
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File: u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier: Tbn3m0XTlxEQTjleqm4C05Q/lVZG7BpDd79laVxQnPw=
Subject key identifier: F6:60:CF:08:21:37:F5:6A:D8:85:6F:F3:2F:77:70:BE:B7:EB:F0:39
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer: /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number: 026A
Signing time: Wed 25 Mar 2026 01:29:13 +0000
Manifest this update: Wed 25 Mar 2026 01:29:13 +0000
Manifest next update: Wed 01 Apr 2026 01:29:13 +0000
Files and hashes: 1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: aPfN60INZ5gCFD9IQM1zN402Vlr8rcnp42BYpC5VpVY=)
2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: 7+Gv58zskCYKY8U8/3pkQdLUJ38W9+Ov4Vj6lTNdiOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Validity
Not Before: Mar 25 01:29:13 2026 GMT
Not After : Apr 1 01:29:13 2026 GMT
Subject: CN=69c33a69-93c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:c5:f3:ea:97:a8:6d:6f:69:24:7c:e2:66:
88:95:a9:e7:e4:a4:9e:77:dc:58:8b:60:e5:cf:b6:
e2:a8:72:cd:de:45:a6:ef:72:34:ea:64:e6:fb:3d:
8d:27:62:55:ab:56:03:f3:95:aa:7b:ab:d2:75:58:
68:e8:a6:cb:65:3f:c4:ad:9c:b0:8d:85:5b:ef:0f:
22:27:13:5e:12:c0:b6:d7:c6:39:98:9b:ac:98:70:
4e:cd:8d:1d:0c:20:08:ba:d6:00:6e:b0:6c:54:d3:
65:7b:16:5b:37:00:1b:99:a2:7e:e6:bc:5c:69:b1:
fd:4a:94:18:33:51:27:19:9e:61:5a:ca:8b:08:37:
df:72:14:69:da:59:dd:51:da:9a:e7:9f:41:21:7a:
0e:c8:b5:4a:ee:b5:57:48:22:14:70:22:42:0b:e3:
03:e3:03:74:9b:16:43:a5:9d:f8:fe:3a:8b:7c:b1:
a3:31:b5:e7:0b:7c:32:bd:5b:43:0a:df:50:25:f8:
ff:42:7d:5f:fe:e0:8d:75:a5:3b:7b:0b:11:44:da:
67:b0:17:b0:cf:b7:1a:54:82:fe:fc:e7:00:26:d8:
62:b1:c4:db:0e:f5:91:4f:2f:11:af:4f:b6:98:24:
b6:d8:54:07:98:d6:40:a8:b2:eb:ed:2c:d0:96:9f:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:CF:08:21:37:F5:6A:D8:85:6F:F3:2F:77:70:BE:B7:EB:F0:39
X509v3 Authority Key Identifier:
keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ad:82:e2:c2:b6:2a:e1:c5:0d:e5:92:17:8b:de:99:07:4a:
02:05:63:05:5e:9a:d4:6c:2f:c9:03:8a:02:5b:7c:31:13:3e:
cf:2d:75:52:e2:6c:0a:cd:89:94:b3:e8:17:f8:09:bc:73:42:
3a:ba:c4:ea:57:77:ed:c2:cc:aa:cb:f7:a5:1a:b4:83:fa:2b:
b6:c6:b5:71:fc:2d:26:0f:ac:90:70:2c:30:ac:98:b8:fe:73:
f3:40:f7:19:16:a9:5f:1d:1b:16:25:70:15:4e:7e:cf:9d:b4:
19:fb:5e:aa:58:cc:d0:06:e8:03:e2:da:e7:7c:f1:65:86:bf:
f1:f6:c9:3a:a5:07:e3:26:dc:cf:38:1d:50:ec:a8:63:ec:b5:
ed:be:8c:99:6b:56:07:ec:93:58:72:bb:4e:1b:8a:6b:ab:0a:
cb:48:f1:c3:d7:fe:da:96:06:ae:cc:dd:7f:28:0b:0b:15:6d:
78:1e:ad:df:4b:da:1a:01:86:dd:da:4a:b9:9f:c3:35:0c:be:
18:99:64:29:86:fb:ff:b2:14:61:6a:42:d5:2b:89:18:e0:de:
a6:d2:6c:bd:9a:6c:8f:ad:15:04:09:d0:3e:8b:ea:62:77:7a:
d5:81:70:c2:4b:c5:95:fc:f1:ea:e3:e9:29:8f:cd:39:12:4e:
10:d0:99:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFCMDAxMTAvBgNVBAUTKEJCRDJFOUQ5MTNDNjQ1QzhBMDUxOTI0NzRDRkZBODk2
QkI5QTRFQTYwHhcNMjYwMzI1MDEyOTEzWhcNMjYwNDAxMDEyOTEzWjAYMRYwFAYD
VQQDEw02OWMzM2E2OS05M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkbjF8+qXqG1vaSR84maIlann5KSed9xYi2Dlz7biqHLN3kWm73I06mTm+z2N
J2JVq1YD85Wqe6vSdVho6KbLZT/ErZywjYVb7w8iJxNeEsC218Y5mJusmHBOzY0d
DCAIutYAbrBsVNNlexZbNwAbmaJ+5rxcabH9SpQYM1EnGZ5hWsqLCDffchRp2lnd
Udqa559BIXoOyLVK7rVXSCIUcCJCC+MD4wN0mxZDpZ34/jqLfLGjMbXnC3wyvVtD
Ct9QJfj/Qn1f/uCNdaU7ewsRRNpnsBewz7caVIL+/OcAJthiscTbDvWRTy8Rr0+2
mCS22FQHmNZAqLLr7SzQlp9vGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZgzwgh
N/Vq2IVv8y93cL636/A5MB8GA1UdIwQYMBaAFLvS6dkTxkXIoFGSR0z/qJa7mk6m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUIwMC8xM0NBNTE5Mjc1
RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1JjaWdVWkpIVFAtb2xydWFU
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3U5THAyUlBHUmNpZ1VaSkhUUC1vbHJ1YVRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUIwMC8xM0NBNTE5Mjc1RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1Jj
aWdVWkpIVFAtb2xydWFUcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoq2C4sK2KuHFDeWSF4vemQdKAgVjBV6a1GwvyQOKAlt8MRM+zy11UuJsCs2J
lLPoF/gJvHNCOrrE6ld37cLMqsv3pRq0g/ortsa1cfwtJg+skHAsMKyYuP5z80D3
GRapXx0bFiVwFU5+z520GfteqljM0AboA+La53zxZYa/8fbJOqUH4ybczzgdUOyo
Y+y17b6MmWtWB+yTWHK7ThuKa6sKy0jxw9f+2pYGrszdfygLCxVteB6t30vaGgGG
3dpKuZ/DNQy+GJlkKYb7/7IUYWpC1SuJGODeptJsvZpsj60VBAnQPovqYnd61YFw
wkvFlfzx6uPpKY/NORJOENCZXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:45 2026 by rpki-client