
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: T0mEHJhhn7LoZdeT52OnqdGPpf2AO0VRN15uIPGB1gE=
Subject key identifier: 89:01:27:8D:DB:8F:7B:2B:EB:B0:28:F1:B7:A3:E5:63:7E:48:BB:29
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 0876
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 084B
Signing time: Sun 08 Mar 2026 20:23:11 +0000
Manifest this update: Sun 08 Mar 2026 20:23:10 +0000
Manifest next update: Sun 15 Mar 2026 20:23:10 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: D+86XPx9kexu+RzSh5Z2SzLC0TkPI0PIUDsVxULkV7s=)
2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: eoYohii7cC6khiQ+f0wpp//0YBGq0N/Ozq5XmvZPWOg=)
3: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: Lb/T9nBCmtckdHe4b9hm5305kn9OjeJ7JSA7XieKmSk=)
4: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: 1+/TSeqM0xH0r4ykTodyEDUT7FZPqGrEUSLZkMBLnfQ=)
5: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: PZdaQN5bcibKqcfzydfFFWwb3ypU3837yXutax2XYyI=)
6: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yORei5KpH6OrXSTxn5SzQbTbq4XYVihJ7MoNWsI4oTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 20:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Mar 8 20:23:10 2026 GMT
Not After : Mar 15 20:23:10 2026 GMT
Subject: CN=69addaae-a443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:28:ed:ad:39:9d:44:77:1b:2d:bd:f1:82:
80:bc:bb:77:2d:bb:40:2a:a0:a0:6d:85:21:58:5d:
b8:6f:bd:30:ee:1a:88:05:bb:dd:94:d2:f3:6e:1e:
15:00:75:9b:39:51:86:78:15:25:9f:f3:3e:0e:e9:
16:88:60:e7:bd:13:1e:48:0c:d1:31:b2:83:8c:45:
80:24:70:5b:a5:1f:26:5f:f0:0c:69:8a:4e:62:ea:
09:b0:cf:37:d9:69:ed:14:2f:83:46:dc:5c:fc:cb:
6b:3c:32:6e:28:d9:b7:95:2f:19:0a:dc:33:63:c2:
0d:40:af:58:a3:6f:ae:c7:6e:51:ac:35:cb:af:63:
d7:0c:48:9c:a2:e6:36:80:63:c8:c3:6b:fc:06:ca:
be:fc:11:d2:b5:21:08:7d:06:81:fe:82:9c:07:ef:
12:d7:06:26:df:7b:ae:ce:ca:16:e4:2b:f2:0f:79:
81:cc:2f:df:13:fe:b5:46:74:99:13:46:d5:b2:15:
00:80:9a:38:58:63:d0:48:5c:f9:8a:0b:02:21:e0:
4e:07:62:8d:eb:62:8c:d9:19:b1:0e:dc:de:1e:f1:
f3:83:db:34:1f:e2:02:83:e9:ab:97:34:0c:ca:43:
96:05:9a:be:9d:7b:26:9e:81:a1:30:61:1d:be:3a:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:01:27:8D:DB:8F:7B:2B:EB:B0:28:F1:B7:A3:E5:63:7E:48:BB:29
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9c:43:36:33:df:63:a2:2d:84:96:61:55:ff:66:13:0f:35:
36:35:ca:7e:20:80:7d:c1:8a:c3:83:cc:ef:98:a4:74:b1:cc:
75:b0:f5:71:cb:45:5b:68:d6:c6:03:d0:62:ba:99:35:28:7c:
0a:f9:ff:ee:13:b9:ac:62:a3:fa:45:43:3c:bb:53:06:81:26:
85:51:3a:51:60:9c:1e:a8:6d:6d:4e:e5:fb:76:a3:95:8f:7b:
73:a1:43:20:ff:9f:d5:6c:ec:d9:e9:8e:d8:d2:75:84:b1:56:
46:74:ea:11:40:ff:cc:03:ba:95:a5:4e:76:74:b4:54:95:89:
30:0d:31:92:60:18:b1:1e:35:9d:f6:4d:2c:b1:22:5a:ba:0a:
8e:bd:3f:aa:76:dc:47:d7:71:9a:77:4c:5d:39:22:30:b3:02:
39:68:a3:9a:28:bb:78:2a:32:5b:0e:10:c4:98:c3:37:0d:1c:
82:44:d4:9b:86:97:41:51:1a:b0:39:ad:85:95:51:41:7a:6b:
9a:58:89:6d:1d:06:bb:b2:a4:bf:d0:3f:69:4a:93:5f:da:8b:
4a:fc:92:95:6a:97:7e:4f:28:bd:df:c7:e7:bf:22:3f:e9:44:
57:0d:8b:1f:94:1b:2c:cc:cd:00:23:25:b0:42:7e:e7:34:8a:
da:6e:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 9 13:18:31 2026 by rpki-client