
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
File: N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json)
Hash identifier: QLpRq4ysi0xltj/99bfIN9Sit62huM0+jlXdRjDU6NI=
Subject key identifier: B4:1C:80:5D:28:24:CF:CB:99:73:B4:53:DC:B0:D2:2D:BC:CC:5F:A4
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial: 05E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
Manifest number: 05CE
Signing time: Tue 24 Mar 2026 22:46:46 +0000
Manifest this update: Tue 24 Mar 2026 22:46:46 +0000
Manifest next update: Tue 31 Mar 2026 22:46:46 +0000
Files and hashes: 1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: bXo+EQvgwNcW0+Aulnsr0RZ2ruQONknXjZzsqv7je44=)
2: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: FDITcMkvJSfaNZn7WhepfOtYRd5cHo2QRoPeo3DYbKE=)
3: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: Ja29sSxE8KanVMjVphZgBthiKCRYqnTpDRjm76mlvD4=)
4: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: XYFuQnxpl7FqxfYyxe0uvP0uuoI6+uy9BrmnGH143F0=)
5: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: 6BeZ+T2YK4xcHE67iF1LQq1UDXWYxRVhMGtHVY4KZKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1512 (0x5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Validity
Not Before: Mar 24 22:46:46 2026 GMT
Not After : Mar 31 22:46:46 2026 GMT
Subject: CN=69c31456-c8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:70:77:2f:fb:27:7d:82:e5:19:93:20:21:
ec:5a:44:a9:c2:a5:8f:9c:bb:1b:47:b5:b8:9c:f4:
d6:4c:2b:98:5d:6c:4a:80:ec:f1:f7:b0:b3:dc:a5:
8a:77:dc:39:6d:32:d3:ff:0a:f3:62:4f:3a:cc:f0:
81:ea:8c:62:b9:4a:74:df:a4:c3:58:80:c2:25:8e:
25:db:63:a5:4c:90:ef:f5:be:ee:1d:23:d5:d5:1e:
e8:93:73:e2:12:6c:82:b8:08:49:b8:2e:8e:75:33:
49:6e:d7:23:ab:91:9a:bd:c5:bf:0c:13:2e:1e:37:
f0:53:63:72:22:e6:ad:5c:78:d9:03:38:b1:76:49:
98:c3:d7:de:64:84:c7:16:d3:68:ce:f2:ef:8d:17:
aa:c9:51:68:d7:fd:97:ef:eb:b1:32:f2:04:d7:24:
11:54:14:34:af:97:d3:13:cf:47:e2:84:d8:9f:e9:
b6:d2:40:76:b9:22:89:e5:2c:59:ff:56:bd:93:b6:
d2:44:ec:ac:0d:10:df:51:0e:0e:eb:06:6f:74:17:
54:0f:f7:0b:1c:dc:c6:f0:42:be:f8:77:2f:44:df:
c8:2d:a1:f1:eb:54:19:39:89:f2:f0:7c:c6:d6:f9:
b3:4a:e8:3b:0a:ba:39:0a:01:a0:98:ac:8b:8b:a2:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:80:5D:28:24:CF:CB:99:73:B4:53:DC:B0:D2:2D:BC:CC:5F:A4
X509v3 Authority Key Identifier:
keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e8:78:73:32:56:65:88:82:34:c9:0f:bc:a9:5d:16:29:00:
d9:3a:f2:fa:1d:ba:be:6b:82:1b:0c:5d:69:0b:f2:2b:e3:2d:
d3:c6:d1:93:0b:26:d1:0d:d3:11:2d:4d:81:93:9c:d5:4e:a1:
8c:f8:b3:4a:42:ee:d3:14:04:d1:9d:7c:d9:07:70:6f:b9:dc:
6d:1f:f0:d4:7d:6c:de:d5:ab:f7:08:77:39:ea:5a:e1:4f:27:
e7:7b:9e:31:f7:a7:2b:8d:92:ad:48:ae:a7:dd:23:d2:40:98:
3f:40:7d:68:96:c4:c8:85:c3:28:0a:18:55:24:51:85:3d:cf:
e4:56:f2:e5:2c:2d:4e:b7:cb:94:5c:55:a1:ea:54:cb:86:d7:
24:1f:5f:ea:f5:f4:76:92:56:50:1f:b2:28:50:8e:84:2b:98:
10:67:37:6d:e6:b7:1b:6f:71:f1:6b:64:09:7e:d7:72:ca:44:
2c:6e:fa:41:5d:12:9b:f2:b7:77:01:12:bf:6d:4c:92:2a:e1:
aa:f0:6a:84:41:0b:21:33:8f:9e:34:33:50:35:12:d0:47:47:
07:2e:9e:b0:78:60:d8:09:39:ec:cd:7c:91:c8:d1:38:2b:2b:
60:1a:fe:47:37:1b:ff:e4:08:7f:f9:33:8b:08:2d:05:a2:b0:
9c:7c:d6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:23 2026 by rpki-client