
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json)
Hash identifier: 0TdTlfiB8blapFptbo1/zhywi/r6GbNm6K53kCssG94=
Subject key identifier: B8:E4:2E:BB:C7:06:64:C3:2B:FC:68:F6:97:10:6D:A5:D5:67:D7:CF
Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Certificate serial: 02F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
Manifest number: 02EB
Signing time: Fri 27 Mar 2026 01:04:03 +0000
Manifest this update: Fri 27 Mar 2026 01:04:02 +0000
Manifest next update: Fri 03 Apr 2026 01:04:02 +0000
Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: ceb0/MSlJ2I9OEhjQB9w9AIOOW/I6O1lUBnmFm8iSo4=)
2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: exLviybyS2B3QAPNpYdawGvzUd4K8obahTbjXvP16B8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Validity
Not Before: Mar 27 01:04:02 2026 GMT
Not After : Apr 3 01:04:02 2026 GMT
Subject: CN=69c5d783-e936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:f5:8f:80:53:f7:9c:bd:55:01:c6:48:dc:
70:20:6b:da:f5:9b:a9:f9:c0:4d:20:7c:13:b6:20:
c8:a4:4c:7f:4c:50:82:78:2b:df:40:5d:c5:3f:7a:
09:ba:b6:5b:28:e0:72:c4:f1:a5:9f:50:40:73:88:
3a:59:2f:66:f3:c2:76:e4:d3:b8:41:46:a0:ab:7d:
63:2d:5b:bb:61:85:58:ba:fe:03:e5:12:57:60:60:
1b:15:da:19:a8:ea:6f:41:1e:7b:57:be:5e:df:3a:
e8:4d:95:64:d3:31:8f:3b:cb:87:6b:82:ac:57:7b:
15:04:c3:9e:15:a7:1f:4b:eb:a9:7d:9d:09:4e:f0:
8c:25:04:37:4b:a3:e2:e2:15:57:ea:ee:25:18:74:
70:54:94:d4:ba:20:02:bc:7f:61:30:10:0c:b8:30:
95:7b:20:6d:d9:2d:e8:a5:22:1b:e6:e5:10:3d:f1:
bd:4f:37:03:0a:5f:9b:1d:92:ea:00:f4:d5:6d:e0:
fb:22:37:11:3e:92:37:73:6f:18:42:ba:65:f6:79:
1a:8b:ac:a2:a1:d5:f6:f3:33:73:1a:d1:a2:f8:24:
50:50:bd:c5:42:02:bd:05:c7:83:a8:53:b9:b7:c9:
91:10:cb:f6:c3:11:8d:5d:82:ca:19:7b:38:11:f8:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:2E:BB:C7:06:64:C3:2B:FC:68:F6:97:10:6D:A5:D5:67:D7:CF
X509v3 Authority Key Identifier:
keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:23:90:62:90:fa:87:81:b8:ef:50:07:05:24:f7:64:1f:
be:e9:6d:2a:7c:d9:bf:08:fb:08:96:53:b5:ce:79:c3:39:4f:
a7:49:3e:31:e1:28:d6:1a:09:7a:7e:0f:2f:84:3c:4c:47:53:
a2:08:06:59:ac:5a:a3:7f:78:03:56:93:e9:0b:68:51:4d:7b:
07:b7:a2:08:8e:25:bc:c5:38:18:4a:90:6d:f3:3e:d6:17:75:
0d:d9:c9:b9:f2:88:c2:87:58:c0:e2:d9:a3:1e:4c:d8:a3:83:
e4:8f:f0:16:8e:49:0b:4e:63:0d:64:25:07:95:cc:5f:00:44:
8b:39:15:df:da:0f:7a:8d:56:bc:d8:f3:ec:fa:d0:b7:0e:12:
65:bf:63:c6:ce:ed:e8:35:0a:71:d4:89:5e:c2:c6:c6:be:56:
29:02:4c:11:26:fc:42:90:09:8f:20:24:52:22:dc:76:5d:88:
eb:e8:f2:4e:b8:bd:57:1f:72:37:f7:f2:83:0c:d7:04:ff:36:
d9:52:5d:db:60:46:ad:58:2e:a5:53:71:a2:c5:d8:72:9e:e2:
cc:e3:8d:d4:f3:82:15:11:dc:d5:1b:05:9e:4a:74:ca:5b:28:
63:ed:3d:c7:76:dc:a2:fc:17:23:97:c3:e0:ca:22:13:b4:64:
5e:a5:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:39 2026 by rpki-client