
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
File: V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft (raw, json)
Hash identifier: xw+g43XyWD3SuQN1Jd5D7rcY2zOGqi2tq6VyYYjOsAY=
Subject key identifier: AD:1E:38:B1:B9:7C:59:FA:EA:1F:FC:11:B8:23:62:83:A2:4D:25:9A
Authority key identifier: 57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
Certificate issuer: /CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
Manifest number: FC
Signing time: Mon 02 Mar 2026 01:31:00 +0000
Manifest this update: Mon 02 Mar 2026 01:30:57 +0000
Manifest next update: Mon 09 Mar 2026 01:30:57 +0000
Files and hashes: 1: V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl (hash: DvFTKhh0VzXNyu9m6DKAMENDTfR9aFxuqALXFbfaAsA=)
2: EC509DE4501211F0BE5D2025C4F9AE02.roa (hash: L5L1ECl728HDCibYSZyhJFG9nLd5Huwk3rtZapHfWlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9, serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Validity
Not Before: Mar 2 01:30:57 2026 GMT
Not After : Mar 9 01:30:57 2026 GMT
Subject: CN=69a4e853-fd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:e6:56:c3:88:34:fc:8e:b8:5e:9e:87:aa:
11:e2:08:ea:41:89:f0:8d:4a:c5:df:c7:fe:47:9e:
65:8e:d2:43:67:8f:06:dc:b9:8a:b0:22:48:53:1f:
ec:09:45:b8:8b:c6:3e:10:99:58:63:a0:80:fa:81:
7d:73:f3:bc:33:d6:d0:2c:39:81:4e:1e:14:9a:d1:
74:89:a9:27:57:f8:2a:34:6f:55:33:49:ff:c0:cf:
ee:5a:04:ca:a4:c1:cd:a3:41:84:1a:f2:2f:b5:30:
60:c0:11:14:4d:b5:cb:23:5e:5e:9e:94:97:56:53:
3a:46:92:14:7d:6e:64:0b:f5:cc:fc:17:99:ea:f4:
7a:6d:a3:07:0c:e9:9d:c8:a9:ff:76:d0:26:d6:3a:
02:2c:45:8e:ac:b3:8c:d5:3d:de:3f:c7:7a:d3:10:
3e:c9:c5:52:4a:27:9c:c5:c2:d8:48:01:cf:3d:cf:
7c:23:c3:24:1a:79:71:7c:65:c5:19:4a:d3:26:93:
ce:11:a1:14:93:39:93:7e:94:cf:4e:0f:f0:72:71:
e7:55:3a:0e:5e:22:5c:8c:af:ca:d7:93:e8:81:c5:
02:ea:36:a7:63:c6:0a:63:16:cd:19:de:55:0c:8f:
d0:90:e6:80:e5:95:cd:db:b4:fb:ea:91:b2:ea:81:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1E:38:B1:B9:7C:59:FA:EA:1F:FC:11:B8:23:62:83:A2:4D:25:9A
X509v3 Authority Key Identifier:
keyid:57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:79:76:cd:c7:28:1c:86:1b:4c:12:42:7e:74:e2:41:3d:86:
e6:e2:22:10:fd:4b:e9:35:66:dc:ec:00:fe:b6:24:9a:c2:43:
06:78:f9:a1:b6:20:b8:fa:40:09:56:ae:f8:b9:b2:47:8c:05:
76:0b:28:40:02:3c:87:e5:10:b6:d8:b6:27:36:92:10:70:d4:
91:33:c3:f3:21:92:1d:92:3c:e2:92:22:af:bc:10:ff:2d:cc:
d9:40:df:d0:ae:e2:55:52:99:b4:c7:19:b6:32:44:f2:ad:0b:
89:2f:40:f2:04:1f:68:fc:81:40:fa:7a:a0:63:e1:2d:f0:03:
cd:20:70:f6:74:e2:88:e9:aa:01:74:82:f0:a2:86:29:c6:2b:
17:82:e6:19:d5:91:53:fa:8e:52:83:24:97:90:a6:38:48:97:
6e:5c:a5:7a:38:0f:d1:7b:e1:7c:8d:70:85:54:40:22:8d:c8:
f7:ef:1e:eb:5a:1e:f0:b5:69:77:b4:68:59:a2:a5:d1:f5:2e:
3c:48:7f:c8:d1:db:28:5b:9a:21:58:fb:a8:27:1b:78:65:b8:
ed:4b:8c:a3:a7:48:fd:7a:37:63:d0:00:0b:5e:30:30:db:14:
e9:82:2f:de:ac:9b:08:e3:01:f7:01:ac:e0:9f:ba:d6:fb:92:
4d:eb:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:09 2026 by rpki-client