
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json)
Hash identifier: s0hITbST0I3MQoGmW7HNVY9i87MtL+vbJBFfD1Eaiew=
Subject key identifier: BA:4E:61:2F:86:96:C6:0F:D7:E3:3C:69:65:CD:59:46:25:FC:3E:22
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial: 069A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
Manifest number: 0694
Signing time: Mon 02 Mar 2026 22:24:25 +0000
Manifest this update: Mon 02 Mar 2026 22:24:24 +0000
Manifest next update: Mon 09 Mar 2026 22:24:24 +0000
Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: UBy+hjVcvBMfGpCgEQNVR8dA/DDDOSWf7FVsrDi+wc4=)
2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: N3q1uf5+Rh2DPcAvlgwRY0LjrkAYYmogkX8/JqaD7MM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690 (0x69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Validity
Not Before: Mar 2 22:24:24 2026 GMT
Not After : Mar 9 22:24:24 2026 GMT
Subject: CN=69a60e19-9533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:7c:6f:04:e9:18:a2:9a:10:15:47:64:e5:
9c:3d:f8:5d:99:44:f8:15:b9:54:ee:e4:7b:32:96:
b8:26:ad:25:ee:29:03:ba:03:e7:56:d2:e9:86:1d:
bb:a2:c6:a3:69:75:95:75:c2:e0:ce:d2:02:84:9f:
75:35:02:25:e6:33:f6:ca:b2:cb:35:aa:df:41:c1:
8f:04:18:8f:c5:28:73:3f:0f:69:c2:0b:71:04:68:
fb:0a:46:be:d7:c7:c1:ac:c5:94:bc:99:5b:e2:dd:
fd:19:45:9c:20:86:40:5f:17:ff:1c:25:b6:2f:3a:
f6:88:ab:da:fc:64:15:0d:51:8f:a0:0c:9f:bb:9f:
a7:5b:c0:20:03:17:f5:a3:c4:43:8c:6c:67:9b:0d:
a6:dc:b1:c9:e6:62:2b:dc:53:e0:33:c0:c3:f6:b8:
82:e1:33:12:fa:f0:56:53:d7:9b:73:05:1f:e0:25:
cd:57:6b:9f:7d:7b:0e:f6:ef:1a:5f:c2:83:7f:84:
b2:21:b3:e9:51:8c:dc:eb:cb:c2:63:56:31:33:f8:
95:78:e3:06:55:cd:0f:19:6e:de:4b:11:c1:16:bb:
1d:69:ff:61:07:50:09:ad:81:81:59:79:7e:6a:ff:
a3:e2:ab:60:53:de:d7:e5:e7:44:ed:a6:d8:2c:3b:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4E:61:2F:86:96:C6:0F:D7:E3:3C:69:65:CD:59:46:25:FC:3E:22
X509v3 Authority Key Identifier:
keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:40:53:c5:6c:94:1a:95:3d:7e:a6:f7:70:1d:9b:e2:be:e6:
55:6a:c0:1a:a6:b6:87:ee:bd:57:62:6e:d0:b7:9d:de:b9:85:
c7:87:d6:49:56:12:bf:2e:ae:7a:20:37:e1:77:d5:3d:d0:42:
27:12:0a:c2:9d:1e:a7:ac:bc:d4:a1:2d:61:ed:c9:46:f9:d7:
21:8b:73:8a:9c:2a:86:d9:31:f3:21:e9:5f:21:73:b6:fa:ca:
f8:6d:37:bb:05:bc:14:2a:46:44:a4:70:3c:3b:ab:2d:f0:d5:
7b:f1:16:88:e0:f3:10:36:18:0f:a3:f0:b6:0d:13:2f:0a:f7:
e0:88:35:88:71:66:2c:62:98:f5:6b:58:1f:e0:a0:fc:60:ed:
e5:06:23:b4:8d:44:43:b8:44:8c:9a:b7:89:32:84:40:ac:51:
57:f7:1b:42:05:d4:76:0c:8f:9d:d7:5b:f3:71:e8:51:f0:cf:
13:84:b2:a4:e0:36:a1:44:40:96:96:77:5a:b6:c6:0c:a3:a3:
1a:bb:79:bb:12:bc:b5:57:c2:e0:ed:75:6c:97:d9:0d:3a:33:
dc:9a:ab:10:3e:b2:9f:9c:0d:65:9b:70:f6:bb:dc:5b:a0:44:
b7:5f:a2:04:23:72:e7:2a:e2:46:38:71:e5:81:a3:1c:1e:3d:
08:1b:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:51:08 2026 by rpki-client