
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
File: r2oY2zoHHvGMylvos1Qz31RPD7I.mft (raw, json)
Hash identifier: tpRLZ5Cbz5ob7Q23CmRI1XA44RJfbKV7BQuUPh+Hk8w=
Subject key identifier: 7E:71:5F:27:FE:6D:5C:6D:F1:FC:45:7A:F0:FE:96:88:9F:26:2C:37
Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
Certificate issuer: /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Certificate serial: 0C5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
Manifest number: 0C53
Signing time: Tue 24 Mar 2026 18:31:19 +0000
Manifest this update: Tue 24 Mar 2026 18:31:19 +0000
Manifest next update: Tue 31 Mar 2026 18:31:19 +0000
Files and hashes: 1: r2oY2zoHHvGMylvos1Qz31RPD7I.crl (hash: zlLAJyBhzhI1YNqY8bExrtuhnUpCy/hHp3xh9LJHDmI=)
2: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (hash: MhK6fjpCgRPkr/iKRfOswI8Vu+Z6RpVv9J3L3B3Ndho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl
rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3164 (0xc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E20E, serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Validity
Not Before: Mar 24 18:31:19 2026 GMT
Not After : Mar 31 18:31:19 2026 GMT
Subject: CN=69c2d877-e8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:66:53:85:3e:ad:99:79:b8:61:42:a2:8d:
b2:7c:fc:f5:58:20:d7:d6:88:a6:e6:80:21:64:f9:
7c:98:43:a5:a0:85:cd:d1:21:6c:d8:8f:35:9a:43:
2c:c7:23:b7:6e:e4:36:cf:b4:17:75:88:16:95:99:
38:23:53:4c:17:5f:c5:22:53:49:1c:c0:2e:25:aa:
90:b8:3d:5e:66:d8:d6:8d:c3:0f:ef:07:46:16:b8:
24:a1:2f:8c:ec:c1:12:b1:9c:54:04:81:87:1b:0b:
17:d3:f0:aa:58:63:b5:32:fd:f9:2b:06:1c:e5:e6:
12:b8:e5:34:21:f6:92:0f:61:84:a5:0f:2a:5c:82:
e2:d0:54:e5:4b:0e:7f:bd:bd:56:43:0d:cf:41:cb:
c3:7d:75:eb:e2:f3:07:57:66:89:6e:c0:54:9b:68:
0b:bc:bb:3c:19:50:4f:98:5d:04:03:5f:95:26:63:
38:f5:d1:97:e0:35:c1:87:4d:17:09:92:51:18:32:
0f:06:43:80:27:46:fe:95:cb:07:80:2f:e5:c8:08:
df:27:c0:d1:43:c8:e0:1f:5c:20:65:39:0b:a3:d4:
70:01:15:98:43:06:d4:24:5d:4d:6c:de:e7:f4:55:
f2:39:5e:85:78:1b:01:3b:dd:fb:c5:29:96:a5:57:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:71:5F:27:FE:6D:5C:6D:F1:FC:45:7A:F0:FE:96:88:9F:26:2C:37
X509v3 Authority Key Identifier:
keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:50:bf:e7:00:d5:7b:59:91:69:7f:e8:74:e8:14:63:1e:1e:
93:a5:f6:d9:ca:58:9b:ed:22:a2:a8:ca:d3:93:5d:ed:1f:44:
5f:2e:c2:e9:fa:02:8b:47:fa:20:b5:5a:fc:c2:b6:20:da:d9:
b7:67:fc:99:aa:3c:d3:1e:62:ad:88:62:b7:08:91:52:79:16:
13:53:7d:98:93:76:0e:1e:7e:e7:23:51:f7:b1:08:e9:ab:93:
b0:56:80:00:3b:d8:e3:5c:c2:06:df:54:32:d0:2e:82:0f:d1:
92:51:a4:4a:fc:b7:2e:c3:8d:4c:fc:15:2c:21:80:87:b2:42:
bb:36:59:4a:2b:8b:78:18:f7:8d:23:c0:b8:91:ae:3e:aa:4c:
5c:e0:2b:03:bc:31:9a:7b:0e:0a:23:78:3e:d6:3f:6f:65:87:
f2:c8:7f:dd:83:76:e8:f2:0f:87:08:f1:d8:7d:f8:a7:7d:e4:
5c:43:9a:f1:87:83:fa:38:8d:26:2e:85:e0:5e:d8:70:51:f9:
58:65:8f:aa:8c:d0:a1:31:15:9f:a9:cf:b8:6d:d4:d4:4a:42:
d1:cc:fd:b5:30:73:bb:49:dd:83:c7:9a:21:af:a5:9a:46:df:
75:1c:02:24:bd:8b:a9:a2:2e:e0:e1:d1:c1:e8:24:88:63:a3:
63:3c:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:47 2026 by rpki-client