
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
File: U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json)
Hash identifier: ZiIQP1eG7j3NZVjn/SY/6gvmtXA3BoAYLJnNMuraDt4=
Subject key identifier: 92:62:6B:64:3D:34:7A:6D:FE:8E:94:EA:36:70:16:A2:0B:D1:8C:AA
Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E
Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
Manifest number: B3
Signing time: Wed 23 Sep 2026 03:37:52 +0000
Manifest this update: Wed 23 Sep 2026 03:37:51 +0000
Manifest next update: Wed 30 Sep 2026 03:37:51 +0000
Files and hashes: 1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: 1mGcENPoMorOFchEqjfB1YFV3Yom+nVEag7RZjnG8Q0=)
2: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (hash: U7Wzt+B8FiIYGK+MKYg3UA1qAj6b/eB2Gqgc5UuWazk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl
rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E
Validity
Not Before: Sep 23 03:37:51 2026 GMT
Not After : Sep 30 03:37:51 2026 GMT
Subject: CN=6ab34990-6df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4c:20:6c:9c:79:98:fc:a3:c0:af:cf:cd:61:
38:1e:ae:33:e6:27:7d:56:bc:9b:cc:96:11:10:96:
be:ee:83:6c:54:88:a8:24:13:73:9c:a2:2c:3e:cf:
be:0c:cc:bb:cc:e8:59:c2:a9:11:96:75:09:76:a0:
83:99:e0:f2:73:f2:8c:1a:e6:b1:3c:6d:1a:52:cf:
03:fd:32:af:6d:99:ee:3e:3c:22:13:0b:76:c3:ed:
a0:4c:81:c4:04:e8:18:e7:23:51:a3:8f:19:30:55:
13:e1:7a:53:e4:2f:d8:0e:58:26:a6:5c:04:5b:17:
ce:e3:95:fa:3f:84:45:0d:3e:1c:1f:9d:76:63:2a:
44:f1:9b:c5:eb:e7:af:df:69:5f:8d:53:8a:db:04:
f9:67:7b:3e:3e:66:ca:fb:43:cf:5f:1e:04:22:97:
d1:f0:24:0c:29:5b:f4:60:6e:44:c0:70:e0:be:27:
a0:e7:44:ae:34:05:6c:1d:50:1e:75:32:4a:2c:3d:
87:e5:49:01:47:0f:e6:7d:ab:67:df:41:44:ca:d2:
b2:9b:89:7f:7f:51:12:ca:29:a4:55:55:7a:ad:74:
e0:99:6f:d0:ee:61:63:49:b0:8c:d0:be:6c:81:f8:
c7:01:53:5a:d1:c1:56:13:a2:c3:8f:03:ea:65:29:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:62:6B:64:3D:34:7A:6D:FE:8E:94:EA:36:70:16:A2:0B:D1:8C:AA
X509v3 Authority Key Identifier:
keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:70:f8:17:64:26:cc:34:ba:e7:8d:66:2b:5e:6a:06:b6:
d1:25:3d:a1:79:da:3b:51:83:84:ba:28:da:af:ba:9c:2b:99:
4a:63:d7:75:0e:af:1e:3d:63:8b:29:de:10:9f:e6:c1:9d:95:
f9:c2:01:c8:f2:ae:31:79:15:f5:48:4c:59:b2:90:06:29:37:
b2:74:f8:2e:a7:be:d2:22:85:da:61:a9:78:b7:04:0c:fb:ee:
cd:9e:6a:6a:7e:0a:da:c0:18:ae:d6:68:32:30:7e:b8:8d:e3:
e7:66:47:4f:91:8f:44:40:e5:c3:d0:21:52:a6:d5:e9:94:61:
cb:9a:c5:44:12:b2:a8:9e:4f:87:8e:6f:03:e3:c2:cf:6b:39:
04:39:fc:ee:9d:4b:45:00:84:29:10:5f:dd:33:45:19:2d:7c:
a4:65:98:48:b8:7f:56:4e:88:51:46:f8:7d:51:d4:05:37:92:
08:f4:9b:ba:bc:4c:5d:dd:07:48:ab:dd:4e:c2:8f:59:2d:c8:
30:7d:7a:5b:a5:e6:54:f0:1b:5e:15:07:bc:b8:ae:a4:e7:0b:
c5:ed:20:93:dc:85:b1:7d:f1:66:d0:e2:00:4b:72:56:e6:f9:
de:2f:88:50:20:03:1d:3f:9c:90:a7:c1:aa:bf:82:39:9f:7d:
19:04:fe:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:05:46 2026 by rpki-client