87:9b:32:45:37:
81:5a:4f:34:88:23:87:1a:ef:75:d4:ee:00:24:00:bb:9c:ce:
3c:19:ab:1b:3c:2c:51:69:c4:d2:bb:a4:b3:90:80:10:0d:3d:
ee:24:5f:b0:e3:7e:89:cc:d8:2b:f2:90:74:fa:f2:c0:23:48:
30:0a:b2:36:4b:0d:07:d2:8c:aa:e7:2a:0b:f2:3a:4b:cd:9e:
14:a2:3c:07:59:1b:29:46:a6:2b:16:5e:25:1f:6c:53:e7:9b:
4c:a7:89:23:8a:f0:b6:06:1c:47:20:36:41:be:35:14:c9:51:
d2:b1:93:3c:50:67:c5:ec:7b:78:b8:a6:ab:51:59:d0:09:61:
b4:f2:b9:85:fb:38:0b:84:e0:75:19:68:8c:a8:38:c2:dd:83:
6c:e7:e8:59:0b:ad:22:21:87:d4:b5:73:98:95:bd:60:b5:80:
f9:da:1e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:44 2026 by rpki-client