
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json)
Hash identifier: L/BlVBWjHfJt52WLpoj6zVCfDT/Z4UC4Cr5JM0/9rrY=
Subject key identifier: E6:03:40:8F:DA:E9:F0:79:15:1F:F3:23:04:B1:E4:5E:8F:F4:82:C4
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 05B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
Manifest number: 0588
Signing time: Sat 28 Feb 2026 23:55:37 +0000
Manifest this update: Sat 28 Feb 2026 23:55:37 +0000
Manifest next update: Sat 07 Mar 2026 23:55:37 +0000
Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: cbL0gkou03RoF/tQUFcDKOjPMMtuneHX95DnYIyddqU=)
2: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: 02gdGUoKaGU981qYNAOicujQXSbUOhKyvNrMWXNfXQk=)
3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: /zpbbyMm2w5Xcql5zfUtoN8iPAyG5aFUqVMvzNCSPuM=)
4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: hn+qGaZCtkUKYopOyzVnHKxTxBxzaX/N9RY/bypGInA=)
5: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 9x2G7s9XnkzB/aoRrwX0fPhCy+k2H2dG9FDGRVFamnQ=)
6: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: vwZIGcuT/wdsi2ov5n4aKBIuwaWae+4rjnxU5e55BsU=)
7: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: XSuhAhi3kRB8kUY+l+Kw6bn9CYFf3Y2Di14tTGA1/Oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1459 (0x5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Feb 28 23:55:37 2026 GMT
Not After : Mar 7 23:55:37 2026 GMT
Subject: CN=69a38079-a5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:3b:1b:c3:03:ec:02:4e:0f:9f:0d:8c:c5:
51:c4:22:6d:9d:7f:bf:9f:c7:6f:45:a3:94:26:d0:
34:97:2f:a1:dd:69:9d:c0:30:f3:03:74:4f:fb:4b:
f0:04:40:28:ba:fd:b3:5f:9f:cd:f3:1d:16:5f:83:
a1:59:98:80:66:cf:a5:90:67:56:97:25:12:32:94:
31:b3:15:29:73:02:78:f3:dd:21:ee:cf:18:ab:a1:
95:92:af:8f:c9:4f:80:96:3a:05:e1:1c:dd:e2:b3:
02:fd:a9:30:4f:98:8e:49:ab:37:38:0e:dc:94:d0:
ff:98:0b:7c:ca:49:93:4c:97:c2:aa:1e:bc:24:c6:
0e:23:c3:4d:e2:ef:bc:4c:81:a5:e6:31:59:47:43:
01:2f:16:bb:cf:45:52:c1:55:ea:26:46:cf:f4:26:
a7:1b:33:7d:06:be:68:86:ef:a4:a9:7d:4f:04:24:
9d:3b:ef:23:c4:d3:ff:4d:3b:f2:66:56:ce:02:98:
8e:04:99:32:49:b1:66:93:99:ab:9d:8f:c7:e9:bc:
73:ae:6f:5a:bf:0c:65:7b:f6:43:00:26:00:d6:99:
3c:fb:6e:e6:75:21:2c:68:b5:a5:6c:a4:88:b3:95:
2a:23:17:c6:75:fd:af:4c:62:8b:2e:fa:46:12:f8:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:03:40:8F:DA:E9:F0:79:15:1F:F3:23:04:B1:E4:5E:8F:F4:82:C4
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:3a:95:88:00:c0:bf:70:f7:8e:94:42:5b:bc:21:ae:12:
78:3a:30:57:db:b2:71:fe:01:1c:2b:b9:a4:12:c1:67:dd:75:
7b:d3:cd:45:84:66:f0:1a:b4:6b:03:af:58:b3:62:41:8b:aa:
66:4c:86:4e:41:c2:d3:e2:17:43:7d:13:e5:c3:7b:5f:3c:f2:
93:69:68:ef:54:25:db:7c:c9:2e:b5:2b:64:18:b7:e0:05:f6:
4a:2a:67:66:99:36:67:76:07:e8:b4:89:76:e8:0f:9b:07:c9:
77:a9:d0:60:a6:e4:f2:92:7a:22:49:d5:84:96:99:e5:3f:18:
03:a5:39:39:82:18:75:05:2f:6e:04:02:e1:50:ca:69:7c:fd:
e4:20:11:dd:ef:fe:21:cc:d1:46:ef:c2:81:fc:5f:e2:d0:f5:
7c:75:05:3c:87:70:aa:3f:6f:0d:9d:f9:dc:62:b8:10:5c:94:
dc:12:10:85:ad:ed:91:10:42:19:7d:c5:c7:c3:d6:60:93:db:
36:d0:e8:8d:4d:44:ef:14:08:35:1c:f8:c4:02:2e:79:0d:ad:
2f:8a:47:ed:80:48:60:7c:bc:91:8f:eb:f4:a8:02:c8:76:8d:
9d:0f:44:7e:85:83:ef:bf:a2:11:0f:02:e7:75:98:15:ed:55:
a3:33:1c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:35 2026 by rpki-client