
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json)
Hash identifier: 2PVmf6QHGvnPEmkUasdCWh3V26fFRi/mg6edE8c7WiE=
Subject key identifier: 2A:1A:AD:64:B5:7C:8E:98:73:F7:66:97:93:12:B0:47:DE:29:C3:AB
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
Manifest number: 02CD
Signing time: Wed 25 Mar 2026 01:02:21 +0000
Manifest this update: Wed 25 Mar 2026 01:02:21 +0000
Manifest next update: Wed 01 Apr 2026 01:02:21 +0000
Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: +yPM66+PUgWN/pdMK/p1+Nzju1zgGyfsk3K/HVHHtec=)
2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: //55R4E9ZpIhb2zuQkkd7gmHW9uked3VnwqoLyMzgJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Validity
Not Before: Mar 25 01:02:21 2026 GMT
Not After : Apr 1 01:02:21 2026 GMT
Subject: CN=69c3341d-ef14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:57:50:a0:d7:b6:9a:18:fc:68:3f:89:c5:
b8:da:f0:d7:05:5a:d8:26:0b:59:4e:82:9b:00:8f:
25:08:e3:8e:19:04:8b:26:35:c0:d4:22:b5:34:ac:
9e:b0:36:5d:e0:9f:b2:55:5b:c1:41:1c:15:6f:9a:
d5:ca:96:81:ea:de:13:72:b3:fd:7f:dc:19:e3:96:
72:c8:19:69:ad:84:0f:41:b7:d4:93:e7:e7:6f:ef:
01:7c:a6:4c:9d:ae:52:6f:a5:a5:8e:f0:4d:eb:44:
23:a0:27:6a:0a:c5:57:d4:18:26:37:03:5c:59:f9:
37:10:c6:64:43:7d:d4:7f:c7:10:e0:69:cd:7c:f5:
88:31:86:77:45:d3:1b:92:3d:04:a0:b2:07:f1:8f:
30:51:ca:55:0b:ed:a3:e4:64:94:f1:5f:13:1e:2c:
a3:7f:3b:84:0c:6c:92:f6:10:7c:52:ee:49:cb:bc:
2e:05:a7:74:68:5c:e4:f9:34:72:23:2d:fd:b8:1a:
e9:ce:be:ca:47:1a:4d:e7:27:54:3d:19:1d:c8:a6:
9d:d1:28:7b:7a:4a:c3:8f:72:60:f4:66:55:a8:55:
4f:c4:c5:f2:82:d0:18:b0:02:1e:e0:5e:98:a5:78:
d9:2a:7c:03:f7:da:47:9f:f7:04:2c:03:af:19:4f:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1A:AD:64:B5:7C:8E:98:73:F7:66:97:93:12:B0:47:DE:29:C3:AB
X509v3 Authority Key Identifier:
keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:7f:ee:c0:c6:4c:98:b1:05:eb:db:1b:fc:fe:8b:a6:c4:1f:
8d:85:82:11:ab:05:66:9d:ea:c4:67:fb:7d:95:ed:af:27:3f:
68:04:9d:fa:dd:42:36:eb:db:19:b9:d6:ad:ef:42:f5:98:f6:
33:70:1f:ca:20:d6:a1:d6:ee:00:f1:8c:b8:8e:a2:1c:eb:9d:
3d:24:8c:fa:e4:fb:9e:13:03:21:ed:64:d7:28:d6:16:99:86:
be:2c:41:dd:dc:bb:92:81:c8:29:2a:6e:14:87:ca:b2:8f:9d:
90:c1:b0:3a:81:77:68:5a:71:28:7a:c7:46:7b:f8:a8:ac:8d:
7d:f7:06:f7:89:44:ee:48:03:19:ab:83:64:50:6b:24:9d:e1:
9f:92:65:89:a1:87:44:43:63:a3:68:bf:b6:95:8d:87:07:95:
50:4b:64:6e:c5:f9:27:fd:13:cc:2b:44:d1:0c:e6:39:32:d8:
66:d8:ae:1b:ea:a6:8e:0e:18:c0:b4:5a:fb:c3:21:10:a6:8a:
03:8c:ba:ee:94:27:f2:e5:d5:f7:fc:11:30:fd:d0:cb:eb:40:
9b:a3:66:9b:62:73:95:e4:0c:4f:b6:f0:3f:bf:e2:1d:ea:25:
22:0c:35:b2:cd:d2:bf:2e:f3:08:51:10:1e:05:62:96:78:a8:
a6:9d:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:54 2026 by rpki-client