
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json)
Hash identifier: fmI2Q4lkTTXqrTtywQ8PF59RU0N03qosnM+R8ByFeM4=
Subject key identifier: E7:53:0C:6E:7A:32:ED:24:47:79:31:0F:BF:7D:10:B9:5B:4A:BD:E6
Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
Manifest number: 028A
Signing time: Wed 25 Mar 2026 01:12:28 +0000
Manifest this update: Wed 25 Mar 2026 01:12:27 +0000
Manifest next update: Wed 01 Apr 2026 01:12:27 +0000
Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: FNhmRN4sOTa8tAzVwm5jVqmhtjDwDcNVBln6LrWSmtA=)
2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 0dEgHfjdaDmXpIqs7bBG+Yt1VZ3EjEezx277VdYW0Gw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Validity
Not Before: Mar 25 01:12:27 2026 GMT
Not After : Apr 1 01:12:27 2026 GMT
Subject: CN=69c3367b-184c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:43:87:c8:ee:05:ef:07:ff:0a:ef:67:0c:
58:bd:28:76:fc:33:56:38:81:7a:37:3c:68:dd:44:
1e:1e:4d:94:03:0f:4c:07:2d:61:9b:2e:17:ba:7e:
ba:53:67:86:3d:84:e5:55:09:0d:8e:df:38:6d:65:
0a:f7:54:9a:9e:57:73:ba:21:77:d3:e5:3d:0e:66:
09:71:b1:8f:4b:46:34:fd:eb:13:b9:05:fe:69:ce:
56:6f:df:56:60:c9:4d:37:e1:54:f6:57:99:40:50:
d4:b8:7f:22:9f:83:72:b6:00:88:06:6e:b2:2e:56:
8f:93:57:00:db:b7:20:cc:7b:d9:c7:e0:73:80:47:
9b:3b:22:33:61:35:f4:db:7c:d0:05:36:41:72:01:
e0:ed:e9:9a:36:b4:12:57:42:b9:7b:3d:cb:10:0c:
56:80:a5:54:24:46:76:a6:b2:7e:67:09:fa:ea:5c:
b8:bd:b4:a3:18:4d:44:7c:ff:30:83:ab:f3:ba:2a:
04:38:a3:e4:15:6c:58:05:3a:15:c2:5e:fb:a2:49:
09:df:bb:8c:86:9c:74:c6:9b:1d:44:1a:ef:c8:96:
64:d5:a0:d7:ac:dc:fb:7a:76:d9:71:8c:a4:f1:de:
93:63:4f:9a:d6:d4:b4:65:8b:c7:12:5f:2e:f0:56:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:53:0C:6E:7A:32:ED:24:47:79:31:0F:BF:7D:10:B9:5B:4A:BD:E6
X509v3 Authority Key Identifier:
keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:bf:66:c6:68:11:48:24:95:80:75:de:14:e4:85:6b:f9:b3:
7a:16:7c:50:ee:61:13:db:d2:8f:b3:5c:f7:b6:38:69:3d:17:
24:8a:a7:74:f5:da:0b:8d:31:e9:9d:61:1a:c4:48:b7:69:7a:
a9:7f:f9:2a:a2:03:ea:cc:3d:aa:a5:d0:66:42:06:c4:ad:10:
e0:12:fb:7f:40:3f:be:67:fd:2c:a8:c1:4b:54:4c:b4:c3:71:
f9:c3:b4:7c:93:49:e7:e2:f4:a2:6a:fb:26:bc:91:af:5d:81:
46:0e:45:d8:f3:00:64:67:4a:96:db:3a:08:d1:09:26:59:6e:
ba:9a:b6:a0:bf:71:89:19:d6:29:ea:00:14:88:18:4a:05:03:
f0:2e:ec:d8:8f:88:5b:bd:66:29:f4:e5:a3:fa:14:ab:b8:a3:
a2:6e:4e:9c:24:e1:d4:64:98:aa:8f:21:d0:a3:34:d7:a9:31:
19:4e:69:4d:64:ef:45:b4:4b:75:e8:f1:8a:9f:6d:0e:96:cc:
08:73:d3:fe:80:d6:cd:04:59:aa:ae:e1:26:5b:a3:bc:71:7b:
00:5f:f1:1f:31:96:e3:82:07:68:f2:43:df:8e:a6:4c:1b:ef:
f3:4f:43:03:e1:0c:78:0a:84:95:1d:5b:3e:14:db:22:2b:85:
fd:19:49:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:54 2026 by rpki-client