
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
File: t_uD0cnC98OLcAJxRkrCM2Ti59c.mft (raw, json)
Hash identifier: CzRWRFFYSbSx00nxFxGiCsW6e5lZWdKPXhSSpP6/Bhk=
Subject key identifier: 8E:BC:87:E2:59:83:4A:B2:0F:DA:90:96:35:0E:72:45:98:C6:BF:69
Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
Certificate issuer: /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
Manifest number: 40
Signing time: Tue 03 Mar 2026 08:06:57 +0000
Manifest this update: Tue 03 Mar 2026 08:06:57 +0000
Manifest next update: Tue 10 Mar 2026 08:06:57 +0000
Files and hashes: 1: t_uD0cnC98OLcAJxRkrCM2Ti59c.crl (hash: BF4l88EgFQhf5CF98BxyvuMoiRjXew5SzLhyUztbZ9k=)
2: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (hash: fuNnrqSgI2XXye8Z2eFA0jRKqdXrxlxebRTfn3G5134=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Validity
Not Before: Mar 3 08:06:57 2026 GMT
Not After : Mar 10 08:06:57 2026 GMT
Subject: CN=69a696a1-3784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:0f:6c:65:71:d5:17:76:9c:90:60:8d:ca:
27:86:ef:01:5b:88:51:09:5a:7f:c8:8b:4c:d5:13:
35:e1:de:21:ab:12:25:e2:47:cd:a5:db:ea:be:e1:
8f:48:fd:63:0f:6d:ec:35:6d:b3:df:64:e8:76:6d:
6e:80:47:38:5f:60:90:75:9d:5e:67:26:19:23:0c:
40:8a:fc:39:33:73:bb:05:9b:20:1c:b5:78:02:59:
70:ab:75:c2:26:37:38:8b:3a:fe:c5:62:19:48:92:
01:28:33:86:41:af:97:cd:2d:7e:5f:04:fb:3e:ee:
43:d8:95:8a:c0:eb:19:03:39:04:10:39:1b:32:49:
d4:86:aa:3b:e2:10:1f:ec:60:b2:1f:d5:b4:7c:9c:
57:12:55:c4:8d:a4:ad:6e:07:b8:bc:8a:f8:86:01:
b9:f8:18:7b:6a:71:13:76:6c:1d:8a:7c:6f:55:30:
cb:91:cb:19:0d:23:a6:fe:04:8e:36:92:87:bb:50:
aa:9c:03:ac:57:14:78:c7:ff:2c:4f:87:8b:9d:3b:
c0:25:6d:9c:d5:0c:19:42:53:33:22:5c:7c:ce:59:
95:c8:91:86:19:51:5d:cf:19:80:1f:b5:3d:bf:48:
7e:b2:c4:11:34:7a:33:71:01:6f:75:2b:a9:05:38:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BC:87:E2:59:83:4A:B2:0F:DA:90:96:35:0E:72:45:98:C6:BF:69
X509v3 Authority Key Identifier:
keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:40:97:7e:a6:1b:61:fb:04:31:49:d3:12:df:7a:86:de:80:
67:4a:32:f4:63:00:bb:2b:26:b9:c9:3d:2a:b4:2a:c0:72:b0:
57:f3:37:08:24:86:cd:ab:03:1f:20:19:33:4b:71:6b:9b:e5:
fc:48:71:69:d1:a6:c9:6e:34:b7:9c:16:8b:05:9a:a6:1d:4e:
9c:27:cf:76:35:35:b8:cb:c4:e8:30:49:e9:a6:ca:b4:d3:98:
49:97:a8:b5:1f:51:2d:9d:ae:40:93:9c:de:65:da:35:b9:bb:
8b:ee:fb:18:51:df:6d:5a:e4:f1:4b:e4:19:64:6f:16:7e:f0:
f9:b1:39:07:88:fd:a1:4f:93:ee:a8:40:c6:3e:8b:4e:90:ea:
0b:27:09:f1:2a:0f:9e:06:16:a4:de:86:af:82:18:29:c7:6a:
54:76:eb:50:d0:ca:bd:63:c8:a0:f1:fa:d6:0c:cd:fe:de:65:
1f:57:75:06:fc:0f:5c:55:a5:f5:f4:6c:cf:69:f1:63:fa:c6:
2a:3b:dd:9c:9e:99:4e:b8:28:06:61:19:f7:ae:6c:59:6a:3f:
43:87:f3:15:2c:24:97:c2:c2:f5:c9:46:5b:94:36:3c:12:7d:
82:3a:16:98:0c:f7:ab:55:68:45:49:ee:79:25:e8:bc:62:95:
9b:50:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:23 2026 by rpki-client