
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
File: F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json)
Hash identifier: WHtdDY4d4oy+DQZ+cmnVjCIEvHceXTbtsFYhbDYsHl4=
Subject key identifier: 09:AA:3E:8D:4E:F7:03:0A:51:D7:99:19:AC:3A:E7:00:CE:BC:03:01
Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68
Certificate issuer: /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768
Certificate serial: 0590
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
Manifest number: 0673
Signing time: Mon 02 Mar 2026 00:40:29 +0000
Manifest this update: Mon 02 Mar 2026 00:40:28 +0000
Manifest next update: Mon 09 Mar 2026 00:40:28 +0000
Files and hashes: 1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: DCJH88hCUwW/bPe7x1h05VYzCKRlzICztlmeVjQS7Sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl
rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FD40, serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768
Validity
Not Before: Mar 2 00:40:28 2026 GMT
Not After : Mar 9 00:40:28 2026 GMT
Subject: CN=69a4dc7d-4f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:d2:77:36:86:e4:16:0a:8b:73:30:f8:f1:
51:20:59:e5:94:a0:03:e4:fb:35:f1:40:aa:3d:82:
9a:a1:c8:72:68:cc:57:27:68:05:ae:31:b9:3f:87:
9e:ce:6c:c5:fc:b8:91:67:6f:cb:ee:ed:5e:d1:b3:
e7:54:4f:17:0c:ce:b4:2a:f5:3a:f9:5a:16:87:00:
24:38:b9:a3:ff:98:58:75:68:12:f8:69:f7:51:c3:
a9:9f:23:5f:78:41:1f:89:a8:ae:1c:4f:30:24:ab:
8e:9e:7d:24:ca:33:84:9a:c1:28:6c:53:ba:86:cc:
3a:23:e4:14:b4:51:84:25:3d:64:ae:c9:56:42:19:
4e:83:4c:d1:a2:13:bc:e1:b7:79:5e:c5:94:4d:36:
98:63:99:14:aa:61:9f:60:d2:79:3f:ff:ea:d5:8c:
fe:8b:cd:a3:d3:35:df:8b:af:0b:12:b2:77:f9:47:
29:ca:62:12:86:98:1a:be:6d:f5:c5:fe:0a:a7:56:
e8:38:0b:db:53:18:74:9b:3b:2e:a1:d5:ba:b0:e4:
19:3b:d3:2e:5c:3d:60:8b:d4:9b:60:a0:87:85:29:
53:9c:9b:ca:1b:0b:6f:02:c0:98:f5:8d:3f:13:d7:
e3:48:97:10:5c:c3:92:77:5b:ca:73:f4:4e:37:a0:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AA:3E:8D:4E:F7:03:0A:51:D7:99:19:AC:3A:E7:00:CE:BC:03:01
X509v3 Authority Key Identifier:
keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4c:83:2c:3b:5c:f3:1f:06:67:a3:3f:3e:75:e6:aa:8d:9a:
a6:be:b3:fb:d9:2a:ba:6e:d3:da:14:50:37:1f:d7:a5:1e:f4:
d1:72:ea:54:25:d2:e0:8d:81:57:30:4a:04:0f:e5:6e:c3:13:
06:15:6c:b7:2c:80:4f:20:9f:63:59:97:96:23:a7:c8:22:8c:
bb:3e:0c:54:bc:0a:9e:1d:9c:5c:d5:02:8d:a5:1c:fd:88:84:
f1:47:bd:11:78:f9:18:96:05:f7:38:ba:63:31:44:6f:87:c2:
a9:c5:da:a2:e0:16:a2:a8:fc:76:6f:36:a8:bf:03:df:e6:58:
d3:1f:a7:43:98:ae:7f:85:48:f6:d0:da:e5:de:95:85:e9:e6:
c0:0a:a7:90:eb:1a:2c:e4:10:ac:09:13:34:0f:b9:69:fe:49:
79:81:fc:d9:c8:2f:15:6f:f9:83:04:c6:ef:29:fc:c1:2b:c9:
8b:43:b3:1a:10:c6:69:b1:98:22:e7:4e:80:b8:8a:ae:1a:24:
47:2f:61:60:73:b7:40:db:67:b9:a4:a0:64:f2:22:5c:8f:dd:
2b:3c:49:4f:c3:e6:fd:12:f2:16:e3:dd:49:6e:40:77:70:b4:
90:65:6a:bb:47:83:2f:ce:d2:f9:33:b3:a3:f8:e1:1a:b8:20:
ca:18:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:42 2026 by rpki-client