
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
File: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json)
Hash identifier: zegqVYMi3qd/1l3lawEqhYDi70zgzWrZqmuBt5SNxj8=
Subject key identifier: 59:B1:7A:A7:24:A6:24:70:E6:1E:46:17:29:20:04:35:67:4A:EF:72
Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
Certificate issuer: /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Certificate serial: 0C57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
Manifest number: 0C4E
Signing time: Tue 24 Mar 2026 18:32:35 +0000
Manifest this update: Tue 24 Mar 2026 18:32:35 +0000
Manifest next update: Tue 31 Mar 2026 18:32:35 +0000
Files and hashes: 1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: jDrLsEA2ImMyK5lTrRcxsc4/b3JcGDQxqcErRn4TcK0=)
2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: rmYnuMOnsWqJ1EMxIYJ3/6l6BUhvQSL5XzWmFrIJCBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3159 (0xc57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Validity
Not Before: Mar 24 18:32:35 2026 GMT
Not After : Mar 31 18:32:35 2026 GMT
Subject: CN=69c2d8c3-731e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:b4:34:02:34:9c:e6:ed:1e:aa:39:4f:3e:
16:f3:5b:28:e1:ff:07:c9:b7:fd:56:c1:1e:cd:c8:
80:7c:15:1a:2a:09:a2:b6:de:f0:24:b8:ac:fe:89:
b3:2e:a0:d1:a8:50:cd:2a:4d:9c:0d:53:d4:bd:e1:
96:ab:03:ac:55:4e:d5:be:09:26:39:8e:de:93:b9:
61:e9:5a:25:91:59:dc:ff:2d:0d:ef:4d:d3:45:15:
24:44:23:f4:3e:f8:57:c6:57:ce:47:60:58:39:c1:
1e:41:c3:53:20:2f:69:63:64:0e:e2:a2:f6:d8:10:
97:61:71:59:25:71:89:1d:80:7e:18:6c:d9:a8:86:
fe:ff:72:5e:71:93:68:a2:65:80:34:bf:bd:29:5a:
06:21:7f:50:d1:15:8a:dc:5e:d6:a2:02:42:70:7b:
7e:a2:1e:08:ab:a9:b7:ce:1a:3a:d7:d1:44:db:a1:
91:74:db:50:07:06:e6:cf:54:5c:06:f7:b5:f7:44:
2d:a1:e5:4a:d1:91:da:53:62:9f:87:3c:b0:2e:ba:
ef:61:0c:d0:e3:c1:fa:f4:00:a2:b4:84:fc:b9:bc:
43:95:8e:42:ad:9f:bd:dc:cb:f5:fa:84:8c:6e:db:
8d:5b:6b:9a:4d:99:4a:94:61:6d:2d:a4:82:ba:c5:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B1:7A:A7:24:A6:24:70:E6:1E:46:17:29:20:04:35:67:4A:EF:72
X509v3 Authority Key Identifier:
keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:13:e2:37:b3:3d:ae:7f:a9:26:a8:48:e7:da:6d:a2:40:37:
5b:03:14:16:2a:3c:7a:c9:f8:1b:29:da:63:82:a2:eb:99:da:
43:b7:b1:a7:a0:c0:43:67:02:85:56:e6:fe:4a:5e:98:3c:37:
b0:21:d2:38:4f:5c:39:37:8e:cf:27:a0:45:5d:ec:9a:7e:d6:
05:7b:3d:76:7a:87:79:7e:ee:87:ba:3d:de:d5:e2:83:f3:cc:
4a:27:e9:f9:e7:06:3a:c5:fa:f4:61:80:e3:89:65:44:4e:12:
90:ff:73:5b:11:73:ec:c7:0d:a5:81:8d:a1:3f:b1:93:f0:da:
24:75:08:6d:20:6e:83:ee:6a:fb:3f:79:11:3c:38:87:20:65:
63:2f:1f:98:97:1f:9e:94:d9:48:6c:0c:5b:e8:3e:51:c9:7d:
7d:0e:7e:71:09:8e:e0:5e:0b:30:ad:75:5a:f3:31:28:fb:1d:
6e:bc:72:18:67:9c:be:fa:b3:d5:df:01:b7:5a:20:12:53:83:
23:e0:1c:aa:22:10:6d:58:d4:71:8d:24:ac:b9:ec:79:2e:58:
5e:4a:2d:1d:38:81:d9:dc:1a:6e:6c:8a:e7:44:ba:93:ad:96:
4d:d6:ad:d2:f0:f7:e3:a8:c0:83:df:e0:f9:31:08:f5:bf:47:
f1:99:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:16 2026 by rpki-client