
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json)
Hash identifier: mel/EHck4/YydeYpdFfW/WKcOk6LEKBN/6jWA5GfL2g=
Subject key identifier: 4D:25:6F:F3:0B:97:EB:14:EF:DF:FC:89:40:F2:1B:E5:9B:F0:FF:B3
Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Certificate serial: 0254
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
Manifest number: 024D
Signing time: Fri 27 Mar 2026 01:53:12 +0000
Manifest this update: Fri 27 Mar 2026 01:53:12 +0000
Manifest next update: Fri 03 Apr 2026 01:53:12 +0000
Files and hashes: 1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: ZX9JOm9Qj7wauR4Rkdhkg1uwYDPcdFrJFTWV/abcYEQ=)
2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: qwTYpn0O77TiQ0Che39rdUdkqwh0ZGsp41fX2jEMpJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl
rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FD2B, serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Validity
Not Before: Mar 27 01:53:12 2026 GMT
Not After : Apr 3 01:53:12 2026 GMT
Subject: CN=69c5e308-ae4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:56:fc:13:45:da:b1:0a:4d:84:1b:ba:c8:
94:20:15:69:7c:84:82:38:0b:65:89:01:cd:6a:86:
20:fe:46:35:fb:27:56:4f:04:5f:f3:0b:97:58:1f:
ff:f8:a2:21:cf:a9:b5:b9:18:36:58:b7:bd:1c:fe:
47:c3:6a:3c:c0:b0:af:4b:ce:1a:c5:24:10:c1:7e:
a9:ac:29:ad:ec:b1:c2:75:18:be:b1:c9:5e:11:9a:
22:12:70:ef:a2:f6:78:d7:c1:57:1a:88:42:cf:3b:
b5:3d:4b:fe:70:9b:e9:44:3d:ed:cf:b7:3f:25:38:
9b:ed:8e:3a:ba:4f:2a:15:e9:a2:52:b6:6b:de:ee:
39:b4:60:94:70:a7:5e:6f:f4:ad:5d:1c:b4:fd:71:
70:8b:bd:42:33:1f:6e:41:e3:69:27:ec:be:1c:16:
03:59:f6:46:9d:94:f7:33:93:5f:bb:4a:a7:91:bf:
98:29:a4:8a:a5:f6:9c:31:61:86:3b:e4:ff:7e:cc:
ea:57:c6:1b:c9:01:fa:76:55:48:85:ec:3d:fb:03:
a0:23:61:77:7c:eb:2f:58:fa:92:9e:76:dd:0d:d6:
a0:ad:1e:c4:f3:8b:de:12:2a:5a:26:4a:ee:63:97:
69:43:76:6b:98:82:50:b5:f1:c7:20:b8:ce:35:d1:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:6F:F3:0B:97:EB:14:EF:DF:FC:89:40:F2:1B:E5:9B:F0:FF:B3
X509v3 Authority Key Identifier:
keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:d9:df:96:0d:dd:dd:ad:80:f0:f6:39:a9:16:3b:9c:dc:af:
ef:e6:a8:9b:1e:2f:63:26:a5:50:44:4f:68:79:0e:bf:e7:db:
08:a8:bf:62:97:20:3c:81:6e:f3:08:77:0f:26:82:26:7d:50:
3d:1f:f7:c1:67:ab:97:a1:06:a8:bc:ae:f3:17:82:5b:5b:95:
1b:95:52:58:b1:52:74:d9:5a:13:f7:2c:38:67:40:65:a4:f7:
e0:e6:fe:d3:58:11:fa:0f:66:49:5d:f5:bb:74:25:4a:8c:75:
3a:89:bd:00:48:10:7a:ef:d0:3d:46:68:33:2e:8c:8b:76:c0:
10:74:ac:79:3c:b6:5a:e8:bc:18:11:cc:a4:2f:5f:4a:3c:71:
1c:95:88:90:b9:5c:3a:e9:6a:8c:68:2c:18:fe:4f:b7:e2:c4:
6f:ff:8c:df:30:01:5c:62:63:a3:b8:a4:e4:b4:fb:85:aa:73:
f7:03:15:22:24:2c:5d:3c:79:05:70:6d:c9:e9:32:73:65:48:
58:61:5e:23:eb:1d:f0:9d:fb:52:a2:b1:6e:1e:48:a1:f7:4f:
e4:88:ae:a9:7f:0b:ae:bf:fc:5f:5c:64:8b:2f:4c:b8:9a:58:
c8:0d:90:26:f6:bb:02:cd:f8:f1:96:c7:b0:0c:cd:d4:71:e3:
bb:1a:09:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:14 2026 by rpki-client