
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
File: AtoTJ_UsQCOjghrIeFDJF9joNSc.mft (raw, json)
Hash identifier: wM3P+S6K+v32AlzIcHjgFiYZJdQEAW5781i8FMGPMmM=
Subject key identifier: 39:DA:CB:08:DC:7D:46:94:61:B0:EC:62:65:89:E6:80:45:B3:6A:6C
Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
Certificate issuer: /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
Manifest number: 012B
Signing time: Sun 29 Mar 2026 05:15:11 +0000
Manifest this update: Sun 29 Mar 2026 05:15:10 +0000
Manifest next update: Sun 05 Apr 2026 05:15:10 +0000
Files and hashes: 1: AtoTJ_UsQCOjghrIeFDJF9joNSc.crl (hash: Vd34rfbDhAmu9uXnJPPjGnqD/5b7idR2wiFE2f35ogI=)
2: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (hash: wHN0aGPYwsBLx8VSGnwrDe5+CCD/0y0eF5+OVSIPIjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 05:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Validity
Not Before: Mar 29 05:15:10 2026 GMT
Not After : Apr 5 05:15:10 2026 GMT
Subject: CN=69c8b55f-7cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:41:4e:9e:07:a4:06:ed:ae:95:1b:da:b7:
44:72:6e:5b:7b:7d:02:95:66:eb:b8:f2:02:e6:34:
5e:de:20:8c:d4:cb:c2:70:11:88:d1:ea:06:f0:fc:
6d:31:09:44:07:d6:be:93:8a:c4:44:81:e6:a1:48:
57:7d:1a:07:23:3c:4e:4b:8b:b9:2e:a1:31:a5:5e:
76:46:64:19:19:be:5a:7a:28:f2:8f:0a:73:88:a5:
8b:00:c1:2e:e9:6a:09:09:28:67:e1:72:3b:e6:4d:
59:6e:01:8b:f8:3b:1f:b2:e1:b7:be:0f:94:09:51:
e6:cf:9f:d9:1d:cb:f3:b5:99:f3:ae:76:ef:5f:10:
d1:8d:77:43:66:f7:91:5d:5e:8d:93:5b:ec:6f:7b:
bd:62:e5:8a:6a:2a:cf:e6:bd:6a:09:fa:20:ef:60:
05:71:18:5e:45:99:65:5a:23:4b:34:cf:d5:f1:57:
13:cf:81:07:cd:34:ae:6a:3d:d0:bb:64:8a:a4:2c:
68:e2:16:08:5d:6a:3f:3a:58:8f:bf:a7:37:03:19:
f7:19:21:8f:98:f5:ea:45:9f:59:e0:19:90:49:cf:
2d:58:96:4b:27:4d:a3:bd:6e:42:44:b8:04:e4:ee:
58:d6:9a:3d:89:17:18:ec:fe:f7:49:be:c1:80:8d:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DA:CB:08:DC:7D:46:94:61:B0:EC:62:65:89:E6:80:45:B3:6A:6C
X509v3 Authority Key Identifier:
keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:a1:ae:9a:e4:a7:f9:c6:2b:92:d8:7c:bd:20:a5:c6:2a:9a:
06:d9:d9:c6:07:00:91:03:5a:6b:78:92:8e:c7:3c:f2:e0:9d:
5e:1f:ad:06:0d:c2:2a:d5:fd:07:75:7e:29:5b:f9:18:5f:5b:
e1:07:3b:a1:ca:03:57:fb:70:25:42:a3:5e:9f:cd:ec:59:84:
da:aa:84:3f:42:c5:ce:76:4a:96:f3:ee:a7:de:db:66:06:95:
50:eb:58:64:2f:94:78:b4:54:eb:a6:e7:fa:f2:ea:df:63:43:
ed:67:bf:38:32:af:68:63:1e:0b:bc:b6:d6:66:2c:2e:5d:cb:
22:78:89:99:64:cc:16:65:c8:5f:14:13:c5:2c:3e:d3:cd:65:
e8:81:e3:11:e0:f1:f2:eb:97:bb:1b:5a:53:11:0f:3f:b0:ca:
6c:94:64:e8:5f:5b:b2:31:c9:22:99:f9:90:9f:ce:42:7a:68:
f4:af:49:32:de:7e:ce:ca:fe:75:c0:34:b7:cd:2c:ff:31:8c:
04:aa:17:c1:8e:f3:23:e9:75:fe:58:d4:6a:b6:6e:76:a1:13:
70:4c:01:15:08:f9:2c:a2:72:57:87:ff:27:bd:2e:5a:9e:af:
fa:12:88:b4:fa:6f:30:26:f3:b2:da:85:34:6c:5e:49:a0:4e:
8d:a1:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:53:13 2026 by rpki-client