
$ rpki-client -vvf rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft
File: 0fxphnCiQetFTVXFZ6paY1rwoGM.mft (raw, json)
Hash identifier: 8Me0qiSRl4MOmPDcieZfgEmBemeQr6TzoOIB+JLdagU=
Subject key identifier: AD:24:4C:34:F9:FA:C2:24:52:16:0E:14:03:58:E3:83:12:E8:72:69
Authority key identifier: D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63
Certificate issuer: /CN=A918681B/serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063
Certificate serial: 059E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft
Manifest number: 058F
Signing time: Tue 24 Mar 2026 22:58:10 +0000
Manifest this update: Tue 24 Mar 2026 22:58:09 +0000
Manifest next update: Tue 31 Mar 2026 22:58:09 +0000
Files and hashes: 1: 0fxphnCiQetFTVXFZ6paY1rwoGM.crl (hash: Q4JFb6Fh83ov2wh0DAUfSLkPWqEmG1EmoVUIOFRpMuU=)
2: 5D4D3E261A3E11ECB42D0B80C4F9AE02.roa (hash: L1WTmaZOlDc8DGVpol+MVtfR9Wp5HWytJ0pEqw1c3xE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl
rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1438 (0x59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918681B, serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063
Validity
Not Before: Mar 24 22:58:09 2026 GMT
Not After : Mar 31 22:58:09 2026 GMT
Subject: CN=69c31702-335b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:f1:12:81:d5:e3:aa:c5:52:70:c0:2b:35:
62:ff:d8:99:bc:6b:57:67:23:10:89:02:b3:e3:ef:
2f:c1:ae:cb:8c:10:84:d6:60:cb:67:a0:5c:35:1d:
e1:d2:08:95:e2:7b:c4:58:f0:3c:41:71:66:97:0f:
9d:cd:5d:7b:21:a6:a8:3b:e5:e1:85:61:c9:27:24:
b5:81:51:a5:23:4e:da:13:bc:6a:c2:e7:3e:13:41:
78:e0:a7:31:51:f0:06:97:8f:8d:fc:f5:c8:da:8a:
34:4e:60:1f:88:2c:3d:76:07:f6:00:5a:b5:3d:6b:
0c:c0:b1:60:48:8d:ea:b5:2f:7d:d5:30:5e:dc:6d:
32:17:a5:12:c7:08:4e:19:a2:78:52:a5:c0:fd:ad:
27:2c:c2:71:d1:ca:cf:01:42:0f:b7:59:15:5a:03:
5c:cc:4d:1d:13:8a:6a:48:9c:96:b2:7b:1a:b5:5a:
80:2e:8b:cf:8f:4d:d7:82:22:05:2c:cc:a7:5f:d2:
b8:34:ef:40:df:d2:e1:95:9b:98:21:54:0b:25:40:
20:6b:2b:94:f1:03:44:ce:01:c4:fb:fa:21:ea:0a:
be:ac:11:c3:3b:05:b7:f3:dd:3e:46:0f:ac:50:70:
71:8b:28:80:52:75:18:a4:81:93:57:81:5a:40:99:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:4C:34:F9:FA:C2:24:52:16:0E:14:03:58:E3:83:12:E8:72:69
X509v3 Authority Key Identifier:
keyid:D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cb:75:a1:cd:f6:b8:5f:e3:6f:ff:60:d0:52:28:14:f1:aa:
ea:0e:be:4a:ae:8f:ac:5e:24:5a:4d:5c:7a:5d:6b:fc:2d:f1:
16:47:de:5d:86:74:62:33:03:92:14:e6:b6:ba:18:6a:50:a2:
90:d2:32:bd:aa:7d:30:3a:8d:83:1b:80:1a:b1:c0:88:1c:b5:
12:9c:6b:65:10:2f:68:25:4d:fa:0d:5f:84:85:5c:45:3e:a5:
6a:64:9b:92:e9:10:70:1c:95:43:61:3f:04:52:48:74:f8:6c:
23:54:3f:f7:d5:4c:fa:ac:c8:d6:98:22:21:68:bb:6d:98:a7:
6c:87:ef:65:dd:0c:57:23:07:0f:63:1f:de:c6:e1:a4:91:f0:
03:27:ef:c7:76:fc:df:84:b0:29:f5:22:95:e0:1e:f5:84:51:
57:d8:ff:3c:00:5e:a9:28:ac:f6:6d:cc:71:c5:d1:fd:af:88:
bb:84:92:18:a2:a6:62:81:40:aa:ff:98:3e:85:ce:21:e4:08:
ca:63:4a:a5:fa:0f:a8:8c:42:ec:f2:cf:17:67:3f:44:7e:8b:
22:8b:e2:9a:3c:05:5e:11:04:17:da:1f:27:c7:5e:d7:4d:54:
3d:26:fb:54:b9:fe:cc:54:c8:51:ed:57:bc:36:23:5f:2d:30:
1d:8b:46:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY4MUIxMTAvBgNVBAUTKEQxRkM2OTg2NzBBMjQxRUI0NTRENTVDNTY3QUE1QTYz
NUFGMEEwNjMwHhcNMjYwMzI0MjI1ODA5WhcNMjYwMzMxMjI1ODA5WjAYMRYwFAYD
VQQDEw02OWMzMTcwMi0zMzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApj7xEoHV46rFUnDAKzVi/9iZvGtXZyMQiQKz4+8vwa7LjBCE1mDLZ6BcNR3h
0giV4nvEWPA8QXFmlw+dzV17IaaoO+XhhWHJJyS1gVGlI07aE7xqwuc+E0F44Kcx
UfAGl4+N/PXI2oo0TmAfiCw9dgf2AFq1PWsMwLFgSI3qtS991TBe3G0yF6USxwhO
GaJ4UqXA/a0nLMJx0crPAUIPt1kVWgNczE0dE4pqSJyWsnsatVqALovPj03XgiIF
LMynX9K4NO9A39LhlZuYIVQLJUAgayuU8QNEzgHE+/oh6gq+rBHDOwW3890+Rg+s
UHBxiyiAUnUYpIGTV4FaQJk2LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0kTDT5
+sIkUhYOFANY44MS6HJpMB8GA1UdIwQYMBaAFNH8aYZwokHrRU1VxWeqWmNa8KBj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjgxQi9DNDNGQkQwNjFB
M0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFldEZUVlhGWjZwYVkxcndv
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBmeHBobkNpUWV0RlRWWEZaNnBhWTFyd29HTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjgxQi9DNDNGQkQwNjFBM0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFl
dEZUVlhGWjZwYVkxcndvR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj8t1oc32uF/jb/9g0FIoFPGq6g6+Sq6PrF4kWk1cel1r/C3xFkfeXYZ0YjMD
khTmtroYalCikNIyvap9MDqNgxuAGrHAiBy1EpxrZRAvaCVN+g1fhIVcRT6lamSb
kukQcByVQ2E/BFJIdPhsI1Q/99VM+qzI1pgiIWi7bZinbIfvZd0MVyMHD2Mf3sbh
pJHwAyfvx3b834SwKfUileAe9YRRV9j/PABeqSis9m3MccXR/a+Iu4SSGKKmYoFA
qv+YPoXOIeQIymNKpfoPqIxC7PLPF2c/RH6LIovimjwFXhEEF9ofJ8de101UPSb7
VLn+zFTIUe1XvDYjXy0wHYtGGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:42 2026 by rpki-client