
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json)
Hash identifier: lMdGEwlDgaxXt7N2BDSzFMW9yNUG70NI5iGqOZh+h8k=
Subject key identifier: 41:64:7B:07:54:F8:71:A2:24:8D:46:64:A9:FE:61:DD:0A:D1:95:49
Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Certificate serial: 0BEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
Manifest number: 0BEC
Signing time: Tue 24 Mar 2026 18:41:25 +0000
Manifest this update: Tue 24 Mar 2026 18:41:25 +0000
Manifest next update: Tue 31 Mar 2026 18:41:25 +0000
Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: CP+0yn9FrzMYrQ4ECTsIzmExKifvDb+nT8yjPDMQ4R0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl
rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Validity
Not Before: Mar 24 18:41:25 2026 GMT
Not After : Mar 31 18:41:25 2026 GMT
Subject: CN=69c2dad5-7145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:85:42:5c:11:ba:f0:ff:2e:68:5e:a4:8b:ed:
52:72:94:38:14:9d:89:e2:c3:5e:d1:e9:15:a5:80:
47:63:de:f2:e2:ed:4d:5d:64:fb:0c:5c:5c:bf:53:
5e:3e:c9:08:9e:42:95:c1:a0:e4:86:d6:69:34:0b:
70:77:d6:5c:93:b5:34:a6:a9:c5:75:44:36:3d:ff:
24:8e:b3:6a:34:0d:7e:44:8d:b6:df:13:df:82:37:
d6:f8:42:23:bd:6e:5a:60:77:20:d2:c2:be:3f:2e:
99:bb:2e:91:77:bd:c6:d6:48:72:42:20:65:91:d5:
ff:75:2e:45:9b:6e:eb:12:81:36:34:5b:21:40:c0:
4f:e9:a0:97:b1:99:75:b7:07:56:37:db:73:79:1b:
c4:73:b8:32:2d:e1:d7:fe:7e:e7:4b:47:ef:49:bc:
a6:d4:62:4e:72:7a:e6:b8:72:11:cf:40:8a:1f:d8:
27:fd:c9:00:76:86:58:1a:2f:5b:b8:5a:b2:3b:7d:
c5:70:29:23:83:52:1e:ab:a7:ac:e0:da:40:64:04:
fe:e3:24:fc:df:f1:41:91:49:32:8b:74:8e:06:83:
db:89:91:cc:a7:59:34:ca:89:f2:e7:ea:f4:72:bb:
c4:64:84:23:c9:06:20:e3:0d:58:92:0e:0e:c9:f8:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:64:7B:07:54:F8:71:A2:24:8D:46:64:A9:FE:61:DD:0A:D1:95:49
X509v3 Authority Key Identifier:
keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a9:8d:f4:74:7a:98:07:4d:3e:1c:bc:16:c2:c2:42:9e:c8:
ba:54:82:97:36:16:50:83:20:40:85:fc:57:db:49:3e:a1:f7:
cd:f4:e3:04:b0:3c:d0:26:03:cb:94:51:86:06:5d:aa:ca:f3:
b9:c1:83:4c:78:f9:1d:04:87:d6:dc:4e:ba:eb:dc:dd:3d:70:
1f:36:2d:a7:2d:de:ad:75:78:34:13:4b:dd:a7:aa:7c:97:b3:
d4:0b:03:31:21:0a:e8:f4:07:be:8d:e6:83:e2:19:3d:4c:0e:
1c:5b:8f:76:ab:aa:20:ab:ed:55:10:68:70:91:cf:c3:1d:08:
ff:43:20:f2:6f:aa:f8:83:33:c6:79:78:23:4c:0b:3e:34:2f:
1b:65:1d:05:53:3d:1e:57:a1:48:09:32:ca:89:ca:27:5e:7a:
75:d2:2a:de:79:b1:da:56:cc:b5:c8:0d:81:c4:0a:3f:20:e4:
ab:68:d9:20:7c:3e:8c:73:e6:69:f3:27:6c:c6:ab:47:11:8d:
d0:18:bc:48:c7:72:14:97:17:c0:23:22:a9:6a:61:d8:7e:53:
36:a9:ff:69:ac:3d:f7:09:36:54:2c:d0:50:07:04:24:5f:75:
ce:58:96:68:c0:09:82:34:c4:2e:91:68:1d:ab:3f:7a:94:13:
19:06:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:34:55 2026 by rpki-client