
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
File: t88LJwp_2x1xeui5edHuD_iL1E8.mft (raw, json)
Hash identifier: 8tgLydGrZk/jDrm5myh3F9GQVWkOYVRX2dVv6kE4CyQ=
Subject key identifier: AE:A1:40:A6:A9:91:FA:88:E6:37:41:88:2A:22:BD:EC:B3:87:E5:41
Authority key identifier: B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
Certificate issuer: /CN=A915B50D/serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
Manifest number: 011E
Signing time: Wed 25 Mar 2026 05:00:40 +0000
Manifest this update: Wed 25 Mar 2026 05:00:40 +0000
Manifest next update: Wed 01 Apr 2026 05:00:40 +0000
Files and hashes: 1: t88LJwp_2x1xeui5edHuD_iL1E8.crl (hash: +If5rWMK+ffPj4IeJXK6eUC+vyKTe9xa6z5AwY//PoA=)
2: 85CDB6087C1211EF8E490677C4F9AE02.roa (hash: TO3XTdT/DEcz0EwsnCkJFQV2AIizwCx/zpnaBPib7gQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B50D, serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Validity
Not Before: Mar 25 05:00:40 2026 GMT
Not After : Apr 1 05:00:40 2026 GMT
Subject: CN=69c36bf8-8e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:e6:35:a9:3b:ef:41:20:fe:b3:73:17:9e:
d9:23:83:a6:b7:2a:43:f8:1b:40:ab:25:32:43:3f:
1d:42:50:b2:41:2e:63:2a:37:12:16:10:66:6a:f0:
c9:15:90:ce:41:36:a0:3c:e8:27:9d:b4:fc:03:23:
c1:81:08:d5:82:c2:e3:73:a5:bb:3e:f7:14:a6:32:
75:c7:47:d6:24:26:70:67:9e:ce:b8:3b:49:d4:b3:
0f:aa:5a:99:32:0d:da:c6:00:e1:a8:9f:e9:0d:c2:
8e:be:57:91:8b:8d:03:1f:4a:1f:60:de:19:6c:82:
da:85:93:40:94:24:88:46:12:61:5a:e4:c6:c6:2e:
41:bf:4d:66:c1:97:51:81:c0:8e:e6:fe:2c:1d:2d:
db:ad:d2:8f:8f:e7:3b:4f:1f:65:72:ad:07:a7:b4:
f0:9a:fc:05:82:54:1e:19:a9:7a:65:2e:94:ad:ee:
d6:91:cb:39:b9:ea:c4:33:cc:ac:48:f0:e0:21:65:
9e:e1:99:17:a7:20:ec:7a:dc:e7:24:45:b6:06:ef:
e0:ce:12:da:ca:a8:ea:0e:a2:a0:2c:61:81:1e:69:
fb:57:20:c7:f3:28:c9:47:08:3f:fe:ed:56:c0:3e:
fd:8f:61:d4:ff:7f:97:df:b7:cd:73:00:e0:99:ad:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A1:40:A6:A9:91:FA:88:E6:37:41:88:2A:22:BD:EC:B3:87:E5:41
X509v3 Authority Key Identifier:
keyid:B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:c4:d2:53:d1:cd:37:51:e9:8f:ab:0b:b3:0c:10:48:94:39:
eb:f8:61:1e:26:69:f5:dc:f7:14:5e:95:63:36:a6:e9:e8:91:
79:86:b4:05:1b:62:d9:39:d0:b5:13:dc:24:4c:3d:74:46:37:
a0:e2:fa:4a:b3:63:1d:81:74:85:7a:ee:64:a8:f4:64:a6:82:
73:1e:83:25:21:1f:cb:66:05:71:1c:d4:7c:56:24:28:58:fa:
d4:80:74:8b:57:98:b1:d9:b1:08:17:d7:97:95:34:d8:5e:6b:
75:c3:10:5f:d0:0e:47:b5:89:78:7e:3d:96:1a:a9:7e:bf:60:
2e:4b:05:f4:f4:2e:cd:97:52:4f:76:a6:ef:13:a3:ba:6c:72:
53:20:e2:5e:08:b8:b0:7d:ac:1e:dd:dd:ee:72:e3:28:ff:c6:
33:7b:cf:73:e0:6a:2a:b8:6a:97:bc:3e:24:4a:93:45:86:70:
16:9c:e2:63:9f:48:0f:34:22:b2:e2:46:e7:17:f9:9d:29:d6:
a0:3f:d3:f7:88:df:01:df:9d:2a:89:e6:2c:75:91:fe:8d:8f:
49:b5:c6:3b:39:20:29:ea:6c:bc:a7:12:e5:ae:5c:96:88:a3:
70:10:42:38:1f:d0:c8:6d:35:d9:7b:e9:f7:e1:40:e8:39:81:
29:5b:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:52 2026 by rpki-client