
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json)
Hash identifier: oVv7/bnmzt7943j2k6gLaND07ZR0JBtcei0P0B1nYfs=
Subject key identifier: E7:38:AD:3D:9C:2C:19:C3:B9:26:C4:4C:93:08:DD:74:43:F6:FC:A3
Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
Manifest number: 0164
Signing time: Wed 25 Mar 2026 04:13:20 +0000
Manifest this update: Wed 25 Mar 2026 04:13:20 +0000
Manifest next update: Wed 01 Apr 2026 04:13:20 +0000
Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: 5BXFfX9yHuViM5rVu23a5Tcj7oR0PNImZWliFo8+CFE=)
2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: qze2BxN1ZqkUR8sLJAr7IWqQzGJrYs19cA2fz8g+u+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Validity
Not Before: Mar 25 04:13:20 2026 GMT
Not After : Apr 1 04:13:20 2026 GMT
Subject: CN=69c360e0-ea2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:81:78:a6:98:7a:26:f0:03:8d:6b:56:98:
39:4d:40:39:68:51:a5:35:ce:75:1f:39:3f:47:4e:
ae:c1:02:d1:52:58:90:ba:ba:e9:a3:90:6b:c4:aa:
27:e6:ed:f2:50:c7:3f:e7:fb:c4:5f:58:d1:39:71:
5b:c5:89:95:ea:77:10:61:32:e3:49:6a:36:75:b7:
96:bb:bd:2b:22:35:0a:b1:07:55:40:71:72:54:51:
74:20:70:71:da:e4:95:7a:3b:cb:a0:64:d2:04:8c:
e7:d4:a3:c2:ae:e7:0c:7d:b8:74:61:11:b2:84:54:
cb:fb:de:eb:2f:20:4d:49:1d:88:00:e7:fd:63:aa:
a6:1c:bd:f3:d4:0e:4d:8a:fa:be:a5:d5:49:08:83:
9f:b3:44:b0:81:fd:ef:36:e4:80:d1:04:c9:c0:ad:
33:6d:92:07:e2:82:2e:25:02:a0:5c:88:dd:65:23:
76:a6:c6:c6:cd:25:e3:b5:2e:7c:58:f7:1c:a2:ae:
d8:05:75:2e:8c:d8:29:6f:a6:75:36:06:2d:9b:6a:
c0:85:2d:94:7b:96:0d:4b:cf:08:e8:ca:a9:af:3f:
1e:c0:d0:5d:34:53:86:a0:28:48:f4:f9:33:2a:f4:
6b:6d:49:ab:63:d1:19:f5:21:8b:a3:97:83:b5:82:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:38:AD:3D:9C:2C:19:C3:B9:26:C4:4C:93:08:DD:74:43:F6:FC:A3
X509v3 Authority Key Identifier:
keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:78:6c:0c:c6:65:31:b7:08:40:cd:1d:c3:a6:17:3a:27:
0f:cf:1e:0a:d0:26:43:8b:74:87:6d:40:7f:d5:c2:63:02:d7:
a3:0f:a6:e9:b4:41:1f:ac:ca:df:cf:44:0a:c4:60:96:0f:cc:
d7:b1:10:96:16:e0:31:6b:62:30:e8:5f:1a:06:35:f4:0f:dc:
d9:17:de:5f:9d:ad:87:a2:9f:aa:d3:ba:8a:d7:2f:37:4a:77:
be:6c:d7:14:d0:0e:f2:7a:58:51:17:e3:c7:ba:bd:b6:53:fe:
d7:f1:7c:aa:ec:0b:43:a2:49:f5:f2:87:a8:71:5e:41:af:11:
d1:58:62:2d:aa:51:7e:ff:ff:21:bb:56:9f:30:56:c9:70:6c:
97:d1:21:2f:09:f3:a4:ef:63:d4:fa:a7:b0:42:3e:ff:06:32:
cc:3d:e5:24:26:2b:fc:8d:6a:00:74:67:76:2c:8b:fe:57:3b:
a9:01:20:2e:98:11:dd:34:c3:f9:ea:58:22:f2:51:17:e5:ee:
a3:e4:dc:cf:9e:30:df:07:ea:b7:e8:16:e2:07:f2:af:19:6f:
82:25:98:f3:5d:16:72:1d:d0:f6:3e:7e:56:79:6e:9f:b8:9c:
74:d4:53:4f:4a:be:fd:93:80:f3:78:96:a0:79:f2:fb:01:0f:
db:e2:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:10 2026 by rpki-client