
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
File: jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json)
Hash identifier: gqXRcZstkbt9+U7G5OywrDgfyoFEqItFHG8XS7Mpc2c=
Subject key identifier: 65:D4:D8:D3:1C:9B:FF:BC:EB:4A:1D:AD:BE:A7:D9:E1:4E:16:37:58
Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Certificate serial: 1C62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
Manifest number: 1C57
Signing time: Sat 28 Feb 2026 16:14:02 +0000
Manifest this update: Sat 28 Feb 2026 16:14:01 +0000
Manifest next update: Sat 07 Mar 2026 16:14:01 +0000
Files and hashes: 1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: qrLIEvTwVHkeZ6OLp+C3Xfym/DdylS/kUroHRwda9fc=)
2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: kBZXfU8hYHbxkpL5pMVsBeQd1k5TVtind4j2n+kliDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7266 (0x1c62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Validity
Not Before: Feb 28 16:14:01 2026 GMT
Not After : Mar 7 16:14:01 2026 GMT
Subject: CN=69a3144a-00d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:72:91:ae:e6:ce:53:e0:68:5a:7f:95:d1:
2e:76:10:8c:a2:2e:86:58:4f:4a:8d:03:36:f2:00:
ed:33:68:04:34:4f:7e:bc:64:59:bc:ea:d9:64:b2:
e6:33:ef:21:1a:3f:12:a3:ad:b6:75:02:a0:21:bd:
e7:37:1b:92:67:36:30:be:18:99:b5:82:cf:1a:4e:
10:75:18:3e:f3:75:0c:f6:ef:81:05:15:b1:24:69:
12:d5:c2:10:53:e9:8c:60:34:51:70:db:99:9c:1c:
bb:26:77:e4:ad:6a:e5:5b:0d:bd:73:9b:6a:12:c7:
6c:05:10:af:0a:ab:40:fd:88:c6:f3:c1:a9:92:49:
9f:c9:81:65:22:14:3a:67:11:b8:24:9f:ab:c6:f0:
cd:ce:9a:70:54:43:83:f7:a6:1b:0b:71:67:70:e5:
76:24:c0:d8:06:d5:fe:e6:29:b9:87:97:04:21:24:
48:bd:ef:86:ec:5f:3b:e5:2f:ae:a3:3b:41:29:ef:
2e:42:38:27:b2:93:5d:ed:82:38:73:60:68:d4:e1:
5b:fd:24:14:08:e5:08:5c:ac:23:35:3f:d3:02:d6:
50:60:6d:14:06:21:5b:9c:5b:5a:15:78:ff:96:13:
6f:bd:9a:c4:19:e4:36:00:99:98:cb:47:b5:eb:d7:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D4:D8:D3:1C:9B:FF:BC:EB:4A:1D:AD:BE:A7:D9:E1:4E:16:37:58
X509v3 Authority Key Identifier:
keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:50:f0:3e:de:89:1c:60:da:e2:78:0c:ea:d0:f2:76:c1:4c:
3c:95:e2:77:a2:1d:89:df:4d:b1:0a:1a:47:fc:5f:ea:23:7a:
bc:86:6b:3c:3d:70:6f:69:fe:a0:ab:8e:7f:bd:54:68:7f:6f:
ce:52:f7:68:3d:8d:97:2b:6c:81:be:e3:5b:95:89:25:d0:f5:
0c:db:d2:93:22:74:04:85:bf:23:c0:36:34:39:a6:58:f4:d0:
e6:4b:ef:f0:4a:40:2f:71:64:cd:ed:8b:2f:3f:b5:94:49:48:
a1:f8:9e:48:34:40:a0:0b:94:d3:53:3b:10:da:72:02:21:59:
d4:ca:bf:b4:52:ad:41:2f:87:66:34:b5:eb:0f:3f:10:3d:56:
4e:c8:0e:91:35:c2:b1:1f:2c:05:9e:b6:6c:80:b8:7d:2d:94:
9b:87:53:3f:d5:a9:78:43:f9:a7:01:c2:1e:c6:72:71:74:ed:
a1:46:57:19:b5:b5:a8:b4:65:94:fb:44:f9:70:b1:4a:1c:68:
b4:e7:ed:72:da:6c:98:95:df:58:66:03:d1:33:63:1f:66:de:
2c:43:2d:d1:7f:b4:a5:c8:6d:4c:3b:5c:28:16:99:91:0d:5e:
13:40:c1:69:25:26:9d:9d:7e:72:64:7f:58:d2:7e:c6:ca:d0:
97:ea:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:41 2026 by rpki-client