
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
File: 0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft (raw, json)
Hash identifier: DypXtEl69r1HeaRoOolmFYI+ZQbnt0XdtkScNvOHsUk=
Subject key identifier: 75:F2:5A:2B:81:64:E2:67:97:65:CB:90:F5:A0:85:1E:CF:46:81:20
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial: 1959
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
Manifest number: 18D9
Signing time: Tue 24 Mar 2026 16:23:34 +0000
Manifest this update: Tue 24 Mar 2026 16:23:33 +0000
Manifest next update: Tue 31 Mar 2026 16:23:33 +0000
Files and hashes: 1: 0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl (hash: seh37TlheuWDY2JS3NIbUB5TNYYP2z8+0DQ/fgX3vTI=)
2: 6C286292CFEB11F085499838C4F9AE02.roa (hash: 08eCd0pA+9GDu0z2aM7JPPyYkKV7vQjDF0c8rXJc9YU=)
3: 6A4CFDF2CFEB11F08B839838C4F9AE02.roa (hash: 9jyAvIyV1OlPF0d6mHiVerv4JVbecfoxwK6m8wjGhKg=)
4: A108D60CF92E11EA8946AD6AC4F9AE02.roa (hash: imiT+W8/s1mg77SmRNb+Kx8sox1CDXbEL2YtpMvUGKA=)
5: B6928054843011EAB4270B83C4F9AE02.roa (hash: PhfMNpON7Qtsv6soC2g/roKH8BMRCGri+BYAU8OB1r8=)
6: B5629336843011EAB4270B83C4F9AE02.roa (hash: 0kNnzdVeh0Sh6Uho6EuziJV6g8jYacMqFFcOgtfoNRU=)
7: B728544E843011EAB4270B83C4F9AE02.roa (hash: BoFNm+faDxlrNXahftmc3z/P1BHBF3TaYlLc/KehAvw=)
8: E3ED0E12882611EAA5182C45C4F9AE02.roa (hash: 72mNhj4w6tfPGO9eWuGutGDZ5X0DldKkyN1ov6fWX3k=)
9: 6AF5AEC0CFEB11F0A1299838C4F9AE02.roa (hash: utR/09O0AGP/257BXicDFWozKqlEHDXtcXIiW8htsC0=)
10: A084D2B2F92E11EA8946AD6AC4F9AE02.roa (hash: nSwo4XopEvOr0z0mxDFJUemzXUU2DDUmNVH0Q4Bo3ug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6489 (0x1959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Validity
Not Before: Mar 24 16:23:33 2026 GMT
Not After : Mar 31 16:23:33 2026 GMT
Subject: CN=69c2ba86-4ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:c2:8e:bd:6a:67:aa:0e:25:25:cf:6e:28:
b3:56:e1:4a:21:ad:be:b0:97:13:0a:85:eb:51:81:
4a:2f:b5:5c:0b:4a:47:3f:c7:a7:c7:40:42:2b:c1:
e2:aa:d1:62:21:36:e8:6b:7e:f1:40:18:be:34:bf:
fa:f2:e3:39:c5:30:46:5e:ff:e3:8c:3b:3e:ae:2a:
fb:67:01:73:a6:de:51:31:e2:3b:95:e6:bd:f1:21:
e3:3c:0f:b7:b9:23:f7:f9:29:cf:81:82:af:26:b0:
eb:f2:18:61:d0:bd:d1:01:ff:81:e2:f1:c5:90:48:
e2:2e:e7:e7:b2:0e:65:b0:25:45:76:60:8a:8f:77:
d6:39:29:e6:1a:64:ae:c4:f2:9a:41:ab:59:b6:b8:
6c:fa:50:16:7a:67:4e:16:2c:e2:8c:ed:18:a6:b9:
7a:dc:45:c8:69:79:41:6a:f8:1b:e2:ef:73:31:02:
11:19:40:ba:fc:a1:11:a5:3b:22:c1:b2:db:df:56:
da:31:ad:87:70:21:3f:90:ab:37:8d:e3:9a:77:01:
ce:eb:d9:9a:44:96:30:c2:50:3d:cf:80:cd:f4:11:
ae:37:e1:b3:12:fe:e0:91:53:94:b4:e6:bf:61:04:
0d:18:72:62:87:07:21:59:b9:d9:9c:d4:25:fa:2f:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F2:5A:2B:81:64:E2:67:97:65:CB:90:F5:A0:85:1E:CF:46:81:20
X509v3 Authority Key Identifier:
keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0a:f8:58:bc:39:b9:5d:16:81:0b:1b:86:74:33:a6:2f:b3:
3f:f3:a9:a9:07:a1:1b:80:2b:6a:7c:15:f1:1e:4a:ef:37:05:
26:e1:43:b3:a6:f9:0d:03:cc:d4:45:a7:d3:df:4d:a1:54:6a:
da:f8:75:8b:11:3b:93:8e:d9:b9:66:9c:7f:0f:aa:0c:1d:3c:
58:db:82:29:29:bc:d5:62:f8:38:23:9a:38:32:9f:8e:a8:57:
8e:22:85:ff:84:ce:da:79:ee:8c:c7:ae:93:3c:4e:59:d7:77:
8c:5e:85:e3:c7:6f:39:52:35:54:af:10:90:d5:15:42:b1:60:
b6:e6:1a:4c:f3:7c:bc:37:6f:69:19:6a:6e:f3:93:c3:d9:9c:
fe:6d:2c:86:cb:bb:58:63:e6:cc:68:d8:31:eb:08:4f:2b:cd:
13:63:50:5b:ea:e4:e2:d9:93:ab:40:78:e2:8b:e5:cf:2f:66:
2b:e3:81:8c:e7:63:35:3f:01:fb:76:27:ad:2a:75:09:a8:b7:
e1:d4:a3:97:8a:00:58:5e:76:11:9d:16:a9:fb:58:2e:4d:d0:
da:4a:d4:e6:1b:05:e3:57:6d:ae:e3:a9:3e:80:a8:6b:ec:f1:
4f:78:5e:c6:79:b8:05:bc:97:38:fc:65:c7:30:66:46:5b:e0:
90:af:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:54 2026 by rpki-client