
$ rpki-client -vvf rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
File: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft (raw, json)
Hash identifier: BehgZAOH3otlT0Em1qX11Xg3oIzxsO93xzqW9v2whzM=
Subject key identifier: 1F:4D:B2:72:F8:A0:F0:BF:D0:74:CC:AA:62:9F:50:6E:E3:AB:21:83
Authority key identifier: 75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Certificate issuer: /CN=A913270F/serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
Manifest number: 1E
Signing time: Tue 03 Mar 2026 08:33:53 +0000
Manifest this update: Tue 03 Mar 2026 08:33:53 +0000
Manifest next update: Tue 10 Mar 2026 08:33:53 +0000
Files and hashes: 1: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl (hash: UOn9f25uUg6+l3NNnD0JV65fzDc8o+/uQvQsmrVGWZo=)
2: CDCAE45AEFA011F0A40A3DE8696F56BC.roa (hash: s1rtmTiYlmy3jWaFmYpS86l0ke3V/J9gclHPerB9twY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Validity
Not Before: Mar 3 08:33:53 2026 GMT
Not After : Mar 10 08:33:53 2026 GMT
Subject: CN=69a69cf1-44f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:87:b5:78:62:af:e5:3a:29:25:95:5d:c6:
9e:e3:2c:ef:a8:03:d9:ca:49:a9:1b:ce:01:a6:9e:
7c:68:2a:2e:f4:8b:09:08:06:43:49:e9:59:f3:5d:
d5:72:d1:ca:85:2f:12:2e:4f:fa:28:8d:e1:2f:54:
b9:59:41:12:ae:e2:79:61:84:2f:40:53:60:b1:44:
0b:41:9a:84:61:77:08:6b:ab:b6:f5:10:1c:a2:d8:
a0:65:27:9d:d6:12:1b:47:56:84:80:18:7e:29:07:
23:9d:43:d6:59:b1:1c:f1:53:c6:29:a7:a1:5c:d0:
a5:4b:61:d6:26:2b:aa:0a:7a:4b:6f:6e:30:28:58:
a5:d3:a7:b9:4a:7e:b7:4f:20:a8:bf:99:c0:c4:12:
c9:f4:c3:23:5a:28:40:23:3f:d0:75:14:55:25:ed:
e1:0b:49:b2:13:64:d0:3d:08:da:e6:0e:f0:dd:85:
a6:b6:2f:25:c1:15:cd:31:fa:d8:5f:5d:ed:d5:cf:
bd:ae:a1:41:a2:22:07:7e:c5:e1:fe:74:6e:a5:ca:
94:d8:30:f2:68:60:c5:af:75:0a:dd:80:d8:25:a2:
c7:f5:0e:4e:02:1f:e1:35:21:49:94:d8:8d:e1:f4:
07:3a:74:c4:7d:43:d0:1a:21:80:ec:61:2a:39:b0:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:B2:72:F8:A0:F0:BF:D0:74:CC:AA:62:9F:50:6E:E3:AB:21:83
X509v3 Authority Key Identifier:
keyid:75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:55:6c:db:b0:af:42:40:dd:c1:ba:e5:65:7f:bc:6c:65:55:
9b:6a:9b:64:d9:41:ec:b0:a4:2e:46:e6:5f:c7:09:1e:e9:a1:
33:e1:79:52:c9:f9:07:85:49:5c:8d:44:1e:b8:0d:cf:84:5f:
32:1b:e0:d0:07:61:61:30:15:4b:1a:1f:c1:bf:b8:f9:96:23:
b9:81:90:97:66:9f:07:55:5b:de:5b:98:88:87:c6:15:0b:75:
2a:d0:57:c4:f7:64:67:63:0b:88:a5:a3:45:4c:64:c4:dd:e7:
54:8e:ad:8c:aa:da:12:af:ee:cb:5e:9e:88:b1:13:c6:11:2f:
13:72:f9:d5:be:73:b2:d3:d4:9a:e7:e4:31:3f:c5:32:55:64:
19:30:aa:19:fb:4d:20:6b:3c:32:77:5c:50:dc:09:14:f3:7a:
8f:de:0f:d6:ae:bd:13:ea:43:eb:1d:c0:da:1b:c0:8e:33:74:
ea:4b:4c:b1:00:48:2d:b6:ad:06:50:f0:ee:28:b4:55:2d:51:
ef:60:ad:32:af:88:25:05:39:b4:d9:5c:23:78:bd:4f:f4:e3:
a4:b2:35:4e:fe:a1:7f:45:2b:b1:d0:9f:98:a3:81:c1:7e:76:
98:4c:bb:97:92:f7:93:2a:38:4c:24:60:a2:99:7d:05:d3:14:
0d:7d:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:04 2026 by rpki-client