
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
File: ctH2ecltIFwtRxyUqA3vYNkRJhw.mft (raw, json)
Hash identifier: HqhZsv8jIcZre89CKWFHaPDMiZtNLfbFbqm9UmrBwSI=
Subject key identifier: 0B:12:4C:E6:F6:30:78:2F:4A:54:17:44:69:C5:F0:20:2B:31:51:64
Authority key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
Certificate issuer: /CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
Manifest number: 0163
Signing time: Sun 01 Mar 2026 05:52:06 +0000
Manifest this update: Sun 01 Mar 2026 05:52:06 +0000
Manifest next update: Sun 08 Mar 2026 05:52:06 +0000
Files and hashes: 1: ctH2ecltIFwtRxyUqA3vYNkRJhw.crl (hash: 0Q13Hwh9qhQXT57H5za21v6iI7FDj94wV9yl2ZprBmY=)
2: 255842A2EFF411EE853CC833C4F9AE02.roa (hash: 0a/19rU1zoR8HPG3b9KrbOC4Srzy59tAkTtlFRC+aqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl
rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E85E, serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
Validity
Not Before: Mar 1 05:52:06 2026 GMT
Not After : Mar 8 05:52:06 2026 GMT
Subject: CN=69a3d406-430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:b6:58:31:af:b1:98:0d:a7:51:6c:95:b6:
74:ff:fa:3c:1b:71:e2:fa:c1:19:ab:ef:ee:06:3b:
9c:9a:cb:fc:ba:ca:04:6a:c4:22:b9:45:23:54:53:
8e:d5:a6:80:b4:41:39:72:0d:8a:fa:b3:e0:2e:02:
9e:be:26:60:80:c9:fe:d8:9d:e5:df:56:7f:54:ca:
85:40:16:09:41:ec:eb:bb:13:2e:36:2e:13:a8:86:
0d:09:c0:38:4f:34:dd:89:47:27:a7:3d:8c:35:2f:
4f:cc:60:c9:35:10:77:55:2d:97:c2:cb:32:bd:16:
06:5d:9e:ad:51:1e:ca:78:92:94:b3:e1:ef:ab:1b:
36:be:af:03:a8:68:99:41:e8:fc:94:f5:80:31:89:
9b:d2:00:69:62:b5:cf:73:e8:14:c4:8b:7b:1a:bb:
bb:50:f0:f7:3f:18:f3:b2:32:e3:9f:bd:96:a6:5a:
fb:81:01:c4:9d:36:0c:09:94:90:04:7c:b0:f5:db:
d9:1d:be:ce:b1:6d:9e:14:c3:8f:d5:79:b9:26:b9:
55:46:71:91:33:b3:b4:c8:41:e7:56:4a:9b:6e:2e:
70:d1:05:96:cb:9a:da:e4:43:2e:b7:bf:f4:c4:24:
b6:6e:f4:53:2b:b3:c6:62:45:e0:de:13:c0:50:de:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:12:4C:E6:F6:30:78:2F:4A:54:17:44:69:C5:F0:20:2B:31:51:64
X509v3 Authority Key Identifier:
keyid:72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:91:6b:36:7f:6d:32:d2:a1:9c:84:fe:ef:67:25:32:f7:
9a:f0:3d:04:b2:4c:e6:6d:6c:0b:a4:dc:37:a8:03:77:31:e2:
9c:0c:e4:da:e1:9b:8a:d2:87:30:43:a9:59:8f:3e:f4:18:78:
9b:d0:51:f9:f0:96:a0:9b:34:fb:27:74:47:8c:48:31:70:87:
df:aa:96:b4:46:d2:cc:b9:42:f0:9c:86:f3:06:74:bb:e0:e3:
43:16:27:ec:50:45:e2:e8:e2:89:9e:84:6a:b3:da:16:e9:b2:
23:a0:5d:d5:0e:b7:f2:7d:a6:67:01:66:72:78:d9:09:11:c4:
d8:44:0c:03:de:02:7d:67:ed:45:09:27:e6:19:fb:11:3e:a9:
01:c4:6d:8b:1c:2b:2c:63:79:04:16:33:de:59:86:36:74:e0:
0a:7d:7d:2f:2c:ab:f9:e9:ac:c3:92:ee:6a:74:ed:c8:bf:5f:
8f:87:c3:7d:b0:59:4c:6a:a7:5d:06:c2:1d:e0:f4:2d:48:00:
41:fc:05:42:3c:bb:bd:a5:18:e8:b0:b3:f9:da:01:d6:98:b6:
66:a6:24:ed:56:73:ab:3b:0c:83:6c:b5:38:95:b0:a6:87:27:
1f:b1:c1:86:6f:7a:b1:5e:d3:e8:cb:5f:5b:13:90:63:29:85:
73:ff:9d:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4NUUxMTAvBgNVBAUTKDcyRDFGNjc5Qzk2RDIwNUMyRDQ3MUM5NEE4MERFRjYw
RDkxMTI2MUMwHhcNMjYwMzAxMDU1MjA2WhcNMjYwMzA4MDU1MjA2WjAYMRYwFAYD
VQQDEw02OWEzZDQwNi00MzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyK22WDGvsZgNp1FslbZ0//o8G3Hi+sEZq+/uBjucmsv8usoEasQiuUUjVFOO
1aaAtEE5cg2K+rPgLgKeviZggMn+2J3l31Z/VMqFQBYJQezruxMuNi4TqIYNCcA4
TzTdiUcnpz2MNS9PzGDJNRB3VS2XwssyvRYGXZ6tUR7KeJKUs+Hvqxs2vq8DqGiZ
Qej8lPWAMYmb0gBpYrXPc+gUxIt7Gru7UPD3PxjzsjLjn72Wplr7gQHEnTYMCZSQ
BHyw9dvZHb7OsW2eFMOP1Xm5JrlVRnGRM7O0yEHnVkqbbi5w0QWWy5ra5EMut7/0
xCS2bvRTK7PGYkXg3hPAUN53dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsSTOb2
MHgvSlQXRGnF8CArMVFkMB8GA1UdIwQYMBaAFHLR9nnJbSBcLUcclKgN72DZESYc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg1RS81QkMxMjY3QUVG
RjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi9jdEgyZWNsdElGd3RSeHlVcUEzdllOa1JK
aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2N0SDJlY2x0SUZ3dFJ4eVVxQTN2WU5rUkpody5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTg1RS81QkMxMjY3QUVGRjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi9jdEgyZWNsdElG
d3RSeHlVcUEzdllOa1JKaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAICaRazZ/bTLSoZyE/u9nJTL3mvA9BLJM5m1sC6TcN6gDdzHinAzk2uGbitKH
MEOpWY8+9Bh4m9BR+fCWoJs0+yd0R4xIMXCH36qWtEbSzLlC8JyG8wZ0u+DjQxYn
7FBF4ujiiZ6EarPaFumyI6Bd1Q638n2mZwFmcnjZCRHE2EQMA94CfWftRQkn5hn7
ET6pAcRtixwrLGN5BBYz3lmGNnTgCn19Lyyr+emsw5LuanTtyL9fj4fDfbBZTGqn
XQbCHeD0LUgAQfwFQjy7vaUY6LCz+doB1pi2ZqYk7VZzqzsMg2y1OJWwpocnH7HB
hm96sV7T6MtfWxOQYymFc/+dLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:06 2026 by rpki-client