
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier: ZdmlVom2zLMd9qnAdH3FHPli/IrnIqgmlJRgImKiwF8=
Subject key identifier: F5:F4:57:93:8E:D1:6B:56:A7:3C:FD:E0:F0:EF:69:DC:8F:B5:A4:64
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial: 083D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number: 0834
Signing time: Tue 24 Mar 2026 20:40:28 +0000
Manifest this update: Tue 24 Mar 2026 20:40:28 +0000
Manifest next update: Tue 31 Mar 2026 20:40:28 +0000
Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: IMZCHd8T7mOaiGkPi0U52RZ94Iw+4//LxPdYkIjSVj0=)
2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: 0tPpCFmY2RtQMNi50P1oO91h+coSEhJnlpMk0tERKfA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Validity
Not Before: Mar 24 20:40:28 2026 GMT
Not After : Mar 31 20:40:28 2026 GMT
Subject: CN=69c2f6bc-1f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:c3:a3:64:8f:2a:5c:d0:6d:52:4c:27:a2:
fb:76:83:f4:86:18:74:13:25:91:51:c0:46:41:52:
49:e4:a1:a0:d9:ae:bc:62:91:fd:c3:e1:c8:d8:35:
a7:44:b2:f8:9d:a5:5a:62:3c:5b:aa:11:16:8b:ca:
c1:2a:3d:20:c9:8a:d6:98:06:75:8c:52:84:58:d7:
5a:bd:11:a7:20:9b:df:32:11:ae:b5:f6:e4:bf:00:
84:61:9e:ec:72:d4:51:f2:1e:1a:f8:97:e1:f7:05:
4a:8f:3d:c7:33:d6:d5:1f:48:08:31:39:53:75:a9:
94:69:70:c3:fd:9c:f3:ac:82:ea:af:37:a6:29:17:
d6:76:f0:d3:7e:a1:69:8e:73:ed:6c:8b:b4:bd:5d:
12:75:e1:0b:c5:22:ff:29:12:23:08:db:35:d5:91:
ab:b3:06:a3:ec:ae:0d:e7:9b:b9:95:44:a8:c3:7c:
64:80:5b:1a:51:b1:b7:84:f9:46:c4:3c:09:dd:7e:
4f:ae:12:17:18:5e:34:e3:75:66:0f:af:dc:a8:26:
8f:4d:9a:85:4d:4f:6c:25:b8:63:0f:57:d1:00:88:
93:bd:6f:85:81:74:71:40:3f:9d:46:38:ba:08:8b:
01:1c:3d:fd:92:e3:b5:de:b9:59:72:0b:dd:49:50:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F4:57:93:8E:D1:6B:56:A7:3C:FD:E0:F0:EF:69:DC:8F:B5:A4:64
X509v3 Authority Key Identifier:
keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c9:66:3c:f4:4f:ca:ba:af:89:6e:3c:76:28:9d:f3:15:82:
4b:ce:5c:b7:69:8e:3e:09:3d:15:36:bd:7f:57:5f:d3:d2:69:
08:88:34:39:bb:fc:f0:c3:ec:f3:ef:f7:32:6d:2d:4d:1e:d4:
73:cf:c0:77:42:a0:e2:8c:b2:2d:ea:fc:1e:a4:fc:69:dd:f0:
86:7f:1b:bd:30:3f:58:99:8a:04:75:bb:6f:e5:26:fc:ed:6b:
a1:47:c9:5d:db:36:da:62:73:17:48:10:56:58:4b:54:7b:40:
a9:f0:97:99:29:7b:5e:b5:7b:fa:38:3c:71:14:b6:33:ef:9b:
8b:93:ce:f2:35:fc:4c:95:92:65:bb:69:b0:0b:60:d7:ea:26:
03:05:d6:9d:20:93:c9:fe:5f:9f:e2:2c:51:4e:24:8b:ac:13:
2a:77:8a:ea:64:f9:1f:82:9c:e0:30:3a:91:5e:63:94:08:0f:
fb:a5:66:05:53:e8:9b:a1:0d:27:a4:46:e0:07:16:71:3e:96:
35:2a:06:77:d7:38:dc:4d:b1:1b:c1:2a:19:f2:e7:44:e9:5e:
b3:e6:1d:4d:20:6b:22:00:cc:f7:1d:ae:96:1b:6b:cb:14:76:
8c:07:a2:96:39:39:52:96:7f:2b:59:78:e4:5e:ed:cc:63:0b:
5b:58:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:02 2026 by rpki-client