
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json)
Hash identifier: oSJRe7P8dT4neDLihpcXImMpxA3i2QdZVRyzXIfkAHk=
Subject key identifier: 54:B6:C5:75:BE:A0:B6:FB:20:D4:B5:22:1F:B9:1A:38:71:F7:AD:21
Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
Manifest number: D4
Signing time: Fri 27 Mar 2026 06:16:29 +0000
Manifest this update: Fri 27 Mar 2026 06:16:28 +0000
Manifest next update: Fri 03 Apr 2026 06:16:28 +0000
Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: 5ycPYwiQHb+jTPZ5FexgcHEjG+teZJuGFOoT9w4bZAo=)
2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: qrM0axK44PGlug9CSywwyJZWvc/Bi96UzYkyFDe2HFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Validity
Not Before: Mar 27 06:16:28 2026 GMT
Not After : Apr 3 06:16:28 2026 GMT
Subject: CN=69c620bd-0314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:43:a3:1a:88:71:0b:af:bd:80:88:b5:2a:
a4:ba:52:e3:e8:95:70:d5:f6:58:59:dd:fe:c3:d9:
99:8a:36:a5:6a:d8:18:21:17:0d:7a:7d:a0:e3:cf:
c2:b1:cd:df:70:f9:45:b8:19:75:b6:07:aa:93:43:
cd:35:b2:a1:d7:74:2e:b8:8c:4a:dd:95:b2:13:1d:
02:35:5c:ab:65:a5:dc:8a:72:78:7c:a1:2e:33:8c:
5c:fb:97:f6:a7:e6:0e:20:38:44:e8:1b:2b:5b:2b:
8b:bc:65:a3:49:a1:52:9f:dd:be:73:77:a4:9e:da:
b7:ee:41:0c:3d:f2:10:8f:69:38:28:f2:f6:2e:93:
aa:e3:a7:89:05:4e:d3:c2:47:c0:87:c1:27:11:1a:
ea:98:5f:df:df:9c:f4:fd:c5:15:25:e4:f7:e9:fc:
ab:57:29:00:f9:a4:10:19:0a:5c:83:01:d4:41:24:
36:41:54:0a:b3:18:39:91:d4:fb:99:26:4f:ff:2c:
8e:e7:13:e6:88:69:09:bc:4e:ad:10:94:20:1f:c5:
91:e8:44:cb:19:03:84:8f:23:17:55:37:eb:a9:f2:
34:33:5e:19:ae:ad:66:88:73:48:bf:81:e5:02:e9:
ac:aa:fd:81:8a:f9:5f:f2:a7:2d:05:76:88:2b:cd:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:C5:75:BE:A0:B6:FB:20:D4:B5:22:1F:B9:1A:38:71:F7:AD:21
X509v3 Authority Key Identifier:
keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b9:d7:03:73:d3:39:38:f1:b1:c5:0f:19:bf:e3:1a:b2:65:
91:a3:c0:1d:2d:0e:a6:6c:49:09:71:39:2d:2b:dc:9d:0d:d1:
1a:4a:0a:a8:a6:2e:b3:26:e2:c0:53:a1:d6:3e:51:a4:b2:5c:
df:1a:da:32:5c:e8:9e:0e:68:5c:4e:cf:68:dc:99:a4:e6:3c:
30:4c:ff:04:7b:e6:8b:ac:d0:74:12:ec:f0:1a:0a:ac:36:26:
8e:2a:57:02:49:25:9b:e0:ba:b8:ba:e0:42:fc:70:5e:b8:f5:
6b:1d:c3:10:e1:a5:07:6b:8f:e7:97:75:dc:e1:7c:5d:cd:e4:
61:48:2f:54:08:20:54:dc:9a:56:62:1d:3c:fe:ef:65:c3:ac:
31:f5:91:ae:fe:d4:a3:ae:f0:15:90:28:ca:a9:ba:5f:f3:54:
a5:a6:73:fc:f7:30:a7:f2:15:8a:60:28:e8:92:d6:b8:37:4e:
22:53:d1:5a:0a:4e:0e:4b:7a:9b:d0:8a:73:1b:ce:b7:5d:d2:
a6:28:c1:8c:42:2e:36:d3:99:09:c8:90:8b:87:d2:11:73:48:
6c:fb:e3:5f:41:e9:3a:65:34:b9:7d:b6:24:80:c1:df:8f:e9:
d3:9d:98:50:0f:6e:84:4f:ae:26:cf:0b:fa:42:2b:b3:f0:2c:
45:e9:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:16 2026 by rpki-client