
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json)
Hash identifier: Ff31tn1niv1TXNSKx8Td/mDjUNsnucMwIUxadedqV+s=
Subject key identifier: FE:45:E1:19:4C:6F:3A:85:DB:8C:80:42:F7:30:8A:38:0D:80:CC:9E
Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Certificate serial: 3641
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
Manifest number: 35C4
Signing time: Sat 28 Feb 2026 15:01:49 +0000
Manifest this update: Sat 28 Feb 2026 15:01:48 +0000
Manifest next update: Sat 07 Mar 2026 15:01:48 +0000
Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: UuBiO5P2WJm2zW3VZhlKEFI4Nh2aG4WelVlMj1Wr/uE=)
2: 3229DF800D4411F18F949964113D8C67.roa (hash: VnTmTApvAIWDguSv670n0pKj8/aX+2wzZtEcl6yBt2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13889 (0x3641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Validity
Not Before: Feb 28 15:01:48 2026 GMT
Not After : Mar 7 15:01:48 2026 GMT
Subject: CN=69a3035d-ae9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:2a:c0:54:17:bc:88:c9:2b:53:39:c9:28:
f0:39:98:a3:12:20:71:2c:93:21:c4:16:a0:8d:7f:
67:2f:d2:ff:2e:69:07:d0:31:92:0a:91:e7:a0:15:
02:88:21:bd:5c:24:72:55:62:73:76:3f:e1:1b:0c:
c9:74:8c:81:ef:73:cc:f6:74:0a:f8:00:a7:c7:29:
fc:2d:56:3b:fd:ca:a5:2c:a0:e9:f4:fe:a7:75:80:
13:38:1f:82:94:75:97:4f:b3:3a:94:81:bc:14:26:
9c:dc:68:42:bd:10:ca:f0:e2:dd:ac:de:24:4d:da:
1a:66:a9:28:c1:99:9b:ad:de:7e:dd:e8:f5:d5:4d:
ef:a0:dd:cd:7f:75:c5:c8:55:8a:f1:21:ce:8c:8c:
30:40:07:54:d3:42:49:d1:89:9d:f1:3b:65:2f:b0:
82:a0:da:6f:8f:e2:11:47:1a:e8:d8:4d:47:54:f9:
a0:6b:01:13:67:cf:e7:5d:57:e3:55:58:5f:ec:44:
1d:e9:be:42:f8:cf:db:8d:a0:58:7c:36:b3:22:f6:
13:77:88:23:f0:6c:d7:16:63:bd:04:68:bf:b2:8b:
7a:b9:0c:e9:c8:17:50:4d:0d:09:66:ce:6c:1d:a0:
ba:36:49:1a:65:2d:7b:74:00:65:cb:27:51:b8:50:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:E1:19:4C:6F:3A:85:DB:8C:80:42:F7:30:8A:38:0D:80:CC:9E
X509v3 Authority Key Identifier:
keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:bb:42:97:16:be:03:90:df:c7:14:f2:cf:3f:1a:9c:6c:48:
e8:d3:86:1f:15:9b:74:2b:73:29:ae:59:d7:8c:c4:0b:17:5c:
b0:ab:bc:12:a4:f6:b5:d7:17:bf:77:5e:b0:c9:b5:b6:79:c3:
15:05:ec:fd:00:e9:8c:5b:7a:ff:09:1f:c0:68:8e:6a:2a:2e:
c3:3f:b1:32:cd:97:90:38:03:de:2e:95:65:80:5a:57:78:07:
21:f2:56:e4:aa:89:d1:de:ba:ca:44:34:37:1e:3f:be:0c:41:
a4:80:0f:2d:cd:95:02:1a:b5:ee:1f:cb:e2:25:01:a1:93:c5:
aa:be:d3:54:1e:c4:4b:72:6e:63:ba:40:e8:fc:62:ad:dd:12:
d7:3d:06:4a:d3:2e:f4:eb:20:70:97:9d:65:34:56:0b:56:83:
92:ca:a8:f2:06:58:ba:0b:c6:19:a9:c1:0e:2a:a9:d3:d0:90:
e4:29:11:d3:70:c3:67:70:ea:a4:c4:4f:6b:59:c3:0a:ed:b7:
f0:9b:3a:1c:a8:9c:f4:5b:8f:92:e1:0a:c6:fe:ed:63:31:92:
6b:c1:53:e7:94:40:63:73:95:b8:be:5c:be:0b:a8:a3:65:14:
2a:a7:0d:d8:c2:dc:dc:b3:1c:db:69:ed:ad:aa:fb:07:60:af:
71:8f:f7:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD
ODA1MkM2NEUwHhcNMjYwMjI4MTUwMTQ4WhcNMjYwMzA3MTUwMTQ4WjAYMRYwFAYD
VQQDDA02OWEzMDM1ZC1hZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0+oqwFQXvIjJK1M5ySjwOZijEiBxLJMhxBagjX9nL9L/LmkH0DGSCpHnoBUC
iCG9XCRyVWJzdj/hGwzJdIyB73PM9nQK+ACnxyn8LVY7/cqlLKDp9P6ndYATOB+C
lHWXT7M6lIG8FCac3GhCvRDK8OLdrN4kTdoaZqkowZmbrd5+3ej11U3voN3Nf3XF
yFWK8SHOjIwwQAdU00JJ0Ymd8TtlL7CCoNpvj+IRRxro2E1HVPmgawETZ8/nXVfj
VVhf7EQd6b5C+M/bjaBYfDazIvYTd4gj8GzXFmO9BGi/sot6uQzpyBdQTQ0JZs5s
HaC6NkkaZS17dABlyydRuFCm7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5F4RlM
bzqF24yAQvcwijgNgMyeMB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE
OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H
dWxralVrR2hBV0RJQlN4azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhbtClxa+A5DfxxTyzz8anGxI6NOGHxWbdCtzKa5Z14zECxdcsKu8EqT2tdcX
v3desMm1tnnDFQXs/QDpjFt6/wkfwGiOaiouwz+xMs2XkDgD3i6VZYBaV3gHIfJW
5KqJ0d66ykQ0Nx4/vgxBpIAPLc2VAhq17h/L4iUBoZPFqr7TVB7ES3JuY7pA6Pxi
rd0S1z0GStMu9OsgcJedZTRWC1aDksqo8gZYugvGGanBDiqp09CQ5CkR03DDZ3Dq
pMRPa1nDCu238Js6HKic9FuPkuEKxv7tYzGSa8FT55RAY3OVuL5cvguoo2UUKqcN
2MLc3LMc22ntrar7B2CvcY/3xA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:14 2026 by rpki-client