
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
File: aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json)
Hash identifier: LF8dRTFYgPOEWpzdkKgX1H1vtbhHgGXt6s3L+BGO1IU=
Subject key identifier: BC:55:1F:69:B3:6B:E6:10:CA:2D:5C:0F:09:17:B6:37:21:0F:FF:DF
Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Certificate serial: 139C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
Manifest number: 1389
Signing time: Mon 02 Mar 2026 00:40:33 +0000
Manifest this update: Mon 02 Mar 2026 00:40:30 +0000
Manifest next update: Mon 09 Mar 2026 00:40:30 +0000
Files and hashes: 1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: u2O3XQfB/h3NRKaJHPY6TdTX7BdRj8oyl7MGCg8dz38=)
2: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: jPVq1FqdO/7Sa1Zo63l4DDlY46514aXTAgnERyot6WE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5020 (0x139c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Validity
Not Before: Mar 2 00:40:30 2026 GMT
Not After : Mar 9 00:40:30 2026 GMT
Subject: CN=69a4dc81-d5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:33:c8:18:99:c6:72:11:6f:b4:3e:fb:ff:
5d:43:ac:a5:d2:20:df:c9:bb:4c:93:2d:6d:46:be:
96:6c:b7:a7:21:52:38:3f:f5:a5:7c:d7:80:12:61:
7c:27:89:29:0f:61:4c:4b:29:40:8f:9d:36:1b:35:
68:d8:d8:cf:ba:c1:8b:50:56:3f:16:83:4d:b2:16:
43:85:33:4f:24:04:e4:4e:72:6b:ae:fc:54:cd:95:
9c:cc:e3:de:55:45:ad:83:3f:9c:d6:9d:bc:07:84:
bb:2f:2f:63:25:a6:0c:d2:5a:77:75:68:ed:bd:4f:
02:fd:06:0c:7d:eb:36:22:9c:13:b7:e9:60:14:4b:
57:d4:f4:82:d3:1f:c1:ef:97:3b:94:dc:f1:52:62:
62:c1:fb:d3:2a:35:f5:db:14:68:da:52:ab:84:0f:
b4:38:4a:8e:dd:19:03:48:df:8c:5f:9e:56:16:70:
f5:2f:5a:af:97:77:10:ce:d1:cc:41:5e:29:82:02:
93:30:4d:3f:6c:f7:57:04:11:0c:e9:b6:53:02:6a:
02:91:0b:9f:dc:c5:ef:f3:59:da:d5:20:7c:16:fc:
88:07:4b:d9:a3:06:73:a3:2e:6d:da:2f:52:12:ed:
a0:7a:74:7a:70:97:c7:a5:4e:14:fd:8b:be:a9:35:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:1F:69:B3:6B:E6:10:CA:2D:5C:0F:09:17:B6:37:21:0F:FF:DF
X509v3 Authority Key Identifier:
keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:35:a5:e2:07:02:f6:d8:ca:3e:fe:23:75:e2:4c:3f:4a:b8:
42:94:6b:77:a4:e6:fe:d3:d3:17:8f:e2:be:43:66:89:07:2b:
7f:ff:5e:fe:3c:d5:69:d9:f3:84:02:e6:9b:69:a5:d1:be:a2:
4d:30:d4:82:3a:90:4e:58:0e:bf:c4:7b:05:c0:73:26:a4:15:
a2:89:07:48:40:2d:36:05:16:6d:12:de:52:50:19:23:c4:cb:
89:dd:c8:ce:91:d6:d2:76:ab:5e:a8:e2:7f:26:ce:c9:f6:92:
8b:5a:9f:f4:df:30:7e:be:9c:99:7e:31:89:e6:29:07:9e:e5:
6b:48:3a:32:6e:2d:bf:a3:3d:6b:74:e5:ae:ec:a4:27:12:6a:
d9:1c:58:7a:94:d3:27:03:57:cd:49:96:21:d9:de:0b:24:58:
d5:a6:a1:0f:2b:95:77:cb:e8:11:94:14:a1:d4:59:a3:97:de:
aa:c1:2a:ea:62:b6:6d:17:74:c0:29:38:c5:05:e4:4a:0e:e6:
0c:40:4d:65:e9:48:c6:35:d0:a4:32:d6:91:13:6a:61:ba:e7:
f7:0f:af:06:4a:21:18:55:b9:d9:98:9b:27:ab:a7:c5:26:83:
64:5e:3f:9a:af:7b:e3:0a:ae:ef:e8:85:c4:34:e2:22:a0:38:
ea:a9:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:36 2026 by rpki-client