
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json)
Hash identifier: fLLLB0RVjkiuiTWZZtghttFgN6h99heCwB7yN/p4KPU=
Subject key identifier: 76:58:1B:FF:6C:B7:9D:DF:2A:F5:0E:C7:21:65:F2:45:71:C3:ED:03
Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
Manifest number: A6
Signing time: Wed 25 Mar 2026 06:31:12 +0000
Manifest this update: Wed 25 Mar 2026 06:31:12 +0000
Manifest next update: Wed 01 Apr 2026 06:31:12 +0000
Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: jqMdsINUGjYkD5jCOWYYzzPSzFNa6pmEOD7H4oDYTcU=)
2: F563CE94E3DB11F0B70B396D576F56BC.roa (hash: 3H3far6TRs8sjzmCOZTOxwcy+RqKtlZ38lP4KPbvvIg=)
3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: srVyU53/knaGoLFgZUhr91Ugz+ECo7CZ9ZHflYwFi94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Validity
Not Before: Mar 25 06:31:12 2026 GMT
Not After : Apr 1 06:31:12 2026 GMT
Subject: CN=69c38130-83e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:99:65:32:cb:97:b8:ea:24:0a:0a:37:21:
9d:fa:8d:c6:d8:18:a1:48:23:4c:b2:b1:4f:97:6e:
24:ee:39:66:b9:61:2f:c3:0d:b6:e5:b4:23:10:93:
00:e6:55:c5:52:cf:a1:1d:6d:92:12:ee:a9:53:01:
b3:f4:7a:16:9a:7a:4c:b0:e3:6d:12:34:77:90:97:
6a:78:ae:b0:00:c1:b4:44:67:b1:0e:8f:5e:c2:6f:
43:3d:9a:89:c0:e1:7b:74:59:f3:0e:26:12:30:14:
b0:5c:eb:a4:0f:44:10:c2:ad:18:65:ec:74:73:92:
ef:82:8a:b2:9f:94:bd:c8:e9:e9:d0:14:d7:f4:fb:
61:0c:04:a7:5c:66:e4:8e:8c:2a:d2:b0:d1:7a:8a:
f9:fb:1d:b5:e3:f9:5b:8a:11:13:91:ae:59:ad:40:
30:65:d0:a8:8e:8b:13:fa:da:0c:bb:a4:03:2e:a2:
fd:94:33:9d:44:97:ad:e6:89:c5:40:ad:fe:05:43:
58:c0:39:16:b3:af:cf:4b:46:5c:9d:94:3d:7a:5f:
fc:d0:7b:8b:1a:8b:e1:c4:8d:28:d2:e5:2e:59:45:
5f:88:ae:e7:e4:58:8f:84:f8:ba:aa:07:1b:f5:56:
b3:54:d6:37:5f:31:08:ec:40:d8:fd:7d:45:79:55:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:58:1B:FF:6C:B7:9D:DF:2A:F5:0E:C7:21:65:F2:45:71:C3:ED:03
X509v3 Authority Key Identifier:
keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:98:88:85:a8:db:3e:13:39:1f:48:58:92:c6:bd:b7:d8:96:
5c:4b:14:ad:20:25:fd:b4:10:b4:83:f0:40:c3:64:cb:e0:84:
3c:15:2a:98:71:77:01:94:ac:56:8b:1d:41:2a:d7:c3:da:cc:
8e:2c:6f:c1:b8:94:df:bd:32:79:cf:44:2d:bc:e6:9f:65:6e:
9f:62:75:75:80:2c:2f:48:dc:11:44:ae:36:d9:25:dd:f2:3e:
58:9d:31:76:ed:ad:56:20:cd:39:b0:71:41:ee:27:5c:6c:c6:
53:48:12:35:e7:b2:0c:da:70:63:18:1b:38:48:15:45:3b:43:
bf:7b:bb:33:fd:e1:ce:b5:2f:3f:bb:7d:01:8f:41:5d:59:77:
94:8b:98:c5:3d:e6:bf:fc:56:d4:c4:43:e8:ab:81:e2:35:82:
de:9f:ca:2f:8e:d4:2e:8f:e0:fe:36:f9:a1:de:75:06:14:2b:
a8:8a:8f:72:03:e3:42:7c:75:ba:f6:34:19:89:22:d6:ac:82:
b7:fa:dd:42:6d:72:76:d9:26:fb:3e:6e:ae:f3:4f:9b:68:5e:
e1:08:f8:12:80:bc:0f:6a:48:a4:0c:c5:6b:4e:72:4a:f5:2d:
c9:27:d2:d5:70:d8:53:dd:f4:0e:92:3f:2f:8d:04:0e:18:ac:
4c:0a:47:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNCQjAxMTAvBgNVBAUTKDQ1QjE4RTIwOUVDRkREQTVDRUQ3OENGOUQ5ODEwRDYx
MUU2RDQxMjQwHhcNMjYwMzI1MDYzMTEyWhcNMjYwNDAxMDYzMTEyWjAYMRYwFAYD
VQQDEw02OWMzODEzMC04M2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxASZZTLLl7jqJAoKNyGd+o3G2BihSCNMsrFPl24k7jlmuWEvww225bQjEJMA
5lXFUs+hHW2SEu6pUwGz9HoWmnpMsONtEjR3kJdqeK6wAMG0RGexDo9ewm9DPZqJ
wOF7dFnzDiYSMBSwXOukD0QQwq0YZex0c5Lvgoqyn5S9yOnp0BTX9PthDASnXGbk
jowq0rDReor5+x214/lbihETka5ZrUAwZdCojosT+toMu6QDLqL9lDOdRJet5onF
QK3+BUNYwDkWs6/PS0ZcnZQ9el/80HuLGovhxI0o0uUuWUVfiK7n5FiPhPi6qgcb
9VazVNY3XzEI7EDY/X1FeVUezwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHZYG/9s
t53fKvUOxyFl8kVxw+0DMB8GA1UdIwQYMBaAFEWxjiCez92lzteM+dmBDWEebUEk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JCMC85RkZEQUI3NjMy
M0ExMUYwQkY5RTFEMzZDNEY5QUUwMi9SYkdPSUo3UDNhWE8xNHo1MllFTllSNXRR
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0JCMC85RkZEQUI3NjMyM0ExMUYwQkY5RTFEMzZDNEY5QUUwMi9SYkdPSUo3UDNh
WE8xNHo1MllFTllSNXRRU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR5iIhajbPhM5H0hYksa9t9iWXEsUrSAl/bQQtIPwQMNky+CEPBUqmHF3AZSs
VosdQSrXw9rMjixvwbiU370yec9ELbzmn2Vun2J1dYAsL0jcEUSuNtkl3fI+WJ0x
du2tViDNObBxQe4nXGzGU0gSNeeyDNpwYxgbOEgVRTtDv3u7M/3hzrUvP7t9AY9B
XVl3lIuYxT3mv/xW1MRD6KuB4jWC3p/KL47ULo/g/jb5od51BhQrqIqPcgPjQnx1
uvY0GYki1qyCt/rdQm1ydtkm+z5urvNPm2he4Qj4EoC8D2pIpAzFa05ySvUtySfS
1XDYU930DpI/L40EDhisTApHMw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:43 2026 by rpki-client