
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json)
Hash identifier: 1NxZ6jQWGzA/FWakid+lMJf/RbROiLsLcnWHmEng4Nw=
Subject key identifier: AD:F0:AB:94:F2:4E:52:E1:0E:80:36:E7:81:21:D7:97:72:45:49:B1
Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
Manifest number: 027E
Signing time: Mon 02 Mar 2026 02:18:27 +0000
Manifest this update: Mon 02 Mar 2026 02:18:25 +0000
Manifest next update: Mon 09 Mar 2026 02:18:25 +0000
Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: Jx/1WhrrGrm/2aOFDBI71or0/+n3/MwrqaAZY3Bb6MM=)
2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 0dEgHfjdaDmXpIqs7bBG+Yt1VZ3EjEezx277VdYW0Gw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Validity
Not Before: Mar 2 02:18:25 2026 GMT
Not After : Mar 9 02:18:25 2026 GMT
Subject: CN=69a4f373-c49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:35:4d:fe:74:6b:08:0d:58:6b:d2:1e:b5:
87:34:f0:73:8e:71:00:e3:26:1a:59:45:f6:4c:8e:
f9:85:38:f8:98:dd:57:67:fd:02:c9:83:5b:90:b2:
3c:8c:d5:e4:08:9d:5d:6d:07:58:6b:7c:de:7c:3d:
8f:ce:7c:8d:cb:58:0d:c6:0c:e2:67:a0:c7:15:9b:
f9:64:22:67:15:92:98:46:63:23:f1:0a:43:a7:3c:
30:ec:08:1f:ed:b4:7b:e3:5f:60:f4:f5:68:44:a1:
c7:fc:04:70:38:27:65:21:fd:e6:17:bf:c8:c0:48:
86:37:57:21:6a:1d:ae:f2:a6:0b:89:4e:11:9f:a3:
f3:00:f8:16:2e:ab:9e:60:c4:e8:b5:89:1d:45:4e:
8f:92:c6:09:53:0a:af:d3:c8:b1:06:8a:e6:4f:15:
d1:de:2c:7f:23:58:65:2d:60:04:0c:02:f5:73:39:
27:0f:ad:b6:5e:17:3c:38:e3:8d:68:19:a3:be:29:
5a:18:7d:5e:e5:ab:c2:7b:0b:64:2d:46:c0:ac:06:
ad:26:b6:3d:d3:15:c0:5b:d4:81:40:11:a1:ae:b7:
a6:74:40:59:8b:ec:9a:20:e8:e0:67:a3:19:c8:12:
95:93:c7:1e:eb:99:fa:75:04:d0:22:41:e3:2d:48:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:AB:94:F2:4E:52:E1:0E:80:36:E7:81:21:D7:97:72:45:49:B1
X509v3 Authority Key Identifier:
keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:44:e8:d3:53:f3:38:0a:1d:f4:e2:eb:c2:13:40:2e:59:86:
5b:d5:0c:54:0b:ed:94:5f:4c:46:d8:4f:4f:e5:13:28:3a:aa:
51:94:ef:73:d8:65:fe:35:97:94:7b:67:63:25:08:44:73:c9:
ed:2c:bd:df:5d:be:dc:ac:22:cc:8f:93:b1:b8:cf:98:85:59:
90:91:75:03:14:6b:bb:e1:1b:ca:9d:54:b4:9e:33:cc:a2:cd:
10:8a:d5:96:6b:ce:d3:c5:33:4d:c2:64:8d:5b:24:f4:57:2d:
44:e1:71:c4:85:b0:28:2f:08:11:47:d3:f5:5c:08:b2:ae:28:
f7:ce:b0:41:11:f6:e7:b8:78:e7:1b:1c:6c:22:e2:82:7f:b3:
15:1f:0f:76:45:8d:a6:17:57:4b:be:23:6e:6c:e8:38:97:1d:
84:c4:fb:29:70:9b:5e:51:e1:a8:11:a7:c0:b7:83:f3:60:b7:
95:23:10:cb:cb:da:a6:95:ca:80:7f:2e:9c:75:e9:99:39:37:
ad:90:c6:48:65:bf:d4:47:0b:34:47:36:b2:f4:33:fb:15:02:
4f:d8:5b:51:d2:4c:5d:f7:c0:de:e2:fd:cc:0a:91:1d:a0:98:
4c:99:4a:fe:4e:93:55:f4:f4:3d:0e:df:56:1d:f6:6b:b7:07:
47:d4:b9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:32 2026 by rpki-client