
$ rpki-client -vvf rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft
File: at5OHE4cCb8U36pMPWAPQY4X5y4.mft (raw, json)
Hash identifier: h6rXDu0gMwl2FlwQBYYJBaa9e+VfoJVMUCyVjEjcjn4=
Subject key identifier: 63:FA:A1:DC:E0:15:49:DE:0B:1F:7D:7A:01:66:58:DF:DE:69:F4:66
Authority key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E
Certificate issuer: /CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E
Certificate serial: 3514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft
Manifest number: 3514
Signing time: Sat 28 Feb 2026 14:53:25 +0000
Manifest this update: Sat 28 Feb 2026 14:53:24 +0000
Manifest next update: Sat 07 Mar 2026 14:53:24 +0000
Files and hashes: 1: at5OHE4cCb8U36pMPWAPQY4X5y4.crl (hash: M8YOLV055dZ4x62n5wczL5jTmQ25NMH0VeZhDDe4xuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl
rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13588 (0x3514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918429B, serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E
Validity
Not Before: Feb 28 14:53:24 2026 GMT
Not After : Mar 7 14:53:24 2026 GMT
Subject: CN=69a30164-3872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:e7:9f:e5:bb:88:fb:4e:fb:2d:11:aa:e2:
89:57:57:a8:e7:5d:ea:21:1d:3a:d3:89:da:21:07:
ee:37:4a:5c:0b:21:38:df:7c:29:07:8a:fb:68:7a:
c7:98:30:79:b2:5d:66:c3:e6:38:f3:2b:c6:e8:8f:
2a:93:f4:8d:d2:6b:9f:20:16:5e:fd:f4:fd:fc:d4:
67:94:42:86:15:2f:9c:4f:07:c7:45:24:81:69:1f:
c6:6d:90:d0:25:54:a5:28:c3:ed:ff:d6:da:97:20:
1c:2e:6e:da:50:53:5b:ee:98:20:8f:d9:69:fa:17:
b4:7d:d5:d1:d6:fd:c5:8e:f6:6d:c6:fc:20:65:06:
dd:29:ee:8c:bb:bf:0a:36:c4:76:7c:50:a7:d4:30:
49:23:67:c9:55:2b:48:e6:ab:7f:63:ea:74:4a:2b:
1e:f1:ca:57:be:3f:e2:75:16:a0:8e:ab:2b:da:ff:
75:18:8a:48:c7:48:6d:31:71:f4:25:10:39:7f:55:
42:b5:be:03:57:d8:ab:5d:8a:55:8d:05:7c:b8:90:
8b:34:3e:28:67:bd:9c:8c:d7:12:b3:fc:39:97:4f:
af:63:84:08:d5:34:90:39:62:76:8e:2e:0f:24:36:
68:0f:55:32:ce:38:d1:9f:fe:1e:57:ca:ba:a0:39:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FA:A1:DC:E0:15:49:DE:0B:1F:7D:7A:01:66:58:DF:DE:69:F4:66
X509v3 Authority Key Identifier:
keyid:6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:37:5f:d7:11:5b:84:ec:d9:55:b2:0e:02:73:3f:36:10:
c0:f7:62:5a:93:87:fd:50:a4:b3:6b:67:ca:05:5d:94:07:8a:
bb:0c:37:ab:ef:b4:9d:d7:be:e9:0a:02:1f:f1:0e:08:e3:8d:
43:b5:5f:18:5a:c0:c4:ef:a7:5c:f4:97:37:00:df:04:66:43:
bc:75:fc:34:06:37:10:3b:d3:72:15:08:23:a2:63:0c:c8:19:
27:3f:25:c7:6d:c5:80:cd:0b:c2:60:fa:14:41:db:78:0d:04:
dd:ca:96:a0:39:78:25:bc:86:93:36:8f:62:5f:57:f5:f9:99:
80:95:b0:49:81:94:fc:9a:73:25:ae:cf:10:72:ea:24:99:df:
2a:aa:87:f5:a1:16:e8:27:1d:96:9e:dc:25:60:e5:a2:9d:1e:
88:30:5d:02:a9:60:1f:a2:d5:a9:aa:01:a4:1a:9f:fe:86:06:
74:aa:a1:ca:be:b1:2e:1f:58:a4:06:58:d1:6b:74:3f:bc:28:
0d:3f:8f:ec:7b:a5:99:f2:e3:33:79:47:3d:e5:3a:dd:fe:05:
93:0e:fe:0a:18:37:2a:9f:78:48:7e:d3:fc:97:4d:43:41:71:
ed:d0:9a:ff:1e:c9:30:f7:24:92:a0:a9:7b:5e:e5:76:fa:a1:
18:d2:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:33 2026 by rpki-client