
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
File: 1p-CbIwgERW0fuzDf7XgAI41a9w.mft (raw, json)
Hash identifier: Ugk2UU2vgCdWh8oRH5A62PtQxURt1AyBEZleG2lQbd8=
Subject key identifier: FF:A6:53:DB:C1:CD:3D:2D:DE:1B:7F:A9:34:00:79:FF:56:62:82:5F
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Certificate issuer: /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
Manifest number: 44
Signing time: Tue 03 Mar 2026 08:01:47 +0000
Manifest this update: Tue 03 Mar 2026 08:01:46 +0000
Manifest next update: Tue 10 Mar 2026 08:01:46 +0000
Files and hashes: 1: 1p-CbIwgERW0fuzDf7XgAI41a9w.crl (hash: rJ9EAPv6KmEUjUSFfppwG98eejGurlWt4MhMyqnNTak=)
2: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (hash: +wWjLcPKpBqVBQPIBu36nGMdiKTiR75UkPnPyB3guZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Validity
Not Before: Mar 3 08:01:46 2026 GMT
Not After : Mar 10 08:01:46 2026 GMT
Subject: CN=69a6956b-6fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d0:32:5b:fa:64:6e:5d:53:c4:12:72:ee:06:
3c:ee:3e:69:c6:ff:c3:27:f1:68:90:67:0a:56:1b:
de:4a:61:20:00:83:b3:30:58:66:98:f3:3e:a3:02:
26:65:89:0a:99:1f:62:7d:4e:96:60:2c:57:4b:4c:
43:d1:0c:ff:d8:52:a5:04:44:3c:8b:1b:ce:5a:24:
4b:ba:0e:74:af:0c:e1:b8:b6:10:65:9c:4f:a4:f4:
2b:e0:74:e1:77:0f:bf:74:a1:44:8a:ff:5f:f9:98:
c7:ec:ff:67:b1:76:12:1e:cf:9d:be:50:1b:46:40:
e8:c3:93:6a:d0:95:92:66:e5:04:36:5c:3f:af:2c:
0e:fd:ff:a4:3b:9c:63:e0:b5:2d:fd:e1:28:09:9c:
4b:c6:41:d3:0e:cc:e7:c3:af:43:91:2c:cb:7c:fb:
38:ce:20:f0:d0:36:5a:1e:db:2d:31:8a:0e:ff:34:
3a:b4:a5:51:33:94:56:8e:38:f6:ae:5b:bb:0b:3e:
50:05:2b:10:13:a2:b1:a6:62:8d:eb:44:02:fb:82:
ce:fd:ac:9a:29:8a:0b:68:2e:f9:09:43:49:b6:d2:
e9:0f:6e:c8:f8:ac:74:fe:97:af:7d:29:1a:dc:d4:
12:cd:e2:48:ce:d2:ad:89:5a:7c:3b:09:84:c8:7f:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:53:DB:C1:CD:3D:2D:DE:1B:7F:A9:34:00:79:FF:56:62:82:5F
X509v3 Authority Key Identifier:
keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:26:ca:62:16:6e:9c:a6:1d:11:be:07:a2:78:72:fe:08:72:
7a:82:ea:b9:7e:24:a1:63:d4:ee:ee:df:23:08:0d:be:b4:f3:
d8:2e:6d:61:43:b7:8c:8e:8b:59:61:a4:34:35:7f:b2:c9:74:
81:0f:63:95:67:f0:9c:98:d5:ca:fd:89:62:89:cb:df:35:eb:
03:ae:8a:68:8d:63:a7:06:1b:94:49:37:72:a3:c5:93:65:36:
ae:33:69:6e:6a:59:f1:01:71:6d:f2:cf:30:fb:b8:a4:b4:35:
ca:1b:f0:77:aa:8d:d7:ab:fd:16:dc:b6:48:b4:f1:e3:0d:cc:
91:89:29:45:12:71:d9:72:11:05:8d:2a:44:ba:50:58:b0:54:
54:21:1e:aa:bd:ff:09:9d:79:07:cf:ca:e5:6e:37:fa:82:a4:
b5:fd:9c:13:ec:ea:bd:74:37:77:9f:d9:3a:99:3e:03:60:94:
20:18:f4:6c:17:99:fb:9d:04:06:59:a8:89:3c:cd:0d:be:fc:
b9:50:18:1f:2e:76:5b:8d:68:d3:b7:62:17:5e:4d:96:2b:b4:
f4:79:7d:1c:79:d0:99:ee:c4:a2:8d:4b:f4:79:a9:79:cb:fb:
4a:c4:2f:bc:3d:f3:b4:6a:4c:42:01:81:e8:1b:fb:91:da:74:
25:11:8a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:58 2026 by rpki-client