
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier: RZ9ZMfFfmR6Tnuf2lfotbGNLg3Bsa7JJTPrf7j3+QmM=
Subject key identifier: A9:F4:85:5D:60:2B:39:42:5A:AD:6B:94:5A:ED:B3:99:F1:2A:20:88
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number: 01F3
Signing time: Sun 01 Mar 2026 04:21:16 +0000
Manifest this update: Sun 01 Mar 2026 04:21:16 +0000
Manifest next update: Sun 08 Mar 2026 04:21:16 +0000
Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: FJE3UMRfO6+3lM/H12kDB+oiYgvLOt0JXmYdW7jpqhg=)
2: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: iRxA1ggG5Gg6gMWZuZ8L1lPJN3fft+M4sC43triwT/s=)
3: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: tbP1wHLZXWdBy80smo7nwsfBeTkYD2DmwbznFImHmJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Mar 1 04:21:16 2026 GMT
Not After : Mar 8 04:21:16 2026 GMT
Subject: CN=69a3bebc-b5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:97:9f:b6:1c:a8:6b:9c:08:19:52:da:66:
49:da:54:e9:be:0e:fe:f7:14:18:12:ab:9c:07:7e:
4d:d3:fc:5b:d3:54:92:fd:85:37:2f:d3:1a:65:4f:
62:f4:7c:71:90:1a:93:74:0f:34:c1:a1:a9:b5:c1:
75:18:91:3b:70:59:b8:03:6e:98:b7:f7:05:77:45:
c6:4f:08:70:5f:d5:d8:50:52:fe:a5:0a:4e:20:9a:
c6:31:ba:17:a7:50:e5:71:ac:72:ec:47:76:58:db:
f1:98:71:fe:89:b1:03:da:38:eb:5c:4f:23:eb:f4:
a0:16:fb:c0:03:fa:77:1d:9a:c2:cd:d8:df:1b:22:
94:d0:da:85:e2:71:d0:c2:de:5e:73:ba:f1:0a:b7:
f8:15:8e:f8:88:6f:c9:5d:ad:7e:12:dc:da:9a:f9:
e5:37:4e:06:73:7d:0f:81:26:da:14:cd:ac:99:f9:
d5:6e:d0:ab:d1:06:07:66:e0:bf:40:fb:8f:34:71:
43:85:67:c9:8e:f3:31:07:97:f6:a7:7d:b9:90:6b:
2d:c1:23:d9:1b:ba:ea:93:9b:fd:b8:6b:ee:f4:97:
97:de:55:e4:2c:d6:8d:89:13:56:57:f5:d1:bf:29:
a1:c2:db:2d:dc:0f:c3:85:29:d9:61:27:16:e7:68:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:85:5D:60:2B:39:42:5A:AD:6B:94:5A:ED:B3:99:F1:2A:20:88
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8f:7f:c7:32:e1:7d:42:cd:b2:1f:3a:98:b0:a0:00:9c:3c:
5b:86:5c:de:a9:72:28:45:52:d4:44:d8:7a:fc:41:38:75:1f:
ce:bf:08:40:a6:e3:d0:d2:0c:4b:e4:45:d8:81:d8:0d:0b:55:
19:17:22:ed:71:1e:d6:17:45:b4:f2:75:7c:4a:0a:6a:6c:a2:
ce:3c:30:f7:81:a6:56:d8:84:e9:05:24:a7:4d:08:a8:59:15:
f9:b2:0c:de:44:e2:31:7d:cd:95:8c:72:3e:35:82:60:31:5f:
42:00:be:16:f3:7e:52:8e:94:8f:e0:b1:12:e7:d8:1f:e2:34:
08:98:11:8a:24:7d:52:c3:0d:7f:76:6d:8b:4c:83:60:20:03:
d1:33:94:07:48:95:01:bc:38:d4:51:31:84:0c:95:52:9c:03:
07:82:24:9e:62:11:93:54:15:2a:96:5d:27:c1:f6:35:45:8f:
b6:45:e1:b0:b6:17:8c:e0:98:11:d0:3e:7f:f9:7c:30:f6:15:
93:bc:1e:dd:dd:7b:5d:f8:1a:03:af:47:ea:82:62:4f:9a:a8:
29:a6:d0:fc:31:b9:dc:2f:e1:3d:a0:f7:4d:73:e9:79:61:14:
cb:fe:5d:b4:b3:2b:b4:8c:d0:3d:60:72:97:e3:d0:3f:b5:24:
a4:5e:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:14 2026 by rpki-client