
$ rpki-client -vvf rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
File: aFEZgfy52vrY49MDBLtBqW-5p28.mft (raw, json)
Hash identifier: ebgTqTojhUNeriJdCOUU3wSnM15Zz+wTenNN+mWuyTs=
Subject key identifier: D5:BC:2D:47:5F:4C:BF:89:A8:38:02:C0:42:E3:27:B4:66:34:32:EA
Authority key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
Certificate issuer: /CN=A918196D/serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
Certificate serial: 0531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
Manifest number: 051C
Signing time: Mon 02 Mar 2026 02:27:02 +0000
Manifest this update: Mon 02 Mar 2026 02:27:00 +0000
Manifest next update: Mon 09 Mar 2026 02:27:00 +0000
Files and hashes: 1: aFEZgfy52vrY49MDBLtBqW-5p28.crl (hash: X4h/MnuZ9sq33+ln3NwJnADKM2G90sJHZ6BSz1UBO4E=)
2: 5C2186C444B011F0B9799F48C4F9AE02.roa (hash: 7U90fAJm9Jprxru+K/b/WXWkFIPppoovbosNTZikpMg=)
3: 3E60217E42D211EC956C7F65C4F9AE02.roa (hash: tETiEeczeTi6RVos7PRLZrM1yj4bO0TaBc4BLbzROio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl
rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1329 (0x531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
Validity
Not Before: Mar 2 02:27:00 2026 GMT
Not After : Mar 9 02:27:00 2026 GMT
Subject: CN=69a4f575-6437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:4d:8f:23:0b:5d:c0:46:e5:5e:3c:90:24:
2c:7b:ba:b0:e2:12:a3:82:ee:32:99:a8:54:76:02:
1c:b1:b3:eb:e3:b7:e8:15:7e:e7:b6:5d:b6:cc:09:
1b:5b:ba:d1:58:df:37:27:dc:43:01:3e:0f:74:f4:
2d:13:7d:ea:63:1b:f8:61:d2:ba:f1:2b:d7:f8:ec:
97:28:b5:98:f2:63:68:80:a2:5b:fb:a6:e8:83:25:
79:e7:a9:bc:13:71:28:9c:aa:79:9b:d7:5a:34:36:
83:30:47:c2:3c:87:06:a5:ea:19:cf:28:bb:76:ea:
f3:3e:fd:da:6c:1c:be:cc:da:12:96:2a:0a:d8:05:
3e:3e:cf:65:4d:b7:e8:c3:e9:d6:64:13:eb:5f:24:
87:9a:3f:f7:cc:ed:cf:86:28:ed:dd:f3:a9:ba:cc:
b2:8a:30:ab:a5:77:11:37:1c:4b:72:fd:4b:42:58:
df:4f:a5:0c:a6:fe:62:43:14:40:68:0e:31:86:d5:
68:75:77:b1:70:d6:ae:a4:1c:01:77:93:1f:94:b9:
5a:1a:a5:90:a2:85:70:fa:85:6c:a7:bd:8f:fb:44:
58:50:c8:a0:fd:5b:a1:5a:48:90:4b:00:74:a7:35:
94:d5:bd:f7:8f:d3:81:61:91:43:61:3c:0f:0c:cf:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BC:2D:47:5F:4C:BF:89:A8:38:02:C0:42:E3:27:B4:66:34:32:EA
X509v3 Authority Key Identifier:
keyid:68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6e:14:97:0f:23:6d:75:3a:12:72:67:29:91:28:3f:60:7a:
29:ab:4b:f0:0c:14:5d:72:88:75:00:1e:10:04:fe:d3:a4:f8:
17:ed:aa:14:46:65:37:07:7e:3a:ad:3e:c9:b5:dc:ac:ef:16:
30:06:2d:26:2c:cc:f1:c4:42:2f:3a:7c:62:8b:ed:e4:c0:d1:
b8:7d:65:3c:58:1c:c7:51:f4:7e:9b:7e:bb:5e:9d:2f:19:45:
d5:d2:00:3b:ca:2e:3b:7c:d2:35:0b:7a:dd:35:7e:b0:6f:22:
20:e9:fa:bb:cc:a2:b7:f2:c5:7f:30:17:ab:93:47:9d:18:5b:
dd:b0:a5:3c:f6:32:17:35:49:ea:66:42:ab:f5:79:dd:90:5e:
cf:4f:30:74:dd:d6:61:29:58:b5:e5:dc:c7:8e:ec:3e:36:67:
2b:f1:60:5d:a8:1b:28:ec:55:7d:d0:cc:9f:5a:7e:66:e4:9f:
a4:29:c2:a1:0f:04:62:93:ee:35:29:34:07:61:6d:c9:c2:a5:
12:30:ee:7c:06:b8:73:52:79:e4:59:2f:bb:73:ba:38:c3:fd:
df:cf:fe:ea:67:f6:63:a4:f8:5f:0e:b2:68:db:d0:16:15:05:
77:c6:08:fc:d1:d0:d1:bf:54:33:64:be:a8:17:0f:8b:f1:6b:
23:cf:1e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:32 2026 by rpki-client