
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.mft
File: V2clsMbYVbVNImohjbOo5-9uerk.mft (raw, json)
Hash identifier: r9CNz2ZCIuwXeSb78Ak7LGXxQsUt0Fg7j6MZdyFTDDE=
Subject key identifier: 35:21:24:A3:FD:9E:CE:CA:16:AE:00:9C:91:5B:04:2A:A3:AB:62:8D
Authority key identifier: 57:67:25:B0:C6:D8:55:B5:4D:22:6A:21:8D:B3:A8:E7:EF:6E:7A:B9
Certificate issuer: /CN=A911BC38/serialNumber=576725B0C6D855B54D226A218DB3A8E7EF6E7AB9
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2clsMbYVbVNImohjbOo5-9uerk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.mft
Manifest number: 5E
Signing time: Wed 25 Mar 2026 07:15:00 +0000
Manifest this update: Wed 25 Mar 2026 07:15:00 +0000
Manifest next update: Wed 01 Apr 2026 07:15:00 +0000
Files and hashes: 1: V2clsMbYVbVNImohjbOo5-9uerk.crl (hash: 64UNfDaghHHs8Q9WtWKZDXNu0aELCv2LzZIBealXcwQ=)
2: A9C261C699BC11F0A121CE7BC4F9AE02.roa (hash: VG6ahcNEmZdy6EPXT5L7ZdhV0uhgVka5lkvkPYefWQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.crl
rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2clsMbYVbVNImohjbOo5-9uerk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BC38, serialNumber=576725B0C6D855B54D226A218DB3A8E7EF6E7AB9
Validity
Not Before: Mar 25 07:15:00 2026 GMT
Not After : Apr 1 07:15:00 2026 GMT
Subject: CN=69c38b74-ce29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:4e:b3:8d:5b:b7:d2:7d:f4:15:dc:51:f6:
43:b8:7e:b1:b8:b8:d7:90:55:a1:f8:fc:e2:7f:0d:
93:af:23:a7:3b:88:e1:cf:d5:ca:9b:10:a1:f8:49:
fe:68:5d:e4:8a:bb:8a:6b:83:6d:b8:4e:82:af:2b:
5a:9a:d3:b2:83:22:8d:e5:28:c1:27:00:2e:ed:a9:
a7:26:4b:13:23:ad:1a:9f:aa:25:f4:ba:7d:39:5b:
e3:d9:c6:43:26:62:4e:de:2d:37:50:c9:7e:50:23:
ae:fd:c2:6f:fa:ea:5d:c4:3e:5e:d8:18:3a:39:1c:
12:f2:3a:87:e2:8a:c3:47:76:1f:41:7f:61:aa:23:
bb:8b:1a:fb:b8:64:94:16:09:5e:65:18:a1:af:53:
64:3f:19:c6:f6:6d:03:48:14:a6:16:4b:62:2f:7c:
f6:38:52:97:05:9d:a2:72:3d:f6:ff:1b:0a:af:a1:
f8:91:31:a3:d9:eb:a0:9c:a2:75:84:31:ae:f5:44:
fe:ae:62:d8:e0:ee:db:9d:84:18:49:06:ba:d9:86:
77:93:45:3a:69:ba:db:79:fe:ce:50:7e:ea:69:55:
26:5e:06:d2:43:58:26:14:5e:0e:28:fc:e5:d4:fd:
59:a5:a3:22:34:07:c7:7d:20:f0:17:0a:c4:41:39:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:24:A3:FD:9E:CE:CA:16:AE:00:9C:91:5B:04:2A:A3:AB:62:8D
X509v3 Authority Key Identifier:
keyid:57:67:25:B0:C6:D8:55:B5:4D:22:6A:21:8D:B3:A8:E7:EF:6E:7A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2clsMbYVbVNImohjbOo5-9uerk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:63:c6:e7:20:47:15:af:af:37:56:e2:fe:54:d8:7d:47:38:
4b:f5:11:eb:29:d2:26:fe:ba:e3:aa:c7:c7:ca:fc:df:04:dd:
8e:5b:86:3e:b8:93:a4:b5:05:2c:a3:69:28:76:62:7f:99:ba:
8d:de:3d:e4:32:22:b8:8f:50:15:ef:d6:dd:9c:1c:00:35:a4:
12:f1:e3:3b:37:44:56:aa:54:fb:33:4a:ce:a4:c8:79:97:f7:
e7:6e:2c:a8:4d:5c:70:80:19:06:0e:b9:47:20:b1:ea:a6:1f:
dc:a0:5a:4e:c7:2d:94:a1:a9:65:d6:0c:bb:8c:d7:e5:45:88:
94:80:96:41:ad:8e:ac:7a:0c:94:84:23:1e:e2:38:2e:93:5d:
10:55:f3:f2:50:7f:55:cc:61:05:32:95:ca:d3:b8:78:61:46:
0b:40:7b:e5:ce:86:14:b0:d7:34:eb:07:44:77:f2:47:8d:8a:
57:35:09:27:fb:31:61:2e:df:eb:a5:ea:02:05:24:35:d4:8e:
56:b6:a5:02:0d:e2:02:2c:f5:d7:36:a1:5d:b1:f4:ee:f7:b1:
a0:21:bf:59:f2:f4:6a:b5:05:61:59:f4:64:ed:a2:40:7a:b1:
26:ae:13:72:c6:d7:07:19:8b:b8:27:40:21:b5:60:47:92:a6:
2f:19:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:23 2026 by rpki-client