
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json)
Hash identifier: zQ5VXaZ1XFAa9DmqB0aG2l8jLuMgsrG47dpC/9OqT44=
Subject key identifier: 48:8E:75:79:79:A6:F6:0E:BA:99:A6:FB:64:EE:82:B3:84:98:51:80
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial: 07FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
Manifest number: 0783
Signing time: Tue 24 Mar 2026 21:24:34 +0000
Manifest this update: Tue 24 Mar 2026 21:24:33 +0000
Manifest next update: Tue 31 Mar 2026 21:24:33 +0000
Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: WcLGrNSxc33ZclG0LaUPXVRc7+qcD2M9Jccq/qjgcco=)
2: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: TXZ7H4bYoa2tMoTjTtlYu/ju1DHWYH5bM4fA2XxysBg=)
3: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: +eX/IhPIgzcgEej3nFPqU8lcNjTSKxrNxHm69wcEBYA=)
4: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 7g2GzMpbsXg0SC1u5pI0BA7KwxetbBq/6LlcQTkxPZY=)
5: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: dl0KaIPqQRrW321Czs7YhzYqJGnPgpM9OmusVMr+VRk=)
6: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 7JuQ2G6yFzq4/l/uV73erQ4OY/dKSaAKR4JLpyv+3gw=)
7: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: SzlEPDJi9zAc0zG3xIXsTR02HbNoFM1IdbpFsslC/FY=)
8: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: sWPtrrp7wjC9q2Z2Pyt+2v9XwkvTK+NuUGOz/EsAmyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Validity
Not Before: Mar 24 21:24:33 2026 GMT
Not After : Mar 31 21:24:33 2026 GMT
Subject: CN=69c30112-65be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:0c:47:b5:d1:94:02:bc:36:ae:b7:50:7b:
98:ac:2f:4a:0d:fb:62:c7:e9:62:fb:8d:c6:18:58:
e8:67:04:de:7f:02:d7:00:0a:6a:75:6d:a4:9e:f8:
89:f5:52:50:06:bf:59:05:1a:f0:a3:74:ed:e5:b9:
93:24:3b:3f:e4:fd:0e:a5:d1:38:74:da:82:03:0e:
58:b6:95:b5:a0:cc:87:14:e3:58:62:38:27:c5:b2:
a4:ed:75:d9:83:f0:e1:93:cc:ac:3b:27:31:6b:6e:
02:3f:30:74:91:78:61:3c:81:cb:5f:35:28:84:7a:
68:11:6a:b0:1f:b5:f9:19:6a:2d:f6:09:ed:05:c9:
8d:bf:1c:6a:74:2c:60:5c:b4:0c:a8:c7:c9:70:93:
1d:fd:50:56:25:23:41:97:d9:70:5b:13:ee:b2:38:
56:c2:3e:79:e5:43:a4:79:ad:12:9f:c1:a3:59:a1:
12:a8:25:d9:2c:5a:39:25:5b:3f:ea:70:31:e2:ea:
2f:7c:f5:ec:5d:6d:a2:f1:13:6c:47:70:f8:56:bd:
47:c3:8f:ca:c7:41:f5:e1:72:38:99:5f:0d:91:84:
b9:1b:8c:4c:0d:56:13:c6:e6:68:9f:63:c9:0e:34:
70:49:04:97:ac:c7:a2:d3:29:0c:ca:04:b7:25:b2:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8E:75:79:79:A6:F6:0E:BA:99:A6:FB:64:EE:82:B3:84:98:51:80
X509v3 Authority Key Identifier:
keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:7c:ac:67:c0:89:0f:0c:b8:67:ec:08:a4:9d:98:8d:60:f0:
ea:b1:f6:0d:c1:22:54:b9:b4:8f:ea:51:b7:64:17:d8:9f:1f:
26:9b:bc:b5:76:1e:13:be:1f:03:50:69:0e:18:f0:f2:96:36:
0a:85:29:80:b2:0d:06:98:80:68:73:52:e6:88:ab:14:0e:4c:
5c:54:03:85:58:5e:a2:b9:c7:60:76:ec:07:76:62:d1:71:89:
18:63:25:07:8f:10:45:1f:ab:1a:c5:79:4d:86:ab:24:53:e0:
77:f6:65:0f:86:33:c0:b2:d5:ee:19:96:ed:3b:f9:03:61:a1:
ee:e1:92:ba:ca:13:ea:e8:79:a4:c8:d4:bc:a2:3c:40:01:e7:
cf:ea:6e:f0:c7:2f:24:e1:31:ea:d5:29:53:ae:45:31:56:05:
54:8e:9b:8a:11:14:87:42:dc:38:17:cb:9b:b2:47:3b:d5:05:
88:3c:80:b9:4c:52:98:d0:9c:9b:ec:0b:42:1f:28:35:06:47:
83:2d:cb:53:f0:a5:36:79:69:6f:25:fd:e1:29:af:91:3f:76:
1b:2f:9e:9c:49:23:bb:73:88:ac:99:19:68:5f:55:76:8a:da:
16:8c:34:27:86:d8:68:ea:73:be:bc:b7:5a:b8:ed:b3:5e:fe:
7a:e6:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:25 2026 by rpki-client