
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json)
Hash identifier: qogDbA53RzBcl2gDduQyWdWBlo5uCc/J24J441r7zNk=
Subject key identifier: 92:FC:EE:1E:03:3D:61:8E:A8:BF:63:AD:24:B1:C0:73:DC:2D:12:FF
Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Certificate serial: 0214
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
Manifest number: 0206
Signing time: Fri 27 Mar 2026 02:41:57 +0000
Manifest this update: Fri 27 Mar 2026 02:41:56 +0000
Manifest next update: Fri 03 Apr 2026 02:41:56 +0000
Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: Ds5VgzgY2ng14b9GAZNJ4TbOK2WQoWG3t1sfKTQ7OVg=)
2: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=)
3: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Validity
Not Before: Mar 27 02:41:56 2026 GMT
Not After : Apr 3 02:41:56 2026 GMT
Subject: CN=69c5ee74-ea22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1e:cd:2b:4e:c1:59:ec:27:b0:7d:30:6b:d6:
3d:05:dc:f6:de:65:a0:7a:0a:ac:1b:db:22:f3:c9:
7e:6e:99:05:19:3e:ea:4d:98:88:d4:be:fa:b5:ac:
75:69:43:13:33:9d:3a:91:71:4f:e2:7e:20:e2:39:
76:31:6e:21:a8:c3:96:c9:05:5b:d7:2a:da:cb:5d:
13:01:fe:43:7b:80:79:6e:4f:1c:79:0a:39:50:11:
47:fd:24:a7:3a:22:0b:0b:ea:a9:3c:88:ae:a0:44:
29:02:23:79:d7:f2:71:08:23:cb:80:ad:54:7a:4f:
2b:17:21:dd:0c:cc:98:ce:67:93:41:07:cd:1e:e5:
e7:33:51:ee:32:0f:6f:d3:50:37:95:35:ad:39:8d:
b5:40:68:dd:0d:93:a0:69:b8:b8:3a:c1:bf:6f:e8:
f5:6d:de:7c:3e:d6:19:7b:f7:f0:88:c3:ad:26:75:
97:f8:53:a7:00:2a:60:14:ac:5a:57:7a:3e:ce:50:
b3:2d:e6:57:f3:91:d5:47:2d:3f:05:11:ed:d4:ab:
29:46:2e:0f:07:91:bc:0c:19:78:1c:67:34:77:58:
0b:80:e5:56:02:a8:e1:42:65:62:9c:24:3c:94:66:
c9:e2:c8:48:6b:79:2e:0d:1e:a7:8c:f1:52:99:1b:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FC:EE:1E:03:3D:61:8E:A8:BF:63:AD:24:B1:C0:73:DC:2D:12:FF
X509v3 Authority Key Identifier:
keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:d5:d2:fd:ce:63:3e:94:52:58:c6:21:d2:da:5c:d9:e5:
fa:e5:f1:e0:7f:2a:e0:55:88:88:1d:1d:68:84:b5:bd:f5:7e:
e6:3f:a1:53:b9:27:ef:16:f0:01:4d:af:e3:b9:0f:8a:48:14:
ab:29:74:f1:f5:df:24:2a:73:f9:6c:c4:a7:31:4f:5d:05:b3:
b2:3b:d5:64:c3:95:ff:4f:eb:57:ec:b9:31:ff:9b:86:61:b8:
9a:83:04:45:52:d0:e3:06:04:71:30:ac:9d:ef:d6:52:65:5b:
42:09:f3:8e:0c:d1:db:41:2f:31:ba:2f:9e:11:a4:25:b4:a4:
85:2a:ad:f1:be:0f:c4:b2:37:8e:2f:3d:ae:81:de:a6:bf:97:
83:c1:1a:10:7c:3b:00:25:e5:a5:e4:af:ff:3e:3b:80:b3:29:
e6:fa:5a:d9:b4:bb:d4:fe:40:02:31:66:b8:b6:a3:a4:e9:3f:
64:ef:d3:21:9d:d7:ba:a3:5b:70:d6:bd:ae:47:eb:91:d0:2a:
5b:8e:f0:21:1d:f6:e6:f3:b2:a4:d6:ef:20:40:93:a9:4f:08:
93:e8:60:1c:ca:d6:00:3b:8e:4e:86:44:c7:09:08:96:0e:f7:
63:87:81:4c:f1:f5:98:37:3b:76:5a:e8:b9:bb:0f:c5:dd:25:
d7:48:56:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:55 2026 by rpki-client