
$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File: cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier: tSUgDu4y6/pPCP4IH3cxWhVdbJSfAvLNfoRmLTN5vKY=
Subject key identifier: 14:BF:DE:7C:32:75:0B:16:6C:91:CB:79:D9:6A:F4:42:5D:E3:91:31
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial: 084A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number: 0825
Signing time: Tue 24 Mar 2026 20:50:56 +0000
Manifest this update: Tue 24 Mar 2026 20:50:55 +0000
Manifest next update: Tue 31 Mar 2026 20:50:55 +0000
Files and hashes: 1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: o5IuXTBT+WO8s5/TRQrftj8W6xTneTraAC9elfHomQE=)
2: 98657342132E11F0B588DB49C4F9AE02.roa (hash: JCJRG4VAuLHojbqM1I84ViUqh9cmMJw1mlHFDwmiI6Y=)
3: 99551366132E11F0B588DB49C4F9AE02.roa (hash: CxMxfeHWIPWzcUYsK59EkKygPorxgaRRnTZPZSJ03X4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122 (0x84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Validity
Not Before: Mar 24 20:50:55 2026 GMT
Not After : Mar 31 20:50:55 2026 GMT
Subject: CN=69c2f92f-f060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:32:38:e5:e1:a1:53:56:b6:25:a5:48:52:
bb:2b:89:c0:8b:df:47:0b:04:77:62:91:09:42:bd:
aa:c5:f0:77:49:c1:1a:c5:37:cf:64:a9:32:a2:88:
46:2b:4e:c5:3b:4c:4f:ee:51:29:59:0a:e6:78:57:
23:33:a1:f7:24:66:8d:55:d4:9d:00:16:6b:30:1e:
c9:66:c2:4c:e6:09:18:65:b1:4a:7d:29:4d:60:15:
60:e5:8b:66:f0:88:45:8a:24:3d:f2:6d:2a:93:a7:
e4:5e:cf:37:b1:1d:18:cb:5b:ad:94:1a:71:0a:9a:
5e:de:8e:68:3f:55:bc:72:1b:70:7e:75:c8:da:8a:
cb:d2:56:54:a7:36:4f:7a:4a:b3:a8:a5:ea:b2:b1:
0a:d0:c2:93:a8:76:af:27:52:55:ee:e6:7a:92:e0:
e2:fb:74:43:e2:1c:01:91:09:db:59:cc:9f:0e:8f:
c0:59:03:2e:d3:4a:a8:99:d0:96:eb:7f:e9:f1:1c:
21:ff:55:71:91:b0:0c:05:75:e6:d1:9b:e6:8b:e7:
68:3f:fa:49:ac:e4:e4:b9:44:cf:4f:b3:05:03:4a:
d0:de:61:a0:05:8b:fe:4d:6b:54:c6:4d:44:00:90:
d6:ff:32:42:ff:42:6b:af:47:30:fb:a1:4d:59:a1:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:DE:7C:32:75:0B:16:6C:91:CB:79:D9:6A:F4:42:5D:E3:91:31
X509v3 Authority Key Identifier:
keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:83:be:ed:c6:ef:aa:49:0f:72:5a:57:03:b3:62:c9:f9:
db:b0:3a:92:85:07:a9:ef:d8:2e:44:3a:a8:bb:b5:00:23:69:
26:82:bb:96:b9:d1:60:8b:e8:5e:ee:e1:5d:bc:af:46:32:ef:
19:90:90:5b:02:1a:5c:98:cb:92:07:9e:a5:b6:ae:b9:92:af:
d6:6e:e4:08:72:e0:ab:6a:ea:af:e7:41:49:a5:0c:50:99:94:
b3:dd:3e:58:06:a4:3c:04:24:7b:9f:54:02:bc:10:27:48:34:
2a:9a:75:f4:a0:4c:00:db:19:6b:da:4b:5c:1c:6a:21:ee:d0:
ca:1e:3b:d9:50:92:db:e3:48:76:85:ef:4c:61:f6:f2:0b:80:
73:48:90:60:e7:8a:b0:1b:f2:48:52:63:05:d4:cf:18:61:d3:
81:06:c2:0c:b3:f5:4a:ee:ab:a2:87:da:91:a0:1e:a5:a8:94:
7e:57:aa:82:62:47:9e:3b:9c:d4:a6:ae:08:88:5e:44:ac:57:
15:a0:4a:ee:dc:05:6a:81:21:6b:6a:bb:32:45:56:9b:19:8f:
cb:ee:51:5f:11:30:3c:f1:94:4d:29:c1:8a:cd:58:cb:9e:1a:
a8:f4:9b:13:32:3b:d3:c0:73:dd:f6:90:2c:3b:ff:28:7d:d1:
72:10:92:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC
NzM1NzZFOEEwHhcNMjYwMzI0MjA1MDU1WhcNMjYwMzMxMjA1MDU1WjAYMRYwFAYD
VQQDEw02OWMyZjkyZi1mMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4YyOOXhoVNWtiWlSFK7K4nAi99HCwR3YpEJQr2qxfB3ScEaxTfPZKkyoohG
K07FO0xP7lEpWQrmeFcjM6H3JGaNVdSdABZrMB7JZsJM5gkYZbFKfSlNYBVg5Ytm
8IhFiiQ98m0qk6fkXs83sR0Yy1utlBpxCppe3o5oP1W8chtwfnXI2orL0lZUpzZP
ekqzqKXqsrEK0MKTqHavJ1JV7uZ6kuDi+3RD4hwBkQnbWcyfDo/AWQMu00qomdCW
63/p8Rwh/1VxkbAMBXXm0Zvmi+doP/pJrOTkuUTPT7MFA0rQ3mGgBYv+TWtUxk1E
AJDW/zJC/0Jrr0cw+6FNWaGq8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBS/3nwy
dQsWbJHLedlq9EJd45ExMB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3
OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODA3RS9DNEI0RTJDNjE3OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhI
RWpZMUJhQ21UZE8zTlhib28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAhaDvu3G76pJD3JaVwOzYsn527A6koUHqe/YLkQ6qLu1ACNpJoK7lrnRYIvo
Xu7hXbyvRjLvGZCQWwIaXJjLkgeepbauuZKv1m7kCHLgq2rqr+dBSaUMUJmUs90+
WAakPAQke59UArwQJ0g0Kpp19KBMANsZa9pLXBxqIe7Qyh472VCS2+NIdoXvTGH2
8guAc0iQYOeKsBvySFJjBdTPGGHTgQbCDLP1Su6roofakaAepaiUfleqgmJHnjuc
1KauCIheRKxXFaBK7twFaoEha2q7MkVWmxmPy+5RXxEwPPGUTSnBis1Yy54aqPSb
EzI708Bz3faQLDv/KH3RchCS3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:15 2026 by rpki-client