
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
File: 529w4WvXl_FHD9HglUZu2f_XC94.mft (raw, json)
Hash identifier: gvd1Og+WD9l2fUItP6hymjbF4dL/78hxWDlkyI9Azmk=
Subject key identifier: 90:CF:78:D1:46:63:E7:66:1C:27:97:39:D1:15:87:D6:2B:E7:86:7E
Authority key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
Certificate issuer: /CN=A914B6D8/serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
Manifest number: 3E
Signing time: Mon 02 Mar 2026 18:06:01 +0000
Manifest this update: Mon 02 Mar 2026 18:06:00 +0000
Manifest next update: Mon 09 Mar 2026 18:06:00 +0000
Files and hashes: 1: 529w4WvXl_FHD9HglUZu2f_XC94.crl (hash: eIRCQpxe+/yjMyA+JUHRdwXb0w1vDVAlHxrm81eG6iA=)
2: 551B0760BEBD11F0AD50D23AC4F9AE02.roa (hash: 5yaxUN0WdNPJcEJkf69PFh/CxSo68teL13Z+Mjg2H+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 18:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Validity
Not Before: Mar 2 18:06:00 2026 GMT
Not After : Mar 9 18:06:00 2026 GMT
Subject: CN=69a5d188-e25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:7a:fe:d9:e1:41:da:20:f9:79:34:96:5a:
c2:59:89:3e:a5:44:41:68:62:f0:81:1c:32:dd:1b:
6d:ee:41:f2:fd:22:e2:2b:b0:f9:8a:b4:08:c7:23:
6a:95:11:27:e2:8d:83:d9:0f:37:71:6c:b4:8b:37:
3f:ee:8d:9a:1e:20:86:f1:16:b9:d0:f3:28:2a:a0:
63:33:63:37:0f:54:7c:ee:cb:3e:b3:e9:8d:ad:45:
16:2b:b7:72:52:dc:c1:87:a0:a4:b8:8f:25:c7:05:
cc:07:50:7e:3f:3a:ba:39:be:0c:19:f7:e1:ca:87:
05:8e:28:cc:06:7b:92:97:b1:64:14:d9:0a:25:7c:
83:1c:d4:80:bb:52:cd:23:b9:01:bb:aa:f0:ac:b0:
38:77:e0:90:76:53:47:55:d6:67:78:2d:04:5b:77:
db:fc:e8:01:a1:88:62:b8:7c:02:36:e5:4c:03:d6:
de:c5:5d:2d:ab:72:c1:04:a1:dd:1b:5e:1a:a4:37:
fc:89:bb:bd:06:25:c7:8c:79:97:f3:0e:27:b5:63:
9f:09:5e:de:d7:6d:c1:54:d7:e9:3e:b3:83:3d:35:
c6:f9:f5:74:86:ce:a0:5a:12:f0:34:49:be:f7:0e:
f4:af:f4:b0:34:83:28:34:22:87:b9:a2:a8:e6:99:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:78:D1:46:63:E7:66:1C:27:97:39:D1:15:87:D6:2B:E7:86:7E
X509v3 Authority Key Identifier:
keyid:E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b3:79:95:aa:8c:68:e3:e0:5c:d2:77:9c:54:d6:0b:10:ae:
1c:e9:6e:72:a1:8a:6d:4b:99:35:9b:5b:50:2a:d9:02:1e:39:
d8:2f:86:4f:e4:ee:b4:8e:24:d3:99:f5:22:5f:5d:14:5c:d9:
c0:42:a1:9c:30:66:3b:fc:89:69:a8:8c:8f:cd:39:45:97:78:
1b:d9:d2:18:0e:91:4b:16:eb:44:23:1b:60:cc:2d:28:ca:7f:
13:65:ea:a7:3a:1c:53:28:b9:53:54:f6:db:8c:9a:f5:71:36:
2c:af:23:1d:39:7e:61:30:48:f9:18:a3:34:64:34:77:4b:3e:
19:2b:a9:bb:69:0f:4c:a1:43:d3:c7:f9:44:50:e2:1d:44:4b:
43:48:fd:a9:5a:11:b0:32:c4:87:c7:3a:9b:55:7e:11:22:fd:
7e:cf:65:2d:a0:cf:22:8f:33:ef:34:7b:08:36:e0:f5:0d:60:
dc:f1:12:70:bc:1b:92:30:a1:43:ff:66:91:04:63:8d:44:d3:
4a:06:a0:1c:a1:f6:06:07:72:13:de:0e:0d:8e:af:9a:a3:53:
76:fa:46:d6:d9:a2:9e:66:9d:a2:2f:61:e3:58:79:06:83:19:
09:f9:f1:c9:a5:7c:29:94:cd:c0:9b:8c:33:45:46:00:6f:2f:
43:53:7e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:42 2026 by rpki-client