
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
File: p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json)
Hash identifier: sbllgTThkPqYr/a2cT+rrkIuFNHEOLzRNof6FTIPByc=
Subject key identifier: 61:22:C3:3A:6F:22:1D:56:3D:89:25:D2:63:63:90:E0:63:66:F8:03
Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1
Certificate issuer: /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
Manifest number: 0B46
Signing time: Tue 24 Mar 2026 22:10:41 +0000
Manifest this update: Tue 24 Mar 2026 22:10:40 +0000
Manifest next update: Tue 31 Mar 2026 22:10:40 +0000
Files and hashes: 1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: pImN0oiKlM7/rD5LjFdUJOpjdKAzIglxmsVy5TmSmVM=)
2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: HHH8uEe6y2kjn0kzwNQmOzrbreBTDdJ2h1RgssK/xT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl
rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
Validity
Not Before: Mar 24 22:10:40 2026 GMT
Not After : Mar 31 22:10:40 2026 GMT
Subject: CN=69c30be1-4855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:3f:ba:93:9d:3b:d9:8a:5f:67:35:06:6b:
8f:4c:d5:95:5a:31:38:bb:4e:92:17:36:34:01:7b:
0c:cf:92:83:26:99:46:b1:a6:5f:e9:fc:2d:80:2f:
36:55:8d:b1:11:24:83:0c:3d:db:bf:e3:fd:52:40:
e9:d4:b7:94:e6:0a:97:e9:6a:8f:62:ad:03:44:b3:
a8:81:84:d5:aa:b1:f5:e0:97:93:eb:fc:42:63:86:
1a:6b:63:6a:ed:e5:01:36:23:f0:93:eb:5f:75:cc:
34:54:ba:b2:83:a5:19:51:70:e7:82:43:e5:14:8d:
eb:a6:ab:e4:23:20:85:ba:92:c4:0f:e5:61:0f:7c:
3c:1b:1f:4d:bd:21:d4:64:6c:2f:a5:8c:21:09:2d:
c9:0d:09:5c:08:0a:e1:10:71:bb:86:63:78:a2:e4:
76:21:0c:dc:3f:9f:02:b4:14:77:6a:6e:b1:44:a7:
be:75:1b:23:68:38:86:e1:19:2b:67:90:95:b5:1a:
78:fe:28:ec:47:0d:b0:e0:b7:2d:e4:02:52:35:64:
78:05:45:88:6c:47:5c:70:e7:08:60:4f:70:f7:03:
da:eb:1f:a9:cd:d6:c2:d1:a7:72:f3:24:0e:6b:88:
ea:f3:60:a9:d5:32:39:52:be:a1:49:8c:0a:a8:a7:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:22:C3:3A:6F:22:1D:56:3D:89:25:D2:63:63:90:E0:63:66:F8:03
X509v3 Authority Key Identifier:
keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:34:de:58:e7:78:87:cc:92:d2:25:53:60:4e:b2:82:2e:7f:
86:77:2b:42:f3:5f:60:3e:57:fd:77:03:71:e0:a2:9e:5e:e9:
ad:3a:d7:fd:47:f8:1a:d5:05:de:47:f3:06:de:76:e0:03:be:
ce:c7:2c:f5:de:33:da:9e:c6:bc:30:f9:78:d0:e6:f1:5c:87:
c8:bf:28:9e:24:0c:e0:1e:18:06:9e:27:bd:6d:78:99:51:b3:
78:96:4d:9b:df:c1:07:2b:12:61:e5:ef:6f:3b:61:1b:5c:a4:
38:ef:8a:57:63:02:79:bf:24:36:df:69:e7:3c:2d:1c:3e:34:
1f:82:c4:72:fa:0f:db:85:05:77:d5:09:13:57:2f:7f:f5:f2:
b0:03:40:6f:a0:1d:6a:ff:3e:84:63:be:0a:f5:a3:18:9b:14:
0d:2a:d9:25:b3:51:96:e4:90:88:23:a9:b0:61:81:a3:14:28:
48:2d:e1:09:60:c7:59:bc:d0:18:ea:36:08:75:95:22:e1:56:
eb:9b:77:ef:17:a0:7d:88:e0:bf:26:ef:0f:02:36:7d:cf:98:
c4:67:62:41:e0:95:1c:0d:6c:96:c5:a8:22:72:17:f7:88:0d:
3a:2e:8d:68:d4:06:f1:e1:42:68:e8:33:25:76:68:a6:37:3a:
f5:f9:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:22 2026 by rpki-client