
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
File: L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json)
Hash identifier: yttzwINUFKdWjEOLhehD958GsgGuwwG7CJ9BKvAnKKQ=
Subject key identifier: 4F:B0:6F:46:4B:9A:26:CE:9A:B0:16:24:A2:BF:04:40:7C:1B:27:D7
Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
Certificate issuer: /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Certificate serial: 03F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
Manifest number: 03E9
Signing time: Wed 25 Mar 2026 00:10:14 +0000
Manifest this update: Wed 25 Mar 2026 00:10:13 +0000
Manifest next update: Wed 01 Apr 2026 00:10:13 +0000
Files and hashes: 1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: R6Nh53kpxhc6NifsQY0IWWJ6fIO1Sc32W9QOkrOVoLU=)
2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: NbtGj9VX66Z/q14wLFr80IvVPTzt6u9+KSXlI9rhNls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1008 (0x3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ECB0, serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Validity
Not Before: Mar 25 00:10:13 2026 GMT
Not After : Apr 1 00:10:13 2026 GMT
Subject: CN=69c327e6-bac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:8f:9d:8a:5c:d1:0b:b5:55:29:b2:fb:b8:
40:06:f7:e9:a0:a8:5a:e0:d2:c3:30:2b:52:31:1b:
20:4a:ef:ad:37:ce:7d:ec:ad:96:34:7a:f8:0e:d8:
a0:39:47:80:4e:16:c8:a3:4d:17:13:41:a9:cb:ba:
46:23:e5:9b:5f:63:37:3a:df:a1:b5:3f:0d:9b:4e:
b7:f4:82:cc:d0:62:16:91:bf:80:a4:a3:36:6d:8f:
49:02:53:f6:10:a3:4b:be:46:53:e2:be:9b:1c:df:
6c:29:59:7f:6c:fa:1b:48:34:62:f0:a9:18:ba:ff:
fe:10:b4:96:db:d2:d5:0a:37:7f:6d:80:3f:5c:47:
d6:73:8f:6c:97:12:45:a3:08:78:f5:a0:dd:3f:09:
a5:0b:1b:3d:82:98:15:bf:e9:c3:a1:27:d9:c7:3f:
7c:19:e2:d2:16:83:d8:4c:f8:f6:82:c9:22:1e:5e:
3f:b8:90:f9:93:e6:b3:58:03:38:af:b4:21:a4:b2:
e2:87:46:e4:43:b8:30:61:22:a3:9a:39:46:79:d9:
e6:21:5d:29:db:3e:f4:fa:17:71:54:3b:07:f7:9b:
cf:3f:96:57:59:b9:b9:eb:df:b9:3d:d1:ec:13:bf:
1a:bd:05:11:ef:ef:2f:45:4b:98:07:44:fb:e8:3a:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B0:6F:46:4B:9A:26:CE:9A:B0:16:24:A2:BF:04:40:7C:1B:27:D7
X509v3 Authority Key Identifier:
keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b3:7b:f4:16:32:e2:f3:5b:b7:a0:d7:9b:ce:04:04:0e:cc:
fc:42:f2:3b:4d:b5:fc:02:bc:1e:fe:ab:d5:9f:bb:86:10:fd:
7b:d1:7d:47:35:ea:f6:23:cd:62:90:39:d8:50:78:a3:18:0d:
da:e8:37:e2:cf:69:af:8c:4c:d7:a6:68:32:71:92:2a:89:2b:
41:97:7c:0c:87:e2:25:94:61:2a:0c:95:7a:db:11:b6:11:37:
3a:9b:c3:0c:4d:82:2f:6d:26:bb:96:9d:57:8e:4a:a0:0b:a5:
b4:45:92:45:a8:6a:81:d8:00:88:a5:8f:2d:7b:86:54:6d:04:
38:3e:47:20:79:28:46:85:f1:d7:84:a5:75:11:be:4f:16:f2:
2c:f9:a8:b8:ca:31:2f:78:d6:fd:ed:55:36:2d:e5:10:b1:3f:
ea:db:16:bc:7d:ec:26:54:e9:7d:40:f2:68:89:3b:1b:a1:64:
90:20:11:ca:50:7f:77:73:9c:16:b6:bd:3a:cc:e1:67:27:0c:
66:54:bd:3c:40:67:93:94:5b:47:3e:14:b4:19:04:79:56:95:
ea:75:6e:82:af:3c:c7:32:87:da:31:e9:ec:fe:c9:5f:89:7e:
84:ed:7a:c2:30:69:7d:9d:7d:37:58:dc:39:36:10:1f:b3:d0:
9b:27:7f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:25:19 2026 by rpki-client