
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
File: 39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json)
Hash identifier: nGanR4gjpxekiFlX/LXrQ84rzi+dByvuTOSPZSzL/pQ=
Subject key identifier: 75:69:4A:C3:30:50:66:9D:C2:14:E7:67:9F:E0:E6:09:1C:41:A8:6E
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial: 03FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
Manifest number: 03CA
Signing time: Wed 25 Mar 2026 00:24:20 +0000
Manifest this update: Wed 25 Mar 2026 00:24:19 +0000
Manifest next update: Wed 01 Apr 2026 00:24:19 +0000
Files and hashes: 1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: pLGRYSQgf8HnB+o/qe4rg0TmbXKxu0KacwL8u+XHkGM=)
2: A07DBC62B03911F083346261C4F9AE02.roa (hash: uzzVjU0vlLViUYzZlwO7ZWK54M/pUBuzu8meQ5zLjAM=)
3: 3CDB97F6B03911F09A54BE60C4F9AE02.roa (hash: ub1/IpzR6a2eFu+k1eQE363sBtNpdMipe2SlnT7hz+w=)
4: C05125CC678F11EFA63C404CC4F9AE02.roa (hash: GNz5xk64wnfx/4OAoVC+qjb47jUMVl6izW1qjc9nwnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1019 (0x3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Validity
Not Before: Mar 25 00:24:19 2026 GMT
Not After : Apr 1 00:24:19 2026 GMT
Subject: CN=69c32b34-8133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:9a:03:b0:1a:fd:97:ed:c5:68:1b:64:35:
55:b1:81:19:59:b6:f1:ee:da:e6:00:eb:c9:10:cd:
2f:d8:63:20:54:42:13:fe:4d:f5:57:3a:76:e7:c0:
4b:81:30:15:41:7a:1d:df:c9:bf:62:22:a8:4a:7f:
76:75:25:dc:fd:cd:07:db:8a:b2:a0:30:89:af:2c:
9f:5e:eb:62:ce:d0:16:e9:6b:cd:79:5f:49:65:1d:
97:4a:ec:08:bb:57:0f:51:19:ae:a8:44:32:f4:11:
54:a1:37:c8:21:81:1c:0b:51:e5:5d:e9:d1:3c:85:
a8:90:9a:35:05:9c:fc:e2:c3:8a:eb:e5:45:23:2a:
0c:98:03:1c:4c:a0:45:69:1a:12:37:13:f0:ca:0f:
88:3e:4a:c6:db:00:da:b9:e8:6d:b7:a9:83:bd:1b:
72:da:15:87:a3:8f:b5:6d:64:8a:f1:5c:6f:fd:d1:
16:e3:76:f7:cc:07:c5:5b:03:10:58:e5:9d:f2:e1:
63:2b:78:cf:7d:e3:f3:60:3c:c1:06:6a:65:08:52:
25:0b:16:eb:54:35:1f:21:31:01:c6:b8:b5:a9:95:
5c:40:0e:84:87:be:37:0e:a1:3d:b7:e0:64:55:f3:
48:f7:04:8b:aa:22:ec:28:15:ad:7e:91:92:02:12:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:69:4A:C3:30:50:66:9D:C2:14:E7:67:9F:E0:E6:09:1C:41:A8:6E
X509v3 Authority Key Identifier:
keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8e:e6:33:f4:7a:f5:7f:fc:57:74:88:86:a9:7c:6a:06:52:
0d:d4:a9:6f:e1:67:4a:74:f1:14:a4:c4:64:b4:a9:c3:7d:30:
d8:f1:19:92:3c:02:ea:24:64:72:a7:34:7a:83:8e:7f:c2:27:
d5:c6:ee:7e:c7:6a:b4:12:b8:95:89:9a:e4:83:d1:e7:45:76:
59:be:2b:3f:0c:26:ea:18:08:01:a0:75:f7:8e:15:de:97:15:
c3:4a:8b:6d:d9:78:aa:72:ca:36:eb:ed:5e:25:16:07:aa:09:
f3:fa:1f:6d:05:9d:ae:9f:19:05:31:bc:0e:70:c6:52:31:97:
8a:5a:b6:f8:bb:4a:f7:51:51:70:0e:cf:7d:53:13:8d:2d:6c:
b1:31:b6:aa:f2:b4:47:bd:c6:db:17:8c:bc:db:dc:ca:30:da:
1a:3d:1a:94:22:21:a7:14:2a:25:ce:01:45:5a:6b:9a:c6:cd:
cc:29:ba:17:ee:a2:0c:b2:30:a6:29:2e:df:f5:33:34:fa:7d:
1f:70:64:fe:82:59:88:bb:5d:c8:a0:06:d7:94:80:d3:cd:f1:
d1:a8:fd:21:47:f5:ce:94:43:19:69:d3:8c:df:6d:ad:00:e6:
4f:cb:3b:1c:0e:ac:6b:b1:ec:b3:87:65:02:f7:15:7e:a0:cb:
ae:ad:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:57 2026 by rpki-client