
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
File: RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft (raw, json)
Hash identifier: vkpjXcjZTHHCyI+CnJM7JPd6LgpDEqbPoSpPEtL4yXQ=
Subject key identifier: 08:95:F8:3E:0B:C7:AE:74:AD:C7:0F:FF:5A:40:E6:40:F5:8F:F6:BB
Authority key identifier: 45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01
Certificate issuer: /CN=A917BEDF/serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
Manifest number: 31
Signing time: Tue 03 Mar 2026 08:18:52 +0000
Manifest this update: Tue 03 Mar 2026 08:18:52 +0000
Manifest next update: Tue 10 Mar 2026 08:18:52 +0000
Files and hashes: 1: RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl (hash: Kphr4UJdrhmHaC2qhiXrZG8H/0zSjvwWEvNPGEdkFco=)
2: BFE98870D00911F08B3BE011C4F9AE02.roa (hash: iWJLrvzKgxNbc1JW1lDrYQAh5nQktcAJb+hfOL0uYqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl
rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEDF, serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
Validity
Not Before: Mar 3 08:18:52 2026 GMT
Not After : Mar 10 08:18:52 2026 GMT
Subject: CN=69a6996c-9616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:5a:35:f2:d5:25:7c:7f:53:94:54:1f:cb:
65:22:f9:f5:bd:55:70:f6:b3:b1:6f:36:d1:d9:a8:
8e:36:e9:9e:3a:fd:d2:db:ee:f1:b3:80:ad:e3:53:
e3:00:85:a5:76:6b:33:d8:83:43:cc:18:39:52:35:
17:55:1e:ee:84:ce:7a:94:f0:00:4e:7a:cf:11:a0:
de:c9:15:03:b4:e8:9b:ad:2e:76:20:27:d4:1a:19:
a0:d0:64:ad:1d:ad:53:88:ee:1a:25:ed:81:8e:f4:
62:4a:97:8f:10:3c:f8:a4:2e:97:27:c8:77:ea:d5:
5c:92:38:6f:54:32:c7:5f:ea:cc:bc:d4:60:52:77:
46:79:4d:9b:ce:d1:e6:50:55:54:2d:a3:da:2b:a4:
b3:d0:67:06:1e:3e:77:95:df:8c:57:2b:26:ac:25:
58:12:92:ef:cb:dd:7a:bf:c1:5c:98:a3:1a:8f:69:
09:9d:66:7f:1a:cd:a1:b9:ea:10:10:bf:99:f6:ff:
e2:5c:7e:c8:90:64:91:3f:8f:c6:24:f1:32:65:1e:
b7:78:0a:57:ea:7e:9a:9d:1c:aa:48:7c:69:67:de:
fa:9a:f5:9a:d8:88:98:71:23:3f:ba:5b:3a:96:84:
af:5b:e2:2f:0a:ba:46:de:a8:6f:a3:82:55:25:d9:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:95:F8:3E:0B:C7:AE:74:AD:C7:0F:FF:5A:40:E6:40:F5:8F:F6:BB
X509v3 Authority Key Identifier:
keyid:45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a4:ca:99:18:53:04:a0:17:07:d3:ab:b2:0a:e4:8f:a9:8d:
70:a6:9f:8e:bb:fb:11:2e:be:de:19:22:44:30:1a:69:2e:90:
29:e4:54:bf:ea:fd:bd:a7:1b:49:7b:69:9a:f0:73:d9:cf:19:
31:b6:c1:0e:f2:e7:48:b6:58:89:64:de:1b:54:b6:cc:3f:ca:
04:e8:d9:80:d0:eb:9b:2c:ec:ec:c5:32:aa:a0:2c:70:69:65:
04:53:bd:f2:d9:99:ba:26:17:73:b4:96:14:b9:6d:25:7a:e6:
d9:a0:f4:33:65:44:95:bc:77:3d:f6:f0:13:b2:d2:e3:79:c6:
d1:27:2d:72:a3:b6:32:d1:b4:5a:68:c8:79:8c:a2:25:55:c0:
e5:dc:3f:29:52:18:63:7d:99:66:02:63:30:2a:72:fb:6e:fa:
f2:a0:f1:1c:65:fd:82:c6:f7:55:2f:c2:77:2e:49:39:ac:08:
81:24:e0:d8:74:d2:0b:5a:ad:e5:48:78:6d:d1:4c:40:67:8b:
84:ef:76:bf:ae:3a:cc:7a:4d:ea:ea:a8:49:f7:50:03:78:6a:
f2:1a:b8:44:ac:8c:d0:9b:60:db:7f:34:91:e6:dd:7a:6d:7a:
47:92:a1:ed:0f:3f:c3:58:73:e4:af:30:62:62:94:8b:9e:79:
e6:a5:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:35:30 2026 by rpki-client