
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
File: 52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json)
Hash identifier: WNf1eltw+Rg5p5y9DleMmnF7gNFrRUEo92faeYkbJmQ=
Subject key identifier: 26:60:69:87:B5:CE:B7:C9:D8:55:1F:C5:44:12:B9:C8:A5:C2:A7:34
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Certificate issuer: /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial: 03FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
Manifest number: 03F2
Signing time: Wed 25 Mar 2026 00:09:19 +0000
Manifest this update: Wed 25 Mar 2026 00:09:19 +0000
Manifest next update: Wed 01 Apr 2026 00:09:19 +0000
Files and hashes: 1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: INVDDAEp8QA1QXjbDbD/eIqhnn3tXceMESIw38vSDgw=)
2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: dHW1Qook3wZ5zh5JBvm9IKVQr+R+p5FVYsj7ayk0Xrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1018 (0x3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Validity
Not Before: Mar 25 00:09:19 2026 GMT
Not After : Apr 1 00:09:19 2026 GMT
Subject: CN=69c327af-544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:ec:e2:1b:eb:b0:45:1c:28:09:e9:25:10:
1f:c8:99:6e:6a:55:51:fa:35:43:73:d7:33:1f:34:
cb:d7:76:98:47:23:73:c1:83:f5:fe:52:6d:6f:b4:
fa:39:09:79:a3:5c:53:f5:f5:f3:f4:2e:ab:84:8f:
d0:ea:78:b2:c4:d5:e0:2c:af:41:e8:02:1d:a2:f9:
d1:01:bd:10:cf:53:50:00:c9:8f:a7:69:e2:c2:f5:
00:87:b8:e1:0b:0f:02:59:79:c6:10:0c:e1:25:eb:
70:4c:d9:3c:35:ac:cb:57:ec:b4:cc:43:68:34:28:
27:e9:79:bc:05:f0:4b:6b:de:87:83:e7:d3:e4:8d:
6d:99:e6:30:99:25:1f:82:2f:db:50:53:88:56:0f:
7a:a7:34:c6:20:fe:b4:e8:14:e3:c0:7c:3e:bf:4e:
fd:a8:b2:7d:5c:47:c9:2e:02:8f:c5:a3:04:16:3c:
61:ce:f8:c4:94:93:c8:7d:1c:61:21:ba:c1:20:4d:
4e:20:93:49:50:a3:72:da:91:a2:9b:27:41:9a:44:
02:c6:02:a4:f3:16:32:2e:48:44:f8:d9:42:51:1f:
6a:f2:8e:7f:69:a6:69:c2:64:ee:6d:41:e3:07:3f:
fb:da:db:cb:4b:b2:be:92:f9:3d:4b:c8:a6:b2:2c:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:60:69:87:B5:CE:B7:C9:D8:55:1F:C5:44:12:B9:C8:A5:C2:A7:34
X509v3 Authority Key Identifier:
keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7a:f0:c0:13:59:b7:bb:90:e2:1d:65:0f:e6:5d:4c:f5:7d:
1b:40:97:fc:cc:bc:72:f1:a6:20:f5:05:12:9f:e3:06:fd:7d:
f8:02:64:cf:b2:51:75:19:4e:71:d8:ed:cb:af:6e:54:b5:76:
9c:bf:50:4a:03:b6:61:06:57:61:8b:ea:aa:32:06:12:bc:eb:
c4:52:43:da:33:d1:7f:45:2f:e2:66:96:4c:4e:10:91:cb:db:
79:03:23:b9:7b:10:d8:0b:ab:f2:5a:f5:41:b8:0c:62:24:76:
82:f5:36:2d:30:fa:e6:55:98:8d:59:43:93:25:60:ce:0b:8b:
87:d1:c8:74:04:cc:d3:69:62:d7:91:92:f0:d5:f0:a6:d7:cb:
0d:d8:c1:65:a2:8e:3a:00:9d:48:97:84:1b:a6:21:85:02:a4:
09:6a:69:fe:6f:0e:70:22:7b:89:90:c6:36:ca:a0:fc:e7:4e:
de:ac:41:b1:29:e5:ed:53:9e:50:b6:e0:66:01:41:70:5b:6f:
05:0f:1c:39:14:1b:a6:fd:a8:d0:53:ef:de:27:fe:7c:9c:78:
42:0d:ae:05:24:da:8a:0b:e9:ff:a0:d1:36:40:91:ca:04:b2:
d8:7a:76:d6:b2:77:09:7a:5e:18:c3:c7:fc:48:85:bb:29:db:
bf:08:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:57 2026 by rpki-client