
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
File: _d0zZyPk_yht6VYjX0y7nlvItHs.mft (raw, json)
Hash identifier: bUZmo1qj5K8VOaITEuJ5snE++fy7QDE/Wf0wJATffnA=
Subject key identifier: 63:4B:DB:DC:BF:A3:A3:B6:42:7E:31:C7:3E:A3:2A:9D:38:28:09:D4
Authority key identifier: FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
Certificate issuer: /CN=A911EA03/serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
Manifest number: 05
Signing time: Wed 25 Mar 2026 08:25:33 +0000
Manifest this update: Wed 25 Mar 2026 08:25:33 +0000
Manifest next update: Wed 01 Apr 2026 08:25:33 +0000
Files and hashes: 1: _d0zZyPk_yht6VYjX0y7nlvItHs.crl (hash: bs5Q4tTx0AXsszYpt9bnKmiS2UAH7y3swJUP0CjqHKQ=)
2: 2789337224DD11F19E4B5BF6AD833773.roa (hash: 5cgEm0SMJYslABU40A6AOjXeN/3Pw0Ma8SyFdQMbJEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA03, serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Validity
Not Before: Mar 25 08:25:33 2026 GMT
Not After : Apr 1 08:25:33 2026 GMT
Subject: CN=69c39bfd-e7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:b4:77:67:5e:8c:69:84:ec:23:6a:e0:04:
1d:bd:3d:95:4e:52:ad:e9:35:56:23:2f:1e:15:b0:
d6:94:6a:62:bf:5d:c8:e3:68:97:d5:93:4e:13:78:
51:4e:12:a1:47:35:59:9d:44:97:8d:83:9a:6a:f2:
ae:cc:68:7c:d4:1c:78:35:fc:30:c6:8d:c1:1c:b7:
87:d3:8d:cc:95:f2:25:f1:8a:76:62:40:ff:68:59:
ee:90:f2:9b:2f:7e:4b:f5:8b:4b:cd:e6:6b:10:4d:
74:dc:e1:9b:3b:93:64:3f:b4:54:a8:8e:b4:e2:4d:
e5:1b:25:f0:2b:88:64:94:d3:42:34:41:d2:c1:ff:
9c:a0:c0:ad:46:05:5e:ca:ca:22:a4:94:55:27:cf:
f9:86:14:ad:14:02:4c:73:f8:bc:f8:57:57:14:b8:
c6:a8:48:d9:cc:b0:5d:8b:cc:05:e8:02:1f:b2:dc:
6f:49:d8:1d:ff:10:14:d6:71:30:3c:1b:0f:7f:5c:
9e:7e:14:b9:88:1b:19:d4:ee:72:df:04:1b:54:7f:
49:5b:42:c8:2f:d5:d4:0c:ae:c3:2c:9b:e6:20:bc:
db:56:61:ae:bb:cd:b3:c9:87:71:cd:1c:e1:cb:7d:
ba:51:43:24:86:73:6c:be:2a:e1:78:e8:c0:62:c3:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4B:DB:DC:BF:A3:A3:B6:42:7E:31:C7:3E:A3:2A:9D:38:28:09:D4
X509v3 Authority Key Identifier:
keyid:FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1e:ac:a4:22:56:ca:66:db:64:02:9c:0b:cf:d4:9f:5e:60:
d7:96:a1:ad:32:80:40:d0:2e:37:0c:97:ae:f4:18:63:1f:b0:
0d:d4:13:d9:51:1d:3e:c8:2a:bf:a5:96:a5:e0:51:cd:84:6d:
32:fe:30:02:db:08:3e:22:0e:55:6b:40:6b:7d:f8:b4:74:e7:
db:ec:00:90:f9:d8:55:fc:3b:e5:96:50:aa:75:42:37:a9:33:
41:13:40:bf:32:56:75:20:a5:78:b9:8e:11:77:24:78:8c:09:
08:96:e7:e0:7b:ab:e6:97:4c:13:b3:f9:a3:5d:55:72:2c:d5:
67:53:c9:8b:fb:3e:b2:c0:78:60:c8:06:f9:42:cd:46:96:9d:
c7:44:0b:85:2c:72:f9:29:4d:e9:33:eb:b0:f5:56:c5:9f:fb:
ad:7a:9e:b1:65:70:20:41:ff:b1:97:d2:3f:c5:61:7c:6b:e6:
1d:7d:3f:cc:3e:04:41:21:2c:17:ee:e7:35:53:b1:90:56:95:
a4:0b:68:27:81:9e:87:c8:fb:8c:85:88:e3:49:40:e3:9c:b6:
2e:f2:9a:f5:fc:c9:72:ed:87:29:40:ec:20:d2:4c:1a:dd:05:
9c:f5:8e:08:09:d1:16:8d:52:4e:cb:ae:73:0e:46:4e:6d:43:
4d:97:bc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:33 2026 by rpki-client