
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
File: t_uD0cnC98OLcAJxRkrCM2Ti59c.mft (raw, json)
Hash identifier: fgoGvPS13YwVKo8qewuccCjRRC5v9BkMjWCwT0jqMpI=
Subject key identifier: F8:11:94:32:34:B2:09:F7:A7:FB:43:AC:87:CB:D0:7B:AE:70:A9:1E
Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
Certificate issuer: /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
Manifest number: 4B
Signing time: Wed 25 Mar 2026 07:31:14 +0000
Manifest this update: Wed 25 Mar 2026 07:31:14 +0000
Manifest next update: Wed 01 Apr 2026 07:31:14 +0000
Files and hashes: 1: t_uD0cnC98OLcAJxRkrCM2Ti59c.crl (hash: tQaeuEVhNBfYayFcKt6c4ygR+YHluy601HKWDHXLMak=)
2: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (hash: fuNnrqSgI2XXye8Z2eFA0jRKqdXrxlxebRTfn3G5134=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Validity
Not Before: Mar 25 07:31:14 2026 GMT
Not After : Apr 1 07:31:14 2026 GMT
Subject: CN=69c38f42-cc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:43:ef:62:26:da:25:e9:cc:d2:d2:5c:40:
53:e3:03:6c:5b:47:95:53:11:cb:67:e6:3c:71:00:
01:f6:b8:01:3d:92:1a:4c:c3:1c:50:d3:94:c8:dd:
7c:3c:df:b9:56:d2:38:d5:78:ba:80:00:ab:03:7b:
6b:05:b5:fb:61:88:d0:3d:26:cc:11:44:ed:82:e3:
5a:90:f6:61:31:be:2a:53:9d:8c:2a:90:97:c4:30:
0f:f4:dd:18:28:83:f2:49:21:d5:1f:f9:92:19:37:
ca:80:14:8b:12:80:99:ae:e0:d1:8c:2d:65:ee:d2:
5b:fd:aa:ab:30:a8:db:d7:ec:02:b4:b5:17:3d:a9:
75:56:25:fa:99:1b:20:cb:ef:af:dc:49:04:1f:64:
80:c8:ac:10:f4:57:7a:29:0c:32:81:97:d5:f9:f7:
a4:e6:4b:6e:4c:50:9d:9b:e7:08:fe:16:a3:9b:8a:
34:2d:85:24:52:0e:c1:e4:58:d8:58:23:1e:42:03:
38:b9:7b:ad:60:01:f5:40:bd:de:d5:bd:7b:77:8c:
aa:8c:07:a5:48:eb:5f:03:15:44:2f:e5:de:88:3c:
67:ca:18:2d:a3:96:d0:c7:24:c6:80:ea:43:e7:55:
3a:a7:13:37:a4:31:c5:c0:ef:63:d7:38:17:86:8a:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:11:94:32:34:B2:09:F7:A7:FB:43:AC:87:CB:D0:7B:AE:70:A9:1E
X509v3 Authority Key Identifier:
keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:ed:21:08:c6:35:20:ce:08:90:20:5c:56:f2:5a:93:e0:f7:
41:6a:a0:4b:c1:07:d4:c9:0f:f6:fa:62:95:be:18:f4:1c:99:
0b:91:21:28:d1:ae:57:3b:ad:c1:ed:36:66:c2:bd:aa:eb:3e:
7a:e4:d7:22:66:cc:bc:86:40:ca:22:c8:8b:4c:59:90:ea:4b:
fb:f0:fe:4d:10:f8:40:f6:7a:cc:a5:1d:2b:1a:3f:e4:a6:bf:
77:d1:2c:55:53:68:11:43:55:59:72:95:fc:8d:ee:ee:98:79:
4b:90:cc:30:a8:dd:2e:0a:4a:a8:33:4b:92:41:57:75:a8:f1:
c8:16:fc:cc:53:f1:37:33:21:15:02:d6:23:30:71:72:ec:e0:
cf:b2:f7:30:96:d2:e5:fd:c2:a8:86:55:26:bb:ac:56:b5:85:
5f:ae:67:4a:ba:ad:ce:cf:ea:4c:c3:e6:a1:53:71:ee:06:f8:
84:b3:ba:fc:ee:e1:36:74:57:49:4a:de:6f:38:f5:bc:7e:cf:
5a:da:57:a7:59:53:08:6c:b6:3d:2a:35:10:bc:13:53:9b:4d:
f5:d1:c1:4d:fd:ec:d6:d3:c4:3c:7d:32:5f:22:68:83:8e:87:
61:d1:d2:36:94:8e:a0:d2:52:a8:8c:6c:ad:f2:e0:60:84:4c:
d4:95:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:02 2026 by rpki-client