
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
File: sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json)
Hash identifier: Uvim8XHQDu7IO6bEuHOxu7pW2WqJbYcaVb2Ixv4sOCs=
Subject key identifier: C8:CA:CF:BE:A4:67:84:C5:87:B3:8F:E0:8F:1F:B7:51:A1:9E:4E:33
Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD
Certificate issuer: /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
Manifest number: FB
Signing time: Wed 25 Mar 2026 05:26:18 +0000
Manifest this update: Wed 25 Mar 2026 05:26:18 +0000
Manifest next update: Wed 01 Apr 2026 05:26:18 +0000
Files and hashes: 1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: vRUk1e2qUpcsEU1s+YYrBjmC59dgkDDUWoqVRv7vz+o=)
2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: dlS+L3hoSIpEJ+oVU6LIz9k7ig30GNwI16r61UE8PJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl
rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0FE, serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD
Validity
Not Before: Mar 25 05:26:18 2026 GMT
Not After : Apr 1 05:26:18 2026 GMT
Subject: CN=69c371fa-ee4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:64:dc:3f:87:e9:35:a4:43:ab:9a:f5:07:
91:39:ca:66:af:49:4e:fb:f6:ea:e8:d4:90:42:ee:
85:0e:58:16:8f:16:09:eb:52:f6:04:d1:ac:ea:37:
64:db:b7:c7:33:3c:db:2c:f8:9f:c8:a0:d7:0e:85:
12:cd:07:3e:11:e6:d1:86:d7:2c:fe:2f:fa:b3:6c:
b0:9e:2a:ab:7c:03:0a:4f:d9:90:e3:6e:a6:6f:2c:
bb:4e:f7:0a:dd:ce:77:16:ed:64:7b:8c:52:7b:0c:
66:ba:ba:f4:34:65:35:78:9d:67:44:dc:83:22:03:
95:ef:f6:e1:dc:8f:c2:dc:b1:b9:2e:e5:d1:93:fd:
9f:8b:3d:bb:14:70:7c:e3:a2:ef:07:56:10:70:c4:
3b:0c:c5:0a:ba:9e:fd:6c:44:75:b1:27:44:a3:9c:
43:67:d8:91:79:71:ab:97:fe:6c:a4:6e:bf:cf:fa:
6d:91:77:1e:47:70:e0:76:f8:26:ff:c2:51:7c:33:
27:7c:d9:84:f5:eb:3e:2d:78:cb:5c:70:8b:65:74:
99:5f:14:fc:3c:fc:76:2d:47:92:b8:15:9f:f3:4a:
1a:0d:fc:25:7b:ed:07:73:bd:62:df:86:2f:9f:d4:
23:16:a5:34:27:8b:15:5d:2c:34:85:c4:c9:4a:3d:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CA:CF:BE:A4:67:84:C5:87:B3:8F:E0:8F:1F:B7:51:A1:9E:4E:33
X509v3 Authority Key Identifier:
keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fa:84:5d:54:61:9b:9e:23:dc:48:ba:54:49:72:37:fb:75:
b1:1b:52:f0:e7:8c:9a:f3:9c:79:3e:91:a0:6e:6f:c3:ca:96:
41:78:02:61:a7:d5:2f:60:3f:32:ce:53:98:44:19:33:50:68:
61:cf:50:f6:d5:04:b0:b1:67:af:4d:17:13:ed:20:00:b0:c4:
25:9a:00:ee:a5:39:2d:ef:ba:5f:ab:2c:e8:c0:4d:9e:ce:4a:
13:be:a8:6e:d5:a9:65:22:a2:bc:43:52:64:81:9f:69:df:e1:
1a:b4:82:79:d2:5e:3f:c9:9b:1b:6a:99:28:54:26:50:e9:54:
d4:b4:ca:8f:7d:80:32:a6:55:11:4d:88:fa:85:7b:94:d0:c6:
33:05:79:86:98:c5:28:3d:71:f2:1b:d7:33:91:b0:5e:19:3a:
0b:4a:83:04:30:5f:ca:d3:3a:77:da:d4:61:0f:9a:06:91:9f:
45:fb:09:5d:1d:d9:09:b1:ec:aa:00:6c:2c:b2:0e:15:f7:d9:
77:76:a3:24:3c:aa:d5:53:47:01:60:06:70:3a:bd:b7:2e:69:
55:a6:4a:cc:ca:c9:98:51:6b:96:03:2c:fc:c5:db:24:45:56:
a9:e1:ec:a5:4e:d0:b0:ce:0a:67:cc:9d:9a:a8:db:e4:02:67:
d4:a3:6f:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwRkUxMTAvBgNVBAUTKEIwMjc5NUQyRTA5RTNBQUEzRTM2RDJCNTkyRDJFMEU5
RkJCN0VGQkQwHhcNMjYwMzI1MDUyNjE4WhcNMjYwNDAxMDUyNjE4WjAYMRYwFAYD
VQQDEw02OWMzNzFmYS1lZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TRk3D+H6TWkQ6ua9QeROcpmr0lO+/bq6NSQQu6FDlgWjxYJ61L2BNGs6jdk
27fHMzzbLPifyKDXDoUSzQc+EebRhtcs/i/6s2ywniqrfAMKT9mQ426mbyy7TvcK
3c53Fu1ke4xSewxmurr0NGU1eJ1nRNyDIgOV7/bh3I/C3LG5LuXRk/2fiz27FHB8
46LvB1YQcMQ7DMUKup79bER1sSdEo5xDZ9iReXGrl/5spG6/z/ptkXceR3Dgdvgm
/8JRfDMnfNmE9es+LXjLXHCLZXSZXxT8PPx2LUeSuBWf80oaDfwle+0Hc71i34Yv
n9QjFqU0J4sVXSw0hcTJSj1YrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjKz76k
Z4TFh7OP4I8ft1Ghnk4zMB8GA1UdIwQYMBaAFLAnldLgnjqqPjbStZLS4On7t++9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8zNzMzNEJFMkFC
Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9zQ2VWMHVDZU9xby1OdEsxa3RMZzZmdTM3
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NDZVYwdUNlT3FvLU50SzFrdExnNmZ1Mzc3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTBGRS8zNzMzNEJFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9zQ2VWMHVDZU9x
by1OdEsxa3RMZzZmdTM3NzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAofqEXVRhm54j3Ei6VElyN/t1sRtS8OeMmvOceT6RoG5vw8qWQXgCYafVL2A/
Ms5TmEQZM1BoYc9Q9tUEsLFnr00XE+0gALDEJZoA7qU5Le+6X6ss6MBNns5KE76o
btWpZSKivENSZIGfad/hGrSCedJeP8mbG2qZKFQmUOlU1LTKj32AMqZVEU2I+oV7
lNDGMwV5hpjFKD1x8hvXM5GwXhk6C0qDBDBfytM6d9rUYQ+aBpGfRfsJXR3ZCbHs
qgBsLLIOFffZd3ajJDyq1VNHAWAGcDq9ty5pVaZKzMrJmFFrlgMs/MXbJEVWqeHs
pU7QsM4KZ8ydmqjb5AJn1KNv5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:27 2026 by rpki-client