
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json)
Hash identifier: m4Wp40lDL7OmuLpgrUxJf7wU77/GfD7oXQfyf1Nk820=
Subject key identifier: DF:70:61:2A:B3:16:17:8F:65:A8:B4:BF:C9:7B:AF:14:D8:DD:2A:7B
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial: 06A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
Manifest number: 069F
Signing time: Tue 24 Mar 2026 22:07:32 +0000
Manifest this update: Tue 24 Mar 2026 22:07:31 +0000
Manifest next update: Tue 31 Mar 2026 22:07:31 +0000
Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: FQdijvQ8mzRfiyrwE6Psoy+NTfvg+HRudSWV4d6VVrk=)
2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: N3q1uf5+Rh2DPcAvlgwRY0LjrkAYYmogkX8/JqaD7MM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1701 (0x6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Validity
Not Before: Mar 24 22:07:31 2026 GMT
Not After : Mar 31 22:07:31 2026 GMT
Subject: CN=69c30b24-6cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:31:9f:91:ec:27:97:e9:26:97:c7:0f:11:
8a:5a:a4:f5:1d:85:b9:e7:81:b6:3a:16:4f:36:2f:
04:0f:c7:6a:70:01:c4:de:e2:93:f7:d8:f5:08:0b:
fc:05:29:a3:6d:dc:de:2c:c9:6f:96:8b:95:33:f6:
5f:b6:d7:38:1f:d4:e9:94:04:ec:31:7f:37:49:b9:
a8:82:8a:0f:81:67:0c:b3:bc:e7:a2:77:3e:b5:43:
20:a6:c4:78:55:42:5a:ae:34:86:8a:18:b7:a3:b3:
85:bc:1e:35:4a:f0:20:06:ed:d1:fe:a0:d2:08:a4:
2b:4c:b2:ae:9f:3c:94:1a:e3:36:99:4a:c3:f9:d6:
ff:81:ae:a5:27:00:45:8d:bf:3f:d0:fb:8c:84:20:
3c:c1:81:5a:34:08:83:7e:8d:92:7c:03:94:16:1f:
dd:20:b5:e1:65:0e:57:cb:f5:20:b4:9b:89:42:d6:
e5:db:7d:64:41:fc:5d:fa:c6:2f:b5:78:57:da:35:
7b:df:bd:b6:4a:f4:b6:26:74:76:2d:3b:55:f8:ea:
56:ed:b2:95:3d:aa:3f:48:21:46:ed:5d:3e:cc:84:
e7:0a:a1:74:24:70:cb:00:3f:6d:59:3f:2c:fb:b4:
4f:37:61:f6:db:c9:4a:5b:1a:37:bb:3a:df:20:34:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:70:61:2A:B3:16:17:8F:65:A8:B4:BF:C9:7B:AF:14:D8:DD:2A:7B
X509v3 Authority Key Identifier:
keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:94:92:2c:aa:91:56:c8:a0:30:aa:21:a7:47:9d:7e:32:b5:
4f:6f:cc:53:86:37:f8:d2:2e:61:d1:61:91:32:d0:04:11:8d:
6b:5c:b6:e6:81:c4:9d:4e:42:4a:d6:57:6f:12:26:f6:85:8a:
85:44:9f:0e:30:08:22:4d:8d:21:3f:41:c5:c4:b5:71:24:0f:
47:47:59:97:f8:78:16:79:76:c9:6e:73:5c:6d:5f:e1:36:d8:
cf:ba:e7:6f:4d:e8:13:a0:ec:b8:9d:18:c1:8a:cf:0a:cc:e4:
3e:58:33:28:b9:b4:22:42:75:5f:f9:a3:4a:07:76:a2:f0:7c:
e4:7c:7b:48:6c:ce:5f:7c:c3:8a:aa:bc:2d:24:45:b5:da:da:
ca:08:e6:93:b9:92:ff:a6:1f:49:33:22:51:52:06:b3:83:25:
5b:b0:33:65:88:ec:48:ec:85:20:80:97:3f:cb:22:f8:8b:3f:
d2:19:00:59:b5:9d:df:e3:1a:8b:c7:1a:48:9f:e9:55:15:db:
00:fe:9f:7c:0f:15:af:ea:7b:80:89:b8:5d:36:36:4c:bb:d1:
db:74:5e:e7:ac:8f:9b:39:2d:a5:c1:b5:72:1f:7d:ef:fc:b0:
32:fa:d7:18:90:af:3c:0d:32:0a:9b:68:78:a2:87:42:b9:eb:
5c:f8:63:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1
MzIwNzM2NDgwHhcNMjYwMzI0MjIwNzMxWhcNMjYwMzMxMjIwNzMxWjAYMRYwFAYD
VQQDEw02OWMzMGIyNC02Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9Yxn5HsJ5fpJpfHDxGKWqT1HYW554G2OhZPNi8ED8dqcAHE3uKT99j1CAv8
BSmjbdzeLMlvlouVM/Zfttc4H9TplATsMX83SbmogooPgWcMs7znonc+tUMgpsR4
VUJarjSGihi3o7OFvB41SvAgBu3R/qDSCKQrTLKunzyUGuM2mUrD+db/ga6lJwBF
jb8/0PuMhCA8wYFaNAiDfo2SfAOUFh/dILXhZQ5Xy/UgtJuJQtbl231kQfxd+sYv
tXhX2jV73722SvS2JnR2LTtV+OpW7bKVPao/SCFG7V0+zITnCqF0JHDLAD9tWT8s
+7RPN2H228lKWxo3uzrfIDQjOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9wYSqz
FhePZai0v8l7rxTY3Sp7MB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2
ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj
TWxRZW1PVjFveHhUSUhOa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF5SSLKqRVsigMKohp0edfjK1T2/MU4Y3+NIuYdFhkTLQBBGNa1y25oHEnU5C
StZXbxIm9oWKhUSfDjAIIk2NIT9BxcS1cSQPR0dZl/h4Fnl2yW5zXG1f4TbYz7rn
b03oE6DsuJ0YwYrPCszkPlgzKLm0IkJ1X/mjSgd2ovB85Hx7SGzOX3zDiqq8LSRF
tdraygjmk7mS/6YfSTMiUVIGs4MlW7AzZYjsSOyFIICXP8si+Is/0hkAWbWd3+Ma
i8caSJ/pVRXbAP6ffA8Vr+p7gIm4XTY2TLvR23Re56yPmzktpcG1ch997/ywMvrX
GJCvPA0yCptoeKKHQrnrXPhjhA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:18:03 2026 by rpki-client