
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File: mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier: u+PkDREzavU+ytkKuRV3Lj8EPk0lyPWRh9tid/fxs8I=
Subject key identifier: FB:67:07:61:12:2E:30:B9:39:63:5D:F4:C7:D8:BB:64:14:EF:B1:D3
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial: 0352
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number: 034B
Signing time: Wed 25 Mar 2026 00:36:45 +0000
Manifest this update: Wed 25 Mar 2026 00:36:44 +0000
Manifest next update: Wed 01 Apr 2026 00:36:44 +0000
Files and hashes: 1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: X5toTX3DszCy6mX+7l109M7myUm5uem7HGihuU8ZduQ=)
2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: +35QxxMyIjCMr8iV27/aV6sabG1DfHlXwGU/67Kw18Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Validity
Not Before: Mar 25 00:36:44 2026 GMT
Not After : Apr 1 00:36:44 2026 GMT
Subject: CN=69c32e1d-2add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:71:b2:5f:65:95:c1:88:b6:ef:3f:7d:68:
0f:3c:d1:e1:d9:3f:9a:ef:36:c2:ea:d7:c0:35:dc:
38:20:04:f0:56:38:10:49:db:2f:2b:69:fc:38:5c:
b1:ae:b3:fe:11:36:9f:43:1a:fb:5a:6d:0c:8a:1e:
3a:1d:f0:9c:5d:1d:91:8e:23:01:64:67:93:a3:fc:
40:8d:55:4b:8c:13:09:f8:1c:bf:3d:d9:ee:02:64:
88:6e:5b:2f:55:bd:e8:9f:de:6c:84:37:7a:f0:61:
88:32:f2:66:28:bd:0a:5d:8e:bf:53:d6:ff:79:ce:
f8:92:4c:2f:6b:7b:cf:3d:fc:65:69:cf:0e:3a:4c:
c8:9b:fa:17:1a:89:24:bc:de:4e:75:b0:7e:27:32:
c0:58:6a:23:57:be:60:fa:41:d3:61:5e:92:8f:32:
49:6b:9d:35:5b:14:1f:98:d4:b8:72:f8:67:aa:79:
b0:c1:33:94:89:a4:c5:b0:68:f8:b8:1a:79:39:d8:
ed:22:8f:3c:f4:d8:6a:2a:a8:94:ce:e0:27:63:27:
e2:55:8e:1c:dd:6c:ae:17:00:76:d2:d2:85:df:18:
ed:46:8e:1e:17:d6:eb:bd:c8:e6:71:e6:be:ad:06:
c6:a7:da:b2:a4:83:57:26:c4:40:52:37:26:01:96:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:67:07:61:12:2E:30:B9:39:63:5D:F4:C7:D8:BB:64:14:EF:B1:D3
X509v3 Authority Key Identifier:
keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:67:b6:ef:b8:18:eb:ed:be:e2:a4:be:dc:8c:b3:6b:f3:46:
9b:c1:40:22:b9:cf:c0:de:d9:d0:e5:f5:ee:28:94:3e:a4:4f:
41:15:13:a8:b9:68:c1:a0:5e:72:8e:ca:d1:4c:63:75:7b:21:
07:d7:ab:d3:9e:44:b7:4e:a5:f6:7f:c4:b1:93:59:4a:17:a5:
89:77:7a:52:2b:61:57:1a:1f:47:10:92:71:ad:03:1f:26:12:
bf:19:8c:78:b3:c3:f7:25:e5:f3:0b:d2:3b:c1:0e:07:3a:9f:
87:27:23:dc:08:77:04:e9:af:17:49:4d:85:95:f6:b7:d4:6e:
ff:3b:ce:39:97:b2:c1:ca:cb:5f:cd:d2:f1:3c:48:2a:0a:c9:
87:0a:b0:55:c1:8e:46:2e:b0:24:55:0b:ed:86:3d:09:60:00:
ac:32:9a:33:3f:48:95:82:b7:73:d5:df:fd:8e:1d:d7:44:94:
c3:5b:45:39:d7:d0:81:92:98:2e:4e:45:75:40:49:bf:d7:16:
08:bf:45:22:9d:6e:32:4b:4b:59:c1:37:0c:ca:85:42:17:38:
c3:23:6e:c4:4a:85:cf:7b:1f:c7:c4:c7:cd:b1:a4:0f:95:81:
1c:b1:50:67:01:70:30:e9:cb:84:4f:9c:9a:f6:3a:12:a1:d0:
fa:ca:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:03:29 2026 by rpki-client