
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier: v+sLV0dzEClmZlE/Btpun7ygzsjPqg8ysmOMLmbv4zQ=
Subject key identifier: C2:94:C4:94:C7:C9:69:E7:75:B4:80:CD:97:DD:D7:51:78:BC:90:0D
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number: 01DA
Signing time: Sat 21 Mar 2026 02:42:04 +0000
Manifest this update: Sat 21 Mar 2026 02:42:04 +0000
Manifest next update: Sat 28 Mar 2026 02:42:04 +0000
Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: mL9DxVPJJd+0VUyLvRgQ6VCezdIgmMBNCazEx8JYvgU=)
2: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: 6VryhfiIF2VBEa3XnAENzfKNyDYTfUs9xynBu6kvnA4=)
3: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: 1RzsjB3B/c1zgVm8/5Sg1Xe89XFvfc6vQnq4tvEitnY=)
4: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: Pt4/aeZJmmxaKw58FeByKfcr60LvOJZSjrmtvVkGyg8=)
5: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 8JV502SLk8QbZyaGCPLTxSnSD1WOF++tIWExjZSLMdQ=)
6: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: LHB5pGY8dTTpWRgeoK0nlLC3xPEqarqRqlE/1vamRUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 02:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Validity
Not Before: Mar 21 02:42:04 2026 GMT
Not After : Mar 28 02:42:04 2026 GMT
Subject: CN=69be057c-5a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:5e:73:9d:b1:c6:6b:c7:54:19:82:b2:16:
cf:12:53:ba:40:c5:7a:e7:3d:ea:d4:6b:10:ee:a3:
91:65:61:61:77:f0:71:b5:8c:da:d3:4d:f8:db:da:
85:4c:52:4c:10:48:a6:df:2b:93:5a:39:62:ac:82:
01:1e:00:91:9a:c1:44:99:e1:1d:fc:b8:fd:5b:70:
a1:45:37:9a:51:64:a2:cf:fc:1f:63:bc:6f:06:62:
a5:d7:61:1c:84:b8:2b:9b:ea:cb:6b:d8:13:b1:05:
0c:84:e0:9c:54:6c:e1:a9:f7:74:24:c7:e5:8f:81:
1c:91:8b:a0:e1:52:a3:ef:ab:b6:eb:2a:df:50:c7:
22:b9:40:36:1c:0c:76:37:82:87:dc:df:05:76:ef:
4d:e4:f5:c1:79:26:91:4d:99:f7:1a:d3:21:62:f7:
3b:7d:35:6b:e7:68:9a:60:b5:cd:db:d3:26:69:67:
c0:2b:ce:34:a7:db:6f:22:02:4a:ea:75:0d:c1:a7:
63:cf:cc:1a:d8:f6:1f:d2:05:43:48:f9:1e:42:55:
b6:b3:14:d0:3f:15:c0:3f:62:bb:be:a1:b6:6a:bb:
b0:72:b0:ae:a9:63:1c:65:29:3a:da:71:e0:9d:f2:
d1:ff:f5:05:2c:c3:a6:30:d2:b3:e0:2f:3a:1b:a3:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:94:C4:94:C7:C9:69:E7:75:B4:80:CD:97:DD:D7:51:78:BC:90:0D
X509v3 Authority Key Identifier:
keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:38:24:4f:fc:16:b0:73:b1:f0:f1:8e:b1:60:01:2f:9e:4f:
0e:f6:d9:d7:05:73:b2:b7:cd:85:1b:28:82:c0:3a:53:73:59:
a8:ef:cb:2b:9f:c0:f5:ea:e0:52:17:d1:b7:4d:17:41:82:86:
4f:b0:bf:ee:03:35:d8:4d:6b:a2:b8:4f:b7:d7:48:ec:6d:57:
a3:55:8b:81:c8:a8:46:a5:36:81:8a:d9:4e:fe:ac:3d:8e:3a:
4f:d1:63:1f:ea:d8:bd:85:54:6f:43:b4:35:34:fc:f5:4f:59:
1a:56:35:fb:a2:7d:75:b7:d0:29:57:59:74:3b:07:4e:6f:7c:
aa:cb:40:22:59:f3:99:97:1b:32:7c:65:d4:d6:f6:76:e4:0a:
7f:51:99:2f:0f:79:40:55:9b:11:f6:9d:ad:60:03:24:31:f6:
2d:b3:ce:ad:2f:76:21:a1:9b:38:df:cb:c2:41:d2:7f:2d:88:
e3:10:8a:c5:b6:9e:62:2d:cd:f1:cb:2a:6c:81:a9:ce:f7:fc:
9d:49:23:cf:fd:e0:af:11:e1:9b:6b:5e:6e:1e:85:28:d2:56:
1b:9f:c4:fd:bc:9d:7b:f9:9f:e1:ec:3d:15:7a:25:68:77:5f:
8c:fa:e5:73:28:0a:73:d3:00:78:68:cb:fe:4b:2e:52:66:31:
0c:42:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:12:44 2026 by rpki-client