
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json)
Hash identifier: 3QDYbPie3uCVggxGDFjhrQqDsG0olKfrL1eCR6MwElM=
Subject key identifier: 4A:EB:18:13:40:66:AF:0A:EA:C4:4E:05:BB:AC:52:CD:53:00:7B:CE
Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
Manifest number: 018C
Signing time: Tue 03 Mar 2026 04:06:42 +0000
Manifest this update: Tue 03 Mar 2026 04:06:42 +0000
Manifest next update: Tue 10 Mar 2026 04:06:42 +0000
Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: A0rJtlZ2TfZr8coPUTw1WOz7VSG4O9xZpxMozSu9sOU=)
2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: 6A3uQ575OB8LX3eqmYdyVlzTZlW6pTp9MJ+vD3i9Vf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Validity
Not Before: Mar 3 04:06:42 2026 GMT
Not After : Mar 10 04:06:42 2026 GMT
Subject: CN=69a65e52-3adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:40:e5:c2:f8:c4:ad:1d:46:d6:f2:d7:ae:
de:47:32:ad:7c:53:42:5a:17:ce:23:b5:b1:fc:d1:
58:ea:6c:97:a3:91:55:54:d4:8a:47:b9:e3:e3:fe:
1b:28:b6:57:ff:9e:1a:16:4f:53:62:fc:ce:da:a3:
37:43:3b:6f:df:ff:32:c9:ca:05:b0:24:f0:37:3f:
76:2d:41:65:2a:f8:7d:9d:34:cb:73:fe:c5:f5:c9:
c6:0f:3e:55:df:38:28:35:53:2a:c2:3e:a0:b8:48:
7c:14:10:fb:d6:f6:a5:50:77:b9:dd:4c:33:fe:13:
7d:57:3c:3d:27:3f:dd:86:94:fb:28:a4:60:5e:28:
18:f9:e5:72:bf:6b:db:ef:48:7c:53:6a:2b:b6:0e:
78:db:db:f3:7e:26:a9:1e:37:cd:f0:d2:20:ed:02:
41:af:a0:50:4b:12:bb:f5:62:4d:a7:43:92:55:71:
83:3c:27:b2:1e:01:d6:d4:f5:f0:ec:9d:3f:39:88:
1b:c3:7d:95:fe:15:00:1d:f4:b6:0d:b9:38:3b:9c:
4b:4a:93:04:48:d1:71:93:71:6f:04:6b:78:de:e2:
9a:69:6e:45:62:ea:0e:fd:53:7b:02:f6:8a:26:15:
e2:da:61:46:ce:d3:e7:59:5c:9e:c5:ce:8e:7d:e3:
2e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EB:18:13:40:66:AF:0A:EA:C4:4E:05:BB:AC:52:CD:53:00:7B:CE
X509v3 Authority Key Identifier:
keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8a:fb:0b:a3:4b:fb:cc:03:8d:05:01:f8:85:fb:c0:b6:35:
cc:67:d7:61:5e:53:3d:23:16:c8:a2:24:5d:e3:63:e4:b9:ba:
fb:11:a4:36:1f:5c:1d:a9:a0:61:b7:fd:af:05:4c:07:90:52:
ce:00:c1:6f:a7:1b:1f:5e:8b:17:3b:12:8f:15:27:60:07:07:
4e:88:46:08:a9:d0:ef:56:d5:df:b1:85:bc:e6:f5:77:bb:33:
a6:55:9b:45:a9:62:ca:50:33:9a:ea:0b:96:18:27:25:37:bd:
b7:db:17:69:27:61:42:40:38:d9:97:82:db:b2:b2:21:4b:6b:
53:e3:5c:26:40:70:e4:64:b2:53:6d:c5:61:0d:b2:d7:19:2f:
0b:2b:98:14:58:20:5c:ba:94:c1:e2:73:6c:57:fd:c4:e4:34:
1f:b2:45:e1:41:3f:3b:ab:b9:59:d2:88:2e:2e:69:fe:bb:2f:
a1:4b:f5:f9:0f:45:e8:3e:28:f9:08:66:2e:4b:bb:37:8e:fd:
e4:d4:6c:72:88:a6:31:ca:76:da:be:f1:4c:2c:5c:7e:b3:70:
3f:a2:da:da:44:c1:74:d1:06:00:53:7f:49:02:25:81:76:27:
57:9d:2b:d3:7b:76:58:b9:8f:52:d8:d5:56:7f:af:22:8b:2f:
5a:6b:62:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:33 2026 by rpki-client