
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json)
Hash identifier: qmNHs2uLi0Pgup6IkngHaZqqfMJtgAn5E/NPGvdpVWc=
Subject key identifier: 16:EB:10:8C:29:DA:5E:BF:0B:1E:E7:35:97:FE:8D:C5:C9:24:C8:91
Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
Manifest number: 022F
Signing time: Tue 03 Mar 2026 02:27:37 +0000
Manifest this update: Tue 03 Mar 2026 02:27:37 +0000
Manifest next update: Tue 10 Mar 2026 02:27:37 +0000
Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: EX3ie1TOZ4qL3RubwiXJgHCmxbBFvfE44nzxex4GjQM=)
2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: DI/eG9DXOFb9EKRR2bPnL0OAziLMqCbunU7psCFOUsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 02:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Validity
Not Before: Mar 3 02:27:37 2026 GMT
Not After : Mar 10 02:27:37 2026 GMT
Subject: CN=69a64719-7d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:d6:d3:a3:ad:b6:0f:aa:9c:51:f9:cf:33:
05:42:b3:31:d2:df:79:7a:44:6e:f4:99:41:a0:f8:
c9:fc:05:fd:ff:a0:43:ae:0d:d0:cf:eb:03:bb:e1:
f3:2d:b1:26:a8:6c:4d:b8:d3:30:6e:b2:63:41:18:
19:11:34:da:11:68:56:86:de:ec:a1:64:2c:80:20:
e4:d9:7c:a4:50:6c:8e:84:b8:3e:4f:92:22:b5:64:
e9:64:93:0c:d1:4f:62:70:90:6f:49:c4:cc:e8:3b:
eb:8b:a4:fb:77:c5:32:70:83:56:5b:bf:e4:0d:4a:
6c:b8:a3:b7:0c:11:86:7f:13:7e:66:71:1d:b2:75:
21:78:81:4f:b9:a6:6e:33:61:4e:57:a2:35:ef:dc:
43:8e:a7:29:11:14:5a:3d:f4:ce:7c:fa:8d:55:96:
05:6a:0f:93:8e:68:40:6a:20:f1:a4:6d:7c:31:da:
ed:79:bb:bd:82:24:86:b6:98:7d:05:2b:63:23:6b:
76:4c:95:09:98:54:3b:cc:cc:f4:e9:e4:28:98:2b:
41:e6:c4:89:43:dc:20:24:94:aa:77:c3:a4:c2:96:
23:0f:3c:72:ad:60:d0:8d:9a:ba:de:f9:dd:d7:45:
b1:cf:be:a2:42:4e:f5:27:b6:8f:62:73:8c:8b:ea:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EB:10:8C:29:DA:5E:BF:0B:1E:E7:35:97:FE:8D:C5:C9:24:C8:91
X509v3 Authority Key Identifier:
keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e4:99:be:97:f0:10:29:cc:1b:ff:e5:30:ab:66:ea:ab:ad:
cd:fb:b5:fa:75:13:36:01:9b:6d:16:a1:0b:8e:f5:0e:69:5a:
5d:ca:8b:69:45:b6:15:8c:4f:58:35:cb:3e:2b:15:ad:bd:94:
4d:e5:d8:c1:48:be:c1:c2:17:41:68:b3:9c:8e:e6:ed:21:d7:
65:21:13:15:15:72:64:0c:33:a5:61:c2:0a:8c:fe:44:3e:20:
25:22:d6:cf:d7:23:1d:4a:2a:17:f5:f7:f6:09:28:51:59:04:
d6:01:87:b6:68:0c:c6:04:69:06:ea:a2:b5:33:9e:e1:ac:22:
69:35:cf:9e:d6:3b:69:7c:6b:a7:40:de:89:f7:1d:e8:cc:ea:
ea:24:83:7a:63:fe:05:cb:c4:b0:f5:09:18:6c:58:9a:75:e9:
fa:6f:c3:db:70:ed:0e:40:2b:c2:95:72:46:ad:cb:24:95:a9:
ae:91:38:87:20:61:a4:9b:10:17:6f:c5:c7:25:40:93:07:78:
90:03:d3:19:c0:10:c4:05:be:eb:f2:17:8d:5d:16:5c:82:f5:
de:bf:f2:52:90:f5:e8:35:fc:d5:b7:91:38:ba:ce:5c:7d:6b:
ec:42:5f:37:7e:b3:6c:f2:c5:aa:a3:2f:78:b4:15:8f:b2:ae:
62:9a:e7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:21 2026 by rpki-client