
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json)
Hash identifier: O6xB/kvfl1Tk3InDZNvhP/dERMKYerD5FFFZLRBK5ls=
Subject key identifier: 9F:23:31:07:49:1D:CF:3D:1A:60:33:56:9C:60:B6:5C:11:0B:2A:F3
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
Manifest number: 024B
Signing time: Sun 01 Mar 2026 03:19:44 +0000
Manifest this update: Sun 01 Mar 2026 03:19:43 +0000
Manifest next update: Sun 08 Mar 2026 03:19:43 +0000
Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: eYtFGcqvTEKYqiC/8XxHgJgXJxyN8L4T77vqhey0UTM=)
2: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: UYQj695a2OmzGWejM8q0zjVy0UfE2w5YDuGLHHyUkKE=)
3: E98F15362B3811EF926F1555C4F9AE02.roa (hash: huhcBlB6kInuEcW0eyepHJy04Qrnm/zwE5F/lbsIg4U=)
4: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: QE//TTd8y+NKPY9SFnvheS4pfkoCI9qiU5fU+9iwaFc=)
5: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: K7ih6dZEP7tPsDE029yQg9J9G2EoOjYxEh23BSXqdx4=)
6: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: wWTFLfND3EADAPn3/677/3gOc92RXHanLyJ2ZQO9E5Y=)
7: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: qqBFkEJNiWCb2cCDSNMAUnOoY6M5apd24HqIJ4T1rMk=)
8: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 0osuZSPKtRbkTEe2rjpJx0+V/IP2FJnFJRtn1br7+ws=)
9: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: xEdof+9upKEPJ5nZ8zJI+L9OfNurTTcojEoj01Jch2s=)
10: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: UdSNL+M5bhbjwAkTjKkIwiTAoopRDA15sbVDq+xd/Mo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: Mar 1 03:19:43 2026 GMT
Not After : Mar 8 03:19:43 2026 GMT
Subject: CN=69a3b04f-bb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:85:a2:2f:67:f4:e7:0d:55:7b:05:c4:7a:
29:f5:fa:0f:b3:06:c7:ec:62:a9:19:83:15:82:cd:
71:41:af:20:e4:47:d9:6c:dc:09:c5:d2:2d:69:2d:
ed:d3:96:1b:39:60:33:b1:4f:15:62:ca:3f:aa:64:
77:08:60:9f:72:10:43:17:e4:07:88:e6:7f:d5:f0:
df:9d:f5:52:b0:a5:c5:23:93:b8:a9:32:95:c0:0f:
4c:85:24:34:60:60:86:d0:b9:a8:23:7a:51:da:ea:
f1:6f:5e:ef:97:87:0a:09:b2:6d:05:23:41:10:e2:
fa:6a:3e:d0:97:d2:9b:1a:8a:01:b5:72:49:a9:4d:
47:ff:fe:cd:c2:9d:fb:d1:95:25:07:03:8f:a0:03:
48:46:29:91:c6:9f:bf:05:9c:db:71:35:d3:32:41:
8f:5d:41:f5:f7:b9:8e:cf:ca:3b:cd:c8:6a:80:37:
87:39:d7:cd:e0:d2:b0:84:3e:88:12:9a:6b:bc:6f:
ad:56:11:7f:ea:c2:0a:f4:da:dd:58:4e:47:e9:88:
7c:1b:5c:21:b2:3c:a9:a0:e8:3a:e9:33:0a:76:83:
c5:2c:a2:d7:d0:eb:cf:d1:bf:7d:5f:ca:15:18:b7:
bb:49:04:16:6a:34:a4:a1:4b:00:9d:3f:c7:e8:73:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:23:31:07:49:1D:CF:3D:1A:60:33:56:9C:60:B6:5C:11:0B:2A:F3
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:dd:d8:df:25:a9:14:2f:0b:7a:50:4e:3a:91:a4:cc:20:5b:
ec:09:13:d0:aa:6a:db:fc:0e:14:4b:d9:86:96:34:df:d4:68:
ef:6f:12:61:02:53:0b:5a:1f:69:0e:b6:41:49:aa:2a:3f:01:
da:10:e6:24:e2:0c:a1:4d:4a:e6:ca:8b:4c:63:bc:ad:63:07:
25:8e:d7:e1:47:c0:a7:39:3e:b0:70:5c:e1:4f:a1:5c:72:73:
8a:37:0e:a6:a2:83:84:31:3b:fc:5f:a2:33:9e:ea:96:8c:85:
b1:9e:05:73:18:2d:0f:2b:6e:d5:28:30:27:09:5e:37:26:7e:
b8:b4:84:0f:0e:92:6b:27:b2:0c:08:34:4b:c0:8b:af:33:b6:
0f:f2:41:1c:0d:73:9f:7d:e5:c0:28:40:4c:d4:b0:de:9f:8f:
34:d4:6f:ae:f8:d9:91:31:72:75:56:05:5f:f4:f7:f5:39:5b:
3d:a7:fa:58:2e:cb:13:8a:83:86:0a:48:0f:97:1c:5e:91:04:
ed:c0:12:3f:c0:68:26:1a:45:22:c1:53:8c:0b:cb:00:b3:3f:
b2:12:ac:9e:53:46:e4:56:b6:a2:f2:09:32:25:2b:24:75:98:
7e:13:8a:ae:4d:c4:6c:65:bd:90:19:9b:fb:ca:d3:75:68:54:
e9:6f:20:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:15 2026 by rpki-client