
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
File: 62LfxzSiW8FU02epjPJ-0W9B6tA.mft (raw, json)
Hash identifier: QEVJ2PBvNkQ7jWTAfVM1+qLiEwe6/7StJUhHmhMsfAk=
Subject key identifier: 25:59:2A:BA:EF:70:98:87:51:55:7E:13:6C:FA:68:17:50:19:62:76
Authority key identifier: EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0
Certificate issuer: /CN=A919D209/serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
Certificate serial: 07CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
Manifest number: 07BB
Signing time: Mon 02 Mar 2026 00:13:43 +0000
Manifest this update: Mon 02 Mar 2026 00:13:42 +0000
Manifest next update: Mon 09 Mar 2026 00:13:41 +0000
Files and hashes: 1: 62LfxzSiW8FU02epjPJ-0W9B6tA.crl (hash: Ut5rV6yvh+rLoJE/hYXntXUxOfSR34j+LWZ0OnduBbw=)
2: 1C64580A4F6111ED9365FC4AC4F9AE02.roa (hash: 7DXtwSwU/C4iovO/6DBIhc26z7olkA5c3kZppgmFDQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl
rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995 (0x7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D209, serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
Validity
Not Before: Mar 2 00:13:42 2026 GMT
Not After : Mar 9 00:13:41 2026 GMT
Subject: CN=69a4d637-bd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:5b:45:6d:cb:5d:22:f2:f1:0d:bd:9c:14:
85:a0:a6:d0:4c:a5:ff:1e:41:a2:64:ae:f9:39:f8:
80:fd:74:97:51:19:ca:f2:aa:a7:22:41:38:43:c0:
b7:96:96:1d:8d:78:72:fb:25:f8:78:e2:82:de:02:
64:6b:a4:c7:34:db:69:af:b5:87:8c:36:5f:01:9f:
41:5c:be:5c:d8:a7:51:a3:60:22:52:52:4f:81:e9:
88:75:da:13:31:f8:0c:1f:22:63:e0:a2:cc:a8:a9:
ce:62:24:b8:aa:75:2f:ef:41:4f:37:64:8a:db:bc:
ab:d5:af:33:cd:6b:e5:d1:44:c0:d7:68:ec:dd:48:
7b:db:95:7f:49:c3:0e:65:73:69:ca:c2:b1:60:f1:
e2:84:c7:c9:54:bf:19:e9:d5:af:48:55:d2:eb:39:
26:9b:3d:01:9f:bc:df:84:a2:dc:58:5f:e0:e6:4f:
82:17:51:81:de:3a:fb:c9:da:05:83:68:8b:e8:95:
49:3b:0c:19:17:ff:0f:88:af:3e:f3:2d:1f:ba:44:
d3:ce:73:33:22:7f:f2:ec:0f:c7:2e:90:2a:ff:ca:
17:f9:0a:3b:cd:de:72:f7:40:d5:a5:ec:f2:f9:3d:
32:a9:d6:cf:22:ff:ab:75:f3:5a:5b:c2:4a:56:e8:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:59:2A:BA:EF:70:98:87:51:55:7E:13:6C:FA:68:17:50:19:62:76
X509v3 Authority Key Identifier:
keyid:EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:5e:2a:7b:62:6d:dd:e8:fd:12:0b:bc:a1:2c:f3:b7:84:
77:c1:79:59:8a:9d:3b:3a:d2:ac:7f:b0:fb:26:e0:3c:0c:58:
1d:74:41:0d:86:3f:b3:b7:a4:82:92:d7:df:18:47:e8:11:ec:
3c:51:e0:40:fb:af:25:3a:51:e3:eb:76:e5:de:f0:07:69:a6:
86:d4:73:64:28:56:cb:f9:04:1d:27:10:9d:68:7f:72:4b:89:
87:29:4e:7b:40:9a:d9:1d:9f:83:1b:52:06:eb:02:d1:9d:29:
93:db:8a:b7:67:a4:9f:f3:0f:d8:85:c2:84:19:c6:36:50:07:
d7:81:13:10:2a:4e:9d:d7:31:c5:9b:cf:aa:00:00:98:59:06:
7d:ce:94:86:93:71:79:d5:93:5a:a2:8f:c9:39:54:2c:57:f2:
f7:e4:65:bf:e4:8f:16:9a:2b:ac:9d:87:fc:7b:24:21:67:00:
5c:43:f2:6f:25:db:a0:9b:89:43:96:3b:d6:d5:58:c6:7c:e2:
b8:b5:8b:a6:80:a2:ce:3f:66:fa:30:14:40:bb:23:65:76:a4:
de:a6:af:cf:0f:67:69:c7:93:28:a9:73:71:94:35:77:b8:ce:
83:ac:47:b8:9f:24:37:28:ba:d9:fe:1f:cf:15:7c:a0:95:5e:
06:5f:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:13 2026 by rpki-client