
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json)
Hash identifier: xTd1Wa+v6hZC35/+gSnZa3MuMoyXi0ni9toi/FJbD6Q=
Subject key identifier: 2A:2B:E1:F1:C0:EF:AA:A0:89:CC:88:E6:0F:20:C1:6F:EE:2B:14:42
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial: 140E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
Manifest number: 13D2
Signing time: Mon 02 Mar 2026 02:48:48 +0000
Manifest this update: Mon 02 Mar 2026 02:48:46 +0000
Manifest next update: Mon 09 Mar 2026 02:48:46 +0000
Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: FjQHWBQ9LSRl+CrzoAIXXOSCIq++oX5JuUPT73wYOmY=)
2: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 388AG09rRUDKvKhyNmxbF15VLGsqHkKaZsreBoM4fr8=)
3: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: WY85OZSDqgP3JecVrbLGH7yASGCrRmcqJRott+5khbE=)
4: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=)
5: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: Ip5tGE+xBmZzGbuYsKhlox7o+yVLz36sUIXrRO8cJe8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5134 (0x140e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Validity
Not Before: Mar 2 02:48:46 2026 GMT
Not After : Mar 9 02:48:46 2026 GMT
Subject: CN=69a4fa90-a21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:ea:65:23:70:e5:69:f3:a4:e3:69:fe:9a:
22:7c:54:e4:50:a4:58:1c:3e:e9:f3:75:9f:df:e5:
69:f8:82:d2:48:bf:32:fe:2a:1b:b4:a6:d3:d8:88:
49:9a:82:99:4a:59:05:a3:96:a2:98:1b:11:ad:de:
bb:c4:48:da:a4:37:da:06:d4:8b:4f:1d:ab:c9:a5:
39:a8:83:be:33:40:8f:c7:62:7c:61:ce:78:21:55:
b0:79:f0:b7:12:4b:e7:66:60:20:49:30:2a:2c:b3:
0a:95:53:34:99:0f:f3:9c:4a:6c:e8:5c:ba:6e:d2:
ab:f3:66:ac:b2:74:04:31:19:e7:ff:62:09:78:71:
37:6b:f1:50:fb:05:08:b1:a6:eb:c0:03:d8:33:b9:
58:f1:d6:f3:f7:81:a1:01:b2:61:f9:5f:9b:33:98:
54:e1:93:c7:23:d4:c8:ec:1e:e1:49:cc:1f:4e:ef:
56:6c:2d:d5:5d:84:78:9d:75:54:58:64:74:80:dc:
36:eb:7f:75:54:c5:67:02:40:28:5c:14:ab:12:39:
6f:a4:37:73:64:01:c1:9b:d9:8b:5f:25:f4:24:3c:
72:40:4e:4b:fe:bb:ca:d2:81:15:e6:37:03:19:74:
40:4b:82:da:b3:0d:a3:65:73:d0:e9:f0:0e:07:91:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2B:E1:F1:C0:EF:AA:A0:89:CC:88:E6:0F:20:C1:6F:EE:2B:14:42
X509v3 Authority Key Identifier:
keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:80:25:9d:e7:36:c6:17:2b:b6:b2:b9:69:31:44:10:b7:b8:
2c:5b:f2:0c:75:28:a4:95:1d:23:38:b4:77:e1:b7:ed:a0:e3:
6d:85:0e:d6:82:3c:96:a2:3e:48:85:e3:12:a2:45:e4:03:45:
f7:b4:5b:5f:24:a0:2c:e5:51:94:ac:9c:12:3f:ce:f2:39:ef:
73:d2:3a:7a:7e:1a:4e:f9:50:b1:a0:fb:d8:ad:72:d5:9c:c9:
06:1b:7a:b8:42:25:9e:68:c5:72:5d:d6:e3:6c:0e:a9:af:7c:
ec:0e:ba:f9:5d:e3:7e:f7:97:86:9b:d9:43:ef:54:a5:75:5e:
a2:20:51:33:91:8a:10:ce:c4:2b:31:80:b1:8d:3d:f9:b1:4e:
2a:0b:fe:3f:4a:4c:85:94:fd:c7:7e:69:fb:6e:91:d3:c8:d0:
18:7a:2d:89:1f:ad:43:e2:9a:01:3c:74:98:1e:ab:c5:b2:9f:
dd:a8:66:b6:1a:50:85:13:c9:b9:d7:0b:76:b1:d9:60:73:f9:
7f:94:d8:20:d8:7e:89:bf:1e:ef:47:0b:df:53:76:96:dc:3d:
f5:50:f4:10:fa:76:5e:fb:b6:87:e3:63:45:0e:33:0b:2b:c3:
b4:db:51:d6:95:66:f6:4a:5e:1f:62:1a:c0:84:04:8d:d1:4b:
f9:c2:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:57 2026 by rpki-client