
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json)
Hash identifier: /VbxXxnnPjiNPXlhXzz0DVgleq0ihK2C+bMD3gKSR88=
Subject key identifier: 09:E2:D1:BC:10:71:23:E6:36:C5:9E:A8:B1:E9:60:5D:11:76:58:63
Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44
Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
Manifest number: 72
Signing time: Sun 01 Mar 2026 09:13:34 +0000
Manifest this update: Sun 01 Mar 2026 09:13:34 +0000
Manifest next update: Sun 08 Mar 2026 09:13:34 +0000
Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: sQqsx5EcFJKmX+dmGcmRltxo/PuNETFrgw6xHDYfGGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl
rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44
Validity
Not Before: Mar 1 09:13:34 2026 GMT
Not After : Mar 8 09:13:34 2026 GMT
Subject: CN=69a4033e-4e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:d5:36:c7:af:6a:03:e6:7d:e2:65:37:59:
04:63:37:b2:dd:2e:7c:fb:a8:1d:21:1a:49:f3:a2:
c0:f4:60:87:a0:65:3b:0f:6b:b3:9a:ad:54:2f:06:
5b:70:01:da:a3:5b:da:2d:d7:1b:e9:d4:55:cd:13:
cb:13:62:28:00:e5:4d:6c:7e:ff:7b:ef:c3:e6:74:
bb:0a:4c:f0:34:ea:a1:c2:56:e9:a7:7a:2a:e3:8a:
d5:fa:fe:81:c5:01:06:25:62:b8:47:af:68:c5:7f:
25:78:4c:a8:8b:a8:81:9a:90:2c:54:34:49:be:49:
fe:d8:3c:63:6e:ed:98:6f:e6:6b:d2:4f:5e:38:57:
83:22:44:d0:18:91:af:a1:c4:30:3b:82:c3:5b:a7:
da:4c:d3:7b:94:e1:ad:7a:63:cf:11:fe:6f:8f:e1:
c7:2a:03:f9:90:c1:df:9c:ba:3d:4d:84:b4:ef:28:
f8:3f:a3:8c:6d:c1:aa:28:01:ca:87:6e:34:0a:fa:
52:1d:a7:5e:87:0a:d2:c2:e0:59:41:17:93:28:5f:
99:e8:18:43:0d:79:c1:5f:19:26:5b:f3:d3:f9:a1:
c2:3b:b2:5b:71:d5:b2:29:09:15:d7:dd:0f:40:10:
b4:09:c2:8e:e1:4c:73:23:51:86:56:f5:d3:6c:bd:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E2:D1:BC:10:71:23:E6:36:C5:9E:A8:B1:E9:60:5D:11:76:58:63
X509v3 Authority Key Identifier:
keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6b:52:a9:24:09:84:f5:0a:1a:35:a5:3c:89:48:ba:17:0e:
9e:5f:ad:27:16:ba:96:91:84:15:61:14:d2:93:e3:2e:fe:ab:
75:fa:d4:c9:a2:ab:73:42:c1:b8:c1:2a:f7:5c:fd:41:07:91:
ce:5e:10:16:9e:96:91:f6:2a:06:bb:c6:2f:32:c4:3b:66:0d:
28:a5:bf:fa:be:e0:c4:50:33:e3:05:53:9f:c3:dc:59:0d:09:
4b:d1:35:d4:d3:a0:3a:60:be:f3:42:c4:e2:f7:7a:e8:02:bb:
1c:40:64:31:5e:7f:0e:4c:64:e5:56:b3:af:eb:ed:a9:94:50:
55:86:be:a4:24:43:34:21:77:c0:aa:8b:f8:df:df:4d:05:f7:
d4:67:10:1e:6e:08:b6:83:2f:d0:37:48:65:91:45:42:e3:22:
47:bf:57:75:0e:df:b7:d9:33:b5:53:24:84:a8:94:da:04:a2:
f5:20:3e:a9:d5:c6:95:4e:84:70:88:85:6d:56:05:b6:0d:b4:
97:19:45:91:23:26:51:22:44:46:d8:9b:64:a1:22:17:27:14:
2a:c2:b2:a7:2b:f9:78:6d:30:4e:c5:23:41:a3:3d:ab:36:63:
b2:96:d6:63:d8:b3:ad:b1:e0:b4:fb:6f:54:87:22:d9:1d:1b:
f4:68:64:b8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RkRDMDExMC8GA1UEBRMoMTE3QzBENkQxOUJGQkE0OEI1RkE5RTUxN0QwRTY5MjY1
NUM5OEM0NDAeFw0yNjAzMDEwOTEzMzRaFw0yNjAzMDgwOTEzMzRaMBgxFjAUBgNV
BAMTDTY5YTQwMzNlLTRlNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEMdU2x69qA+Z94mU3WQRjN7LdLnz7qB0hGknzosD0YIegZTsPa7OarVQvBltw
AdqjW9ot1xvp1FXNE8sTYigA5U1sfv9778PmdLsKTPA06qHCVumneirjitX6/oHF
AQYlYrhHr2jFfyV4TKiLqIGakCxUNEm+Sf7YPGNu7Zhv5mvST144V4MiRNAYka+h
xDA7gsNbp9pM03uU4a16Y88R/m+P4ccqA/mQwd+cuj1NhLTvKPg/o4xtwaooAcqH
bjQK+lIdp16HCtLC4FlBF5MoX5noGEMNecFfGSZb89P5ocI7sltx1bIpCRXX3Q9A
ELQJwo7hTHMjUYZW9dNsvbX1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCeLRvBBx
I+Y2xZ6oselgXRF2WGMwHwYDVR0jBBgwFoAUEXwNbRm/uki1+p5RfQ5pJlXJjEQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzMzMTFGMEVFNjlF
OTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpF
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRVh3TmJSbV91a2kxLXA1UmZRNXBKbFhKakVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG
REMwLzMzMTFGMEVFNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtp
MS1wNVJmUTVwSmxYSmpFUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCNa1KpJAmE9QoaNaU8iUi6Fw6eX60nFrqWkYQVYRTSk+Mu/qt1+tTJoqtzQsG4
wSr3XP1BB5HOXhAWnpaR9ioGu8YvMsQ7Zg0opb/6vuDEUDPjBVOfw9xZDQlL0TXU
06A6YL7zQsTi93roArscQGQxXn8OTGTlVrOv6+2plFBVhr6kJEM0IXfAqov4399N
BffUZxAebgi2gy/QN0hlkUVC4yJHv1d1Dt+32TO1UySEqJTaBKL1ID6p1caVToRw
iIVtVgW2DbSXGUWRIyZRIkRG2JtkoSIXJxQqwrKnK/l4bTBOxSNBoz2rNmOyltZj
2LOtseC0+29UhyLZHRv0aGS4
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:04 2026 by rpki-client