
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
File: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json)
Hash identifier: cOaLjc5KgnCQeTH33CTVn8Zzek0h6UgwpvKZR9afUFw=
Subject key identifier: C6:52:CE:12:71:F6:C6:B5:23:82:E0:08:58:7C:89:03:D7:71:C6:86
Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
Manifest number: 0164
Signing time: Wed 25 Mar 2026 04:10:34 +0000
Manifest this update: Wed 25 Mar 2026 04:10:34 +0000
Manifest next update: Wed 01 Apr 2026 04:10:34 +0000
Files and hashes: 1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: gkaI8+71aitvD37onicurj8phuj8MMNlEvEafmdvKmI=)
2: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: GMH8Mkw5UtCZ2ecpJ5boAvlU18bo2a/WaY9Trybc1hM=)
3: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: SdoiMB3cI4u8HjKrMgLLjZnLcpnFdg9nX+E7fYNcKQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Validity
Not Before: Mar 25 04:10:34 2026 GMT
Not After : Apr 1 04:10:34 2026 GMT
Subject: CN=69c3603a-9324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:7a:63:de:e3:5c:79:6f:6f:7c:01:2c:ca:
2b:d0:71:b1:3f:07:34:5f:43:bc:8a:27:ac:40:6b:
6b:9e:9c:44:21:5f:4e:ab:80:9d:50:d1:8f:16:02:
98:c2:09:9f:87:0f:e4:8e:80:d7:d2:90:35:22:be:
dd:70:6f:f5:89:6d:3a:cc:a5:4f:b4:90:28:39:48:
84:a0:64:e6:10:8b:9f:c1:15:73:2b:a3:ca:73:e6:
ae:d9:f2:e6:82:59:b5:37:70:fb:2f:9f:6b:be:5f:
d1:f2:aa:79:5a:8c:57:af:a4:76:a7:e2:fd:a8:cb:
3e:4b:ad:a1:e1:5a:7a:79:17:db:8e:ac:37:3d:dd:
d4:35:3b:5b:ee:5c:21:b1:bf:6c:ce:02:36:12:b1:
73:ed:ec:d1:16:3a:e2:e6:7c:34:bf:77:4a:a5:32:
64:27:9d:77:07:30:59:51:c8:27:ac:59:ef:bb:03:
dc:93:90:86:04:b9:ea:c0:b7:d6:2e:c0:80:b7:17:
d7:e0:c6:a3:87:4c:7d:d0:72:1e:28:b8:76:62:02:
04:9e:57:d1:2e:e3:7b:78:c6:e6:af:8a:dd:a7:fa:
38:a6:e2:fe:66:8e:6f:32:52:ba:e8:7a:38:11:68:
25:d5:3e:e2:10:9c:ab:26:d8:dd:0d:42:5b:3b:d7:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:52:CE:12:71:F6:C6:B5:23:82:E0:08:58:7C:89:03:D7:71:C6:86
X509v3 Authority Key Identifier:
keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:11:65:7f:6d:0c:e8:a2:a6:cc:1d:ef:a6:31:f2:07:29:7d:
4d:e4:65:29:5b:d2:83:79:6f:4c:a7:a9:69:af:b3:0f:42:8a:
ab:3a:d8:3d:2e:ee:71:9e:ee:6b:93:fb:19:3b:65:7c:72:60:
5e:27:e0:75:a3:3f:09:68:c7:0b:36:ff:50:f3:6a:9c:f8:4a:
f0:e3:47:a4:b2:50:a9:9a:22:2b:99:83:53:f0:94:55:96:7a:
c4:53:e0:c7:13:d9:bd:1f:4e:bd:56:b4:bd:60:9f:2c:4f:c2:
6c:1f:99:02:0a:f6:ac:0d:42:fb:8b:30:bd:bb:e9:ef:7b:ad:
b4:54:07:f9:f7:19:ff:2e:c8:cb:68:b1:07:8a:63:84:74:9b:
a6:fe:58:5c:8d:0d:18:f4:b7:8d:c0:aa:d1:3c:fc:21:83:72:
12:75:c3:85:3c:79:21:93:ae:f4:a3:d6:0d:21:4d:8f:7a:f0:
bb:6d:e0:9f:fc:f8:f1:d8:d9:74:30:4f:ad:53:0c:26:31:68:
a3:06:2e:43:e5:4c:d2:ec:ef:25:88:9b:02:ec:a2:4e:f2:c0:
1e:c3:1c:fc:ec:74:46:dd:18:b7:8b:dc:e0:3d:18:be:a8:2b:
e6:d4:bf:32:fc:f4:5b:4d:68:50:80:0e:65:df:0d:8a:62:e6:
fe:41:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:01 2026 by rpki-client