
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File: s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier: Wk/PFLgjbwX2wb3DgwNiaAjZl1A57rN5oNp92O64wSU=
Subject key identifier: 60:A7:90:AA:5C:F5:7F:26:37:CE:D3:9E:BE:8F:40:D8:D0:DD:85:A9
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer: /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number: 0191
Signing time: Wed 25 Mar 2026 03:40:26 +0000
Manifest this update: Wed 25 Mar 2026 03:40:25 +0000
Manifest next update: Wed 01 Apr 2026 03:40:25 +0000
Files and hashes: 1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: oVgtIVEr5SGYSKL+7BBUidm3r6kzEo2xBG9IePHO/zc=)
2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: 6FaC3RWt9d1k1q8QIDmkVggro95lutrtiUauXZX6w7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Validity
Not Before: Mar 25 03:40:25 2026 GMT
Not After : Apr 1 03:40:25 2026 GMT
Subject: CN=69c3592a-6578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:1c:57:58:50:8a:a5:c1:40:3d:d3:e6:a9:
a2:4b:dd:f0:fa:49:06:42:d1:a8:2e:32:1b:9b:b5:
27:3d:b8:24:c6:1f:8d:c8:55:99:7a:71:37:4f:01:
71:27:25:01:cc:25:13:63:9d:a6:2d:dd:8b:60:a4:
97:0d:42:f9:c0:f5:6b:a8:1f:18:a4:9d:68:67:5b:
fe:5e:54:6f:18:c3:e3:10:08:8d:8f:9a:1b:71:24:
e8:77:ee:81:82:e0:db:70:c3:c1:25:20:fe:89:23:
92:e9:79:fa:57:5e:44:ac:d7:8b:18:20:39:29:ff:
3a:fa:bc:4b:84:c5:1d:83:3c:87:4c:af:4f:2e:2e:
0b:55:15:95:b2:53:b6:34:af:28:20:36:88:2a:40:
fd:1b:d3:a8:29:05:a9:6c:bc:7d:d4:fd:de:a8:5b:
2b:97:d5:69:02:0f:51:4c:b1:eb:f3:37:10:77:3f:
e6:4e:21:61:b2:d5:d5:b1:9d:d2:b8:58:b7:a5:33:
06:e2:1f:36:b3:ff:50:25:8c:d7:83:5a:01:0c:38:
a6:3d:1e:3f:ad:c9:9d:30:7f:70:6d:01:29:dc:97:
98:91:66:87:e9:d7:ad:e8:e3:92:81:66:a9:02:de:
f0:29:d7:9d:16:c5:25:b3:44:92:b3:93:48:e4:24:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A7:90:AA:5C:F5:7F:26:37:CE:D3:9E:BE:8F:40:D8:D0:DD:85:A9
X509v3 Authority Key Identifier:
keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:21:da:8e:5f:d1:26:0e:12:1a:4b:0d:71:45:a6:7a:bd:9d:
de:77:8c:21:a0:ed:2b:0a:f1:66:05:3a:1d:1a:99:96:53:dc:
16:47:7f:65:e5:7c:18:fa:55:54:fa:33:86:19:ac:87:1a:97:
9b:f6:8f:53:e8:49:1f:a6:2b:77:8d:6a:a6:e3:a6:5b:cc:cd:
88:ed:9c:74:8e:9c:9d:98:d5:73:18:9d:9d:9f:27:2a:fe:d8:
31:ab:ce:bc:32:de:a0:a4:d9:fa:95:11:1e:15:36:83:38:e9:
22:58:f6:70:0d:01:a7:e0:f9:37:35:e5:37:0b:66:bb:ee:89:
1e:3f:10:7e:2d:0f:66:05:49:02:58:27:65:67:eb:0a:0d:c0:
22:3b:5d:88:f4:73:7c:5a:98:61:4c:ea:ce:e7:b2:cc:8d:cc:
ff:46:11:d4:5f:2b:33:56:53:28:98:0f:70:2a:17:8a:22:fe:
74:7f:6d:d6:76:b8:4e:f6:04:9f:ba:80:dc:6a:69:9b:0b:b9:
80:f0:e9:42:be:b9:8d:82:98:e9:f6:2e:f9:f2:b5:9e:4d:d5:
a0:78:47:95:30:08:26:42:69:ef:04:7e:18:42:dc:55:47:59:
dc:be:42:80:73:29:bc:da:19:d1:c2:c8:cb:da:ce:5b:73:41:
02:ce:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:19 2026 by rpki-client