
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier: ShAprXb5bwhcQCAUl2gOGK0nX4UB9ROdxASbdrYPqSE=
Subject key identifier: 33:42:1E:B4:39:A3:44:43:49:88:09:C6:82:9E:16:D7:E3:81:C3:17
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial: 082D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number: 0826
Signing time: Sat 28 Feb 2026 21:20:28 +0000
Manifest this update: Sat 28 Feb 2026 21:20:27 +0000
Manifest next update: Sat 07 Mar 2026 21:20:27 +0000
Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: A3xh6cHuFswtet2O42e0lodvWJ4YVU7TPioC6s20xxM=)
2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: OzhrEAQM423OnNsjFX/pRulyswUafC9dzCD/mgitV0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2093 (0x82d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Validity
Not Before: Feb 28 21:20:27 2026 GMT
Not After : Mar 7 21:20:27 2026 GMT
Subject: CN=69a35c1b-8000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:46:3c:7b:24:a0:45:08:f2:e5:d7:45:16:
88:2f:18:f4:59:1b:73:cd:9f:ed:04:6f:a1:cb:1f:
69:0f:68:f1:5d:5f:28:f8:ca:77:45:fc:c9:9c:1d:
d9:8f:59:c2:0e:54:39:89:15:4e:04:90:b5:df:b4:
26:66:11:63:6d:ee:3d:bb:86:a3:e1:bf:df:9b:74:
46:91:54:6d:dd:6c:4a:1a:c0:86:65:aa:5e:df:c9:
fb:00:da:5f:79:da:ee:59:a1:0e:bd:10:0c:46:04:
d2:b0:62:9c:fc:6a:61:24:5e:03:88:11:58:7a:9a:
f4:cd:4c:51:d6:c8:23:04:61:98:2b:4e:d5:23:fb:
b1:82:30:5b:f2:b1:b9:fc:34:bb:b4:1e:a8:8d:24:
9d:3b:ef:a7:e6:70:d7:2b:29:a9:43:4d:93:a2:fe:
96:1e:fe:27:85:f6:58:55:fe:bf:59:d4:56:f9:d7:
e5:2f:51:2a:71:a0:55:a5:d7:54:28:81:2d:ad:e8:
de:d8:87:2c:00:7e:02:33:39:1e:28:f1:b8:84:ce:
1b:18:c0:af:3d:01:56:83:a9:f6:ba:81:0c:9e:df:
48:d4:af:10:44:0c:21:fb:cb:78:02:86:bc:60:c9:
8a:eb:65:c5:fc:09:a7:bd:d8:f2:ec:d7:e0:6f:47:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:42:1E:B4:39:A3:44:43:49:88:09:C6:82:9E:16:D7:E3:81:C3:17
X509v3 Authority Key Identifier:
keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:71:2b:57:dd:28:fb:2f:1a:b1:8b:82:ce:b4:c1:73:53:46:
08:c2:a4:b6:49:fd:d6:60:a0:f1:b4:60:24:1d:e1:63:bd:01:
ba:0a:47:65:46:fc:45:75:f7:61:a5:c7:c4:84:f0:eb:79:5e:
d6:fa:16:eb:bf:6d:47:42:b2:41:d2:3d:41:31:8a:40:2c:89:
b5:aa:e0:b9:7d:28:7d:30:dd:84:31:af:56:25:25:b5:0b:86:
b4:cf:22:7d:1e:1b:05:3c:50:ca:7e:6d:01:7d:8f:7a:1b:80:
6e:07:ab:36:f3:86:a5:8d:28:88:85:13:94:5b:2f:0c:8e:f2:
79:72:e5:a5:5d:6c:83:86:7b:36:66:da:5e:f4:42:f5:61:e6:
93:2d:9b:e7:83:90:66:7d:b4:43:84:27:55:ed:68:24:88:4f:
b1:ac:dd:8f:e7:c0:db:2b:51:74:b1:47:91:63:09:3b:a7:f6:
b4:7c:2e:4d:03:83:36:c0:64:c5:e2:a4:cf:8e:2f:a1:b3:cc:
f0:07:0f:05:9a:24:c7:c1:f5:fb:e8:7e:c2:de:9d:c1:5d:90:
95:3f:a5:4f:bc:26:c6:7d:0d:38:a6:07:26:3c:4f:89:b4:4c:
de:a4:e4:20:8e:1d:46:57:15:93:ea:cf:c4:5f:f0:7c:4e:82:
44:6e:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:15 2026 by rpki-client