
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
File: usyV7haoNg4u685zU3tvmszfLq0.mft (raw, json)
Hash identifier: TAEr2xkJ9/ki/wYCD/z0wqV3UVA851jAage2evs7xOA=
Subject key identifier: A7:C4:A1:A4:39:ED:05:17:FF:6B:79:C2:DD:DE:94:0B:6F:ED:FE:A6
Authority key identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Certificate issuer: /CN=A914D3B0/serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
Manifest number: 26
Signing time: Tue 03 Mar 2026 08:28:40 +0000
Manifest this update: Tue 03 Mar 2026 08:28:40 +0000
Manifest next update: Tue 10 Mar 2026 08:28:40 +0000
Files and hashes: 1: usyV7haoNg4u685zU3tvmszfLq0.crl (hash: U6PeCFdmV5TvubAYn9YGj2OylkWxnz3Spx9CzXK5Dxw=)
2: 9D379516E54D11F092458985756F56BC.roa (hash: Hhwlbhyj8xIcBqU3mSebItjPxuaiWJe6Fv2dlfosEMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Validity
Not Before: Mar 3 08:28:40 2026 GMT
Not After : Mar 10 08:28:40 2026 GMT
Subject: CN=69a69bb8-ff77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:f3:1d:7e:bc:23:07:b7:aa:f8:ca:a7:81:
71:a8:e9:25:ee:0c:c9:e5:e9:61:21:e8:e1:1c:3e:
b7:76:34:96:6e:66:d3:a6:7b:de:15:8e:49:e7:91:
af:1c:69:06:db:3a:d6:14:aa:7d:5a:1d:00:6d:a0:
81:0c:3b:19:61:cd:5e:fe:c1:62:f6:9f:81:99:2b:
23:c8:ca:39:b0:61:19:0d:a4:c3:29:ee:e1:4b:28:
9c:2e:c9:e3:59:24:f6:c0:de:ef:cd:e7:1e:13:a5:
3a:56:cd:d4:e0:68:0d:d7:90:af:12:83:3f:54:45:
50:79:9c:b2:8f:e9:c7:bb:be:39:10:17:17:e6:f5:
23:ce:b4:fe:56:73:07:14:7b:2c:94:12:f3:8e:b7:
bc:d2:e2:de:91:37:2a:01:7b:4d:5d:88:f7:ed:78:
b2:1e:e7:3b:46:e7:02:8e:87:71:cf:d2:80:b7:9a:
04:b9:dc:70:5c:f8:8d:30:72:a4:07:58:b3:65:4f:
22:72:4b:97:44:5d:57:13:1b:e1:88:a6:7d:bc:47:
95:58:68:a7:a9:6a:cf:73:90:72:1d:cd:b5:63:56:
c7:60:bf:68:f7:c1:84:48:cb:88:2d:0d:70:8b:01:
42:66:89:c2:c0:1f:5d:e7:0d:40:94:f4:cf:b6:79:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C4:A1:A4:39:ED:05:17:FF:6B:79:C2:DD:DE:94:0B:6F:ED:FE:A6
X509v3 Authority Key Identifier:
keyid:BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:a3:3b:c6:69:38:02:52:3b:31:21:ba:22:65:95:58:29:87:
ce:0f:88:95:58:7d:47:f8:8a:0d:dd:65:50:a1:a4:21:a7:bc:
96:18:39:7c:a0:b2:c6:4d:b1:8c:62:43:4f:35:66:48:c8:34:
e9:74:63:bf:3a:4e:dc:41:30:da:88:90:fa:1c:ca:f0:ae:70:
13:63:ca:44:0f:80:c4:cb:02:0a:e7:69:60:07:66:3d:04:a1:
5f:41:51:ce:47:86:3f:b2:b2:ef:e2:b6:eb:7b:6b:25:5b:77:
7e:06:3b:1b:31:30:e7:67:1d:c8:56:14:7d:12:9b:76:2b:a3:
a2:73:2f:e0:45:a3:de:cf:45:62:37:5f:9c:4a:2d:b3:36:2e:
38:63:0d:6a:db:a9:84:c0:4d:7e:3e:af:a9:a5:90:99:8e:f3:
de:5d:3a:c8:7c:8a:f9:b9:25:e5:60:08:c6:17:ff:cf:9c:92:
be:96:9e:1e:8d:00:be:b1:7a:89:31:0f:ee:16:44:b6:5a:6d:
c3:89:df:3d:44:5d:a4:c6:7d:7f:75:3e:36:8b:1b:98:a2:01:
8f:cd:9a:42:7b:03:30:89:92:ee:d6:2d:ad:f5:37:d9:37:fe:
d3:a5:41:58:70:29:d8:65:4b:0d:37:d2:d8:ed:67:19:a4:4f:
95:03:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:07 2026 by rpki-client