
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
File: L71gGUYMdo4C0QZloGiN0flxhG8.mft (raw, json)
Hash identifier: qHmPnDmfMLQmJDr6sixDLCyoqK1Jk67Ww5kK68qYphE=
Subject key identifier: CF:9D:E1:8C:35:1A:EC:19:B2:62:CF:3F:33:84:EA:80:9D:B7:51:AE
Authority key identifier: 2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F
Certificate issuer: /CN=A9110C8B/serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
Manifest number: 24
Signing time: Wed 25 Mar 2026 08:00:32 +0000
Manifest this update: Wed 25 Mar 2026 08:00:32 +0000
Manifest next update: Wed 01 Apr 2026 08:00:32 +0000
Files and hashes: 1: L71gGUYMdo4C0QZloGiN0flxhG8.crl (hash: wHw7QGqCFQRbtKG8tmUkanPv2/gkFsDHO5jEtalZSBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl
rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C8B, serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
Validity
Not Before: Mar 25 08:00:32 2026 GMT
Not After : Apr 1 08:00:32 2026 GMT
Subject: CN=69c39620-38f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:f5:30:18:39:b0:a5:5b:dd:b3:6a:e2:33:
a3:ad:0d:1d:cb:dd:1a:0b:1b:16:18:1f:bf:8d:aa:
6f:59:a1:da:d3:e0:89:48:2b:10:8b:29:a7:46:a5:
dc:52:f6:88:7e:6f:cf:2b:6a:94:b3:66:d2:af:4d:
fa:49:3d:3a:e5:16:38:99:cf:be:df:19:f5:0c:47:
aa:ce:4e:5a:7f:c9:b6:d2:66:3d:58:fb:d2:9f:ba:
20:0a:19:a4:42:f8:03:79:5a:42:66:03:44:45:87:
31:29:25:15:a6:00:f7:14:05:ec:42:f7:45:2a:81:
d0:33:34:d7:ff:d1:0c:1c:b9:d8:aa:74:f6:90:f4:
fa:35:6c:8b:41:ca:da:3a:f5:b2:f7:97:c1:b9:10:
8c:da:8c:09:ba:08:b4:3f:44:00:8f:99:ab:86:1b:
40:fe:36:bf:26:da:8c:79:40:d2:5f:12:5e:74:01:
78:8a:5d:e5:6f:a2:5f:d9:76:f3:6f:f4:e3:30:41:
4a:27:00:be:7e:c8:7c:9d:85:8a:ce:bd:60:67:8c:
a0:51:81:a7:c4:64:bb:60:e2:54:c7:4a:05:39:54:
61:12:25:7b:f2:f1:4b:76:20:58:90:fc:e5:ce:15:
6f:f2:1c:38:cf:6d:d3:c9:f9:b3:49:47:ef:64:16:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9D:E1:8C:35:1A:EC:19:B2:62:CF:3F:33:84:EA:80:9D:B7:51:AE
X509v3 Authority Key Identifier:
keyid:2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:c3:f7:f0:52:51:c1:c0:fe:6a:a3:2e:72:8a:df:d8:39:53:
e4:df:71:19:cb:40:ee:38:14:eb:c0:3e:16:4d:d1:5b:83:68:
45:15:0d:c9:8b:7c:a0:80:f9:b9:ad:db:00:59:d1:92:58:1e:
02:99:6c:50:e5:30:e1:e7:c9:ed:e4:48:6b:a1:31:ac:55:bf:
83:be:e2:6c:20:3a:78:a4:76:2c:c5:59:70:49:63:9e:ab:24:
a0:f1:e9:ab:c3:29:75:26:b8:6e:2a:0f:8c:83:18:fb:1e:33:
49:3c:e7:1c:04:a6:7c:14:d9:eb:bc:de:0a:8d:1f:3f:bb:ef:
77:d4:37:c8:18:ee:7f:be:90:36:8e:f4:e6:fa:e2:97:02:50:
8a:86:12:db:23:c0:9b:20:e4:52:0d:5a:4b:08:59:62:2c:fd:
fa:39:55:f9:5c:b0:da:78:fc:32:ba:e0:2c:7e:bb:5c:a0:c5:
bd:26:07:49:ba:90:3c:2f:d9:60:5f:53:dd:12:75:04:fa:ec:
c3:9b:a8:89:51:ab:17:9b:2a:6e:ad:c4:7f:b6:66:c4:ef:06:
6e:a8:4d:58:19:a1:be:0c:e8:a6:b1:07:ce:2a:cc:9f:ec:37:
34:9b:f7:ff:99:ba:74:a6:7d:26:0b:95:b5:bd:52:75:87:17:
ef:4a:43:7e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MEM4QjExMC8GA1UEBRMoMkZCRDYwMTk0NjBDNzY4RTAyRDEwNjY1QTA2ODhERDFG
OTcxODQ2RjAeFw0yNjAzMjUwODAwMzJaFw0yNjA0MDEwODAwMzJaMBgxFjAUBgNV
BAMTDTY5YzM5NjIwLTM4ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4aPUwGDmwpVvds2riM6OtDR3L3RoLGxYYH7+Nqm9ZodrT4IlIKxCLKadGpdxS
9oh+b88rapSzZtKvTfpJPTrlFjiZz77fGfUMR6rOTlp/ybbSZj1Y+9KfuiAKGaRC
+AN5WkJmA0RFhzEpJRWmAPcUBexC90UqgdAzNNf/0QwcudiqdPaQ9Po1bItByto6
9bL3l8G5EIzajAm6CLQ/RACPmauGG0D+Nr8m2ox5QNJfEl50AXiKXeVvol/ZdvNv
9OMwQUonAL5+yHydhYrOvWBnjKBRgafEZLtg4lTHSgU5VGESJXvy8Ut2IFiQ/OXO
FW/yHDjPbdPJ+bNJR+9kFsGxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUz53hjDUa
7BmyYs8/M4TqgJ23Ua4wHwYDVR0jBBgwFoAUL71gGUYMdo4C0QZloGiN0flxhG8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQzhCLzlFNjk2OTIyRjY2
QTExRjBBM0ZCOTA4ODZGNkY1NkJDL0w3MWdHVVlNZG80QzBRWmxvR2lOMGZseGhH
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTDcxZ0dVWU1kbzRDMFFabG9HaU4wZmx4aEc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw
QzhCLzlFNjk2OTIyRjY2QTExRjBBM0ZCOTA4ODZGNkY1NkJDL0w3MWdHVVlNZG80
QzBRWmxvR2lOMGZseGhHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBFw/fwUlHBwP5qoy5yit/YOVPk33EZy0DuOBTrwD4WTdFbg2hFFQ3Ji3yggPm5
rdsAWdGSWB4CmWxQ5TDh58nt5EhroTGsVb+DvuJsIDp4pHYsxVlwSWOeqySg8emr
wyl1JrhuKg+Mgxj7HjNJPOccBKZ8FNnrvN4KjR8/u+931DfIGO5/vpA2jvTm+uKX
AlCKhhLbI8CbIORSDVpLCFliLP36OVX5XLDaePwyuuAsfrtcoMW9JgdJupA8L9lg
X1PdEnUE+uzDm6iJUasXmypurcR/tmbE7wZuqE1YGaG+DOimsQfOKsyf7Dc0m/f/
mbp0pn0mC5W1vVJ1hxfvSkN+
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:02 2026 by rpki-client