
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
File: i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft (raw, json)
Hash identifier: hD1QyCZBjCX9wP/+92ebvjPklWuQJvLY0CUIf+lTmVQ=
Subject key identifier: 64:71:87:E3:1F:85:39:1B:BC:C3:B2:74:FF:D1:58:63:01:B0:AA:F5
Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C
Certificate issuer: /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
Manifest number: 01A0
Signing time: Wed 25 Mar 2026 03:27:57 +0000
Manifest this update: Wed 25 Mar 2026 03:27:57 +0000
Manifest next update: Wed 01 Apr 2026 03:27:57 +0000
Files and hashes: 1: i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl (hash: knNUptB7dDr+WSP50u59UCavcZRejM1TuCfZn1dzH1E=)
2: 2601A296AE1011EE92B7161BC4F9AE02.roa (hash: PUqNEsinpJETSBqgmrd5rPyIixPliezLoawnyww3fDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl
rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116E68, serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
Validity
Not Before: Mar 25 03:27:57 2026 GMT
Not After : Apr 1 03:27:57 2026 GMT
Subject: CN=69c3563d-5a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:47:5c:82:7d:55:b1:03:04:36:79:94:59:16:
31:2d:38:4e:e4:fd:dc:f6:bb:51:93:f2:8f:e8:f4:
94:3e:0d:e2:d6:40:ab:a8:94:34:04:1e:14:a9:a9:
f0:55:a3:51:12:1e:ea:7c:67:99:6e:9f:4f:18:91:
84:94:fc:5a:5b:42:d0:9d:a9:0d:15:1d:84:0f:87:
8f:e4:d4:d7:18:e1:47:51:13:47:5f:a7:5b:b8:1d:
d2:e6:1a:c8:cc:64:6d:bb:0b:c3:e6:af:ba:ae:3f:
59:4f:3b:5f:77:c6:7d:6e:26:7a:e3:b3:4a:ff:22:
af:a9:a4:66:1e:dd:d6:c0:a0:b5:1f:69:db:de:db:
e9:63:e3:de:45:ae:c6:fb:f9:f7:66:2c:f5:93:8c:
4d:8a:8b:1e:ed:db:bb:1d:e7:2a:00:f8:e1:83:37:
21:f2:9a:fd:f0:58:68:60:70:75:19:82:fb:7b:12:
3d:6f:29:d3:9f:7b:57:0b:fb:de:0c:48:87:15:62:
81:ff:d2:44:a1:3f:16:54:f3:31:32:36:e9:a4:7f:
a4:3d:a3:51:f0:c9:c3:44:7d:a1:35:82:e1:5e:9b:
41:44:82:06:2f:1d:1b:a8:19:f3:97:11:a3:3f:91:
42:27:00:23:f5:ae:b9:a8:08:49:4c:ef:3f:a0:3b:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:87:E3:1F:85:39:1B:BC:C3:B2:74:FF:D1:58:63:01:B0:AA:F5
X509v3 Authority Key Identifier:
keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:d1:ff:f0:37:95:7d:e5:38:59:85:44:4b:30:2e:69:f1:e8:
4d:08:66:1f:f7:01:d2:3f:de:0d:ac:03:8f:bc:9d:42:a0:c3:
97:f5:80:15:65:47:b9:06:83:7e:6e:81:ea:ff:93:6d:ff:b0:
ee:c3:a7:8d:74:1c:98:86:57:8c:89:b5:f3:c3:27:d5:00:fb:
22:ac:86:d7:b1:cb:43:7a:c0:f7:9c:45:66:23:09:f0:e3:ae:
ad:4a:54:be:ab:ed:2a:75:49:87:da:55:c7:c6:bb:37:b8:15:
40:a7:68:7c:21:6c:8c:e6:75:76:f6:c1:3c:ac:b3:f8:29:23:
2f:5b:f8:f6:59:9c:e6:53:2b:13:0d:9a:92:e4:11:a8:42:51:
bf:32:03:a8:03:45:88:79:14:68:7f:e6:60:48:0c:2d:87:04:
fe:de:7d:99:d0:59:47:7d:dc:a6:d4:2e:0a:47:2d:c6:64:92:
b7:f8:7b:41:37:74:e1:6c:dd:67:9e:2f:71:48:ea:fd:d2:39:
c7:1d:38:a6:96:c7:4d:8c:35:d8:d5:78:08:06:7f:dd:e5:29:
ce:ee:ab:dc:df:c2:6a:a6:e9:85:31:4c:28:c6:bd:7e:6c:76:
2c:07:59:f8:96:dd:35:e5:95:93:5c:b4:ed:59:0d:5c:69:dd:
0c:df:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:12 2026 by rpki-client