
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
File: 4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json)
Hash identifier: IDR7j5RVHmvXriafluLOFhDo6QJ7FTs3DdWXJYHRrMo=
Subject key identifier: 4A:FA:A7:88:54:9D:05:89:C6:04:B9:33:E8:4D:43:3A:1D:01:B2:4C
Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92
Certificate issuer: /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
Manifest number: 011A
Signing time: Sun 01 Mar 2026 06:51:54 +0000
Manifest this update: Sun 01 Mar 2026 06:51:53 +0000
Manifest next update: Sun 08 Mar 2026 06:51:53 +0000
Files and hashes: 1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: WzXge8RMF4yO4T0RR/NeO51zM9f8FROOLvkUbUrWWYs=)
2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 8GXDB+pZReiVHRhHIXWVIQQroHdHPp2tY80GMG2ZCJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl
rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
Validity
Not Before: Mar 1 06:51:53 2026 GMT
Not After : Mar 8 06:51:53 2026 GMT
Subject: CN=69a3e20a-82da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:5b:c8:ba:8a:d9:09:e0:d8:c1:94:ee:b6:
a5:b2:c6:83:6a:92:18:39:f2:72:64:7f:2e:14:0b:
e8:63:6e:f8:43:0c:9d:ad:d8:6e:dc:7a:23:4f:2f:
05:14:9b:41:d8:24:03:15:43:35:1e:12:d8:76:e8:
bf:1c:db:3a:22:e4:11:b7:11:70:67:76:48:ff:97:
63:14:f9:f6:22:49:4e:dc:42:74:30:25:68:e9:f4:
b0:11:f0:b3:2d:e6:fd:91:ac:60:51:a2:72:1e:5a:
db:b6:1c:9e:d3:87:0c:87:bf:42:22:12:33:eb:46:
4f:7d:9b:94:9d:89:0b:ee:c3:ee:42:b8:1f:42:e9:
97:ca:a3:11:85:23:e8:93:0f:ea:2b:43:05:b1:7c:
26:aa:9b:b0:d4:fa:cf:2f:e7:6e:1d:c8:7e:90:82:
0d:5d:6b:a3:cf:03:dc:9c:3c:32:f9:52:a2:4d:a8:
46:ed:6d:05:1f:61:68:ad:18:3c:3c:5b:5c:7c:bb:
40:a1:0d:c4:75:5b:6c:36:56:4f:d9:6a:a8:b7:80:
3e:77:f1:99:9c:2c:ef:f8:21:de:9a:2d:f9:7e:04:
d5:e7:93:4d:a3:71:c4:7a:02:35:3c:2e:56:f2:2d:
ed:05:46:51:cb:a5:ec:74:86:49:c8:cb:78:8b:b4:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:A7:88:54:9D:05:89:C6:04:B9:33:E8:4D:43:3A:1D:01:B2:4C
X509v3 Authority Key Identifier:
keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:d2:dc:9a:49:6b:6c:67:75:9f:44:fc:77:8d:98:49:2b:97:
be:e9:7b:22:7a:81:b5:b8:aa:8f:38:46:26:fe:0c:e8:b7:66:
0e:1d:f2:35:fd:ea:f2:f9:9a:ce:c5:5d:9e:cd:07:5b:79:46:
68:8f:30:23:7f:26:6f:15:8d:a4:11:cf:f3:df:37:87:e8:35:
dd:29:ce:0a:57:d1:b3:7a:51:9a:22:28:2a:df:c1:0c:2f:77:
89:e9:1e:04:76:13:71:51:fc:96:ae:45:ff:2d:3e:51:8f:29:
6d:26:e0:2b:70:fb:35:ce:4b:d8:84:05:d3:a6:a4:c2:bb:3d:
11:c4:96:18:16:b3:a2:09:8d:3a:31:2a:cc:a3:fe:4a:a5:24:
00:68:75:56:ee:4a:d2:0d:e2:d2:b3:a7:8f:74:1a:22:4f:f2:
b7:33:e0:0d:b4:76:f5:bf:6f:e9:8b:a4:78:1b:af:88:4c:7d:
24:45:77:5d:c7:c6:8b:4f:18:34:d8:92:41:01:73:b3:1e:fe:
a0:f0:4a:d4:c9:ee:b9:61:ff:bb:8f:d5:9b:78:a3:c9:03:bd:
68:94:a2:f2:ad:88:8c:0b:6a:0b:db:2f:00:87:58:b7:af:63:
37:3a:4b:df:55:f7:e4:4a:45:4d:b1:76:49:27:a7:b0:5a:d8:
ff:b1:28:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:27 2026 by rpki-client