
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json)
Hash identifier: aurFoSyamX3QI7IEorjCyRuJFAFwWCAsUnvYepRGxso=
Subject key identifier: CE:A4:D3:6C:D3:0A:2D:C3:96:9F:46:A7:14:27:07:3D:87:BE:33:7C
Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Certificate serial: 017D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
Manifest number: 0171
Signing time: Wed 25 Mar 2026 04:06:57 +0000
Manifest this update: Wed 25 Mar 2026 04:06:56 +0000
Manifest next update: Wed 01 Apr 2026 04:06:56 +0000
Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: GzGzpk3bp/SX1jZcfOzqWWOzXwrjuqB57ARGlbJRHxM=)
2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: YSVC2OmaPeg+hkfiwDhK7p7s6vbq47iwF4vLH9/oI98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl
rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Validity
Not Before: Mar 25 04:06:56 2026 GMT
Not After : Apr 1 04:06:56 2026 GMT
Subject: CN=69c35f61-ea0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:b7:b7:89:f3:a0:8e:d4:37:e5:70:b2:ec:
81:06:a2:09:43:04:05:1f:c3:21:95:ef:ac:ae:cb:
07:59:d7:57:77:00:a3:1e:ec:57:e7:6c:d4:45:73:
ee:9e:b7:5f:f6:52:dc:f2:fd:a4:db:9e:62:b8:07:
b5:d2:15:12:d5:aa:fb:73:67:fe:cd:84:84:b1:43:
8b:12:4f:d8:ac:56:f8:cf:42:1b:3f:c9:48:17:98:
19:d9:d6:a6:4a:d4:91:b7:7c:3d:76:85:ce:2b:ab:
13:82:13:2e:32:5d:fa:49:2e:8a:22:dc:e0:e2:08:
02:d7:d2:9f:3e:b9:b1:b9:f2:a1:f5:2d:bf:9c:97:
09:7f:4a:58:bb:92:c8:51:ae:37:ec:b7:d0:cc:3f:
96:db:3a:cd:5f:22:26:9d:cc:df:a3:98:b6:88:ba:
a6:28:0f:9d:a0:4a:cd:fc:11:9f:ad:88:ec:6e:a5:
25:c5:4e:37:89:25:90:a2:44:90:16:fc:37:8c:70:
1a:cb:e8:23:12:86:3c:14:61:24:33:9a:1b:cd:93:
ba:dc:f9:1a:0c:b9:39:dc:96:2a:22:06:f4:85:22:
a7:27:d9:1f:45:81:d2:d8:07:b9:60:f2:21:60:0d:
20:c6:2e:bc:1c:4f:47:a6:10:73:07:48:dc:03:3b:
69:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:D3:6C:D3:0A:2D:C3:96:9F:46:A7:14:27:07:3D:87:BE:33:7C
X509v3 Authority Key Identifier:
keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3d:2d:08:15:07:e7:14:d6:7d:60:b3:ba:36:ae:5d:b6:5a:
b0:ce:32:7b:da:46:7a:8d:90:f0:e1:78:f9:fd:7e:c7:7a:57:
19:d5:4c:f6:65:a8:a7:b4:ed:2e:57:78:60:2c:44:24:cd:48:
b3:e0:9a:ae:a0:51:32:14:a9:59:6e:48:5b:94:a1:29:c0:e5:
29:7d:13:b2:ee:e3:99:b4:06:62:25:ba:07:54:47:60:ec:62:
2e:1a:47:24:f4:9e:d3:2a:d4:18:f8:d5:a2:6a:97:5e:b8:09:
2b:4a:74:5f:16:24:97:28:ff:8e:ed:30:85:bb:a4:22:5d:2e:
d5:0f:92:af:f3:d9:72:78:f2:2a:40:9d:54:f3:92:c9:68:ec:
bd:32:f5:40:d2:45:d9:6b:4f:ae:6f:e0:ec:2c:cc:cc:3b:e8:
e6:a3:6a:a5:f7:47:09:32:21:6d:5e:1d:76:77:57:a3:21:fe:
ea:b3:07:b4:6c:ab:21:fc:c8:e8:ce:59:9b:9d:64:b1:d1:89:
cf:52:59:25:f9:10:06:83:86:d3:6f:d4:05:86:66:6e:9c:d7:
e7:38:f3:78:ff:50:a2:12:c1:b3:e1:43:86:d3:84:3d:1e:f6:
f3:5f:61:3a:5b:7e:a9:25:fb:d1:e9:f0:d7:e0:33:d5:82:33:
26:57:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:14 2026 by rpki-client