
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
File: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json)
Hash identifier: ax3k/kawgaFNETXRzMACZ+V44XRPd5+QciXQWNLZxfM=
Subject key identifier: 2D:E9:2F:D1:AE:CC:E3:22:1E:C0:6A:C7:9E:02:6D:2A:53:5A:79:72
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial: 0867
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
Manifest number: 083F
Signing time: Tue 24 Mar 2026 20:41:48 +0000
Manifest this update: Tue 24 Mar 2026 20:41:47 +0000
Manifest next update: Tue 31 Mar 2026 20:41:47 +0000
Files and hashes: 1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: nEKfmwEN+PFg7m0tBHparnwjRa1rKJ3eExEx/mz/tOE=)
2: E3BFC856DCB911F0A9D960E0496F56BC.roa (hash: hnYXXyG+HjpMZxqmpN5bsi+NSnbaTfeMqs5LW9a4ZFY=)
3: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: 1MVde0/1uHuiUovcFZ77TlqLfJ5SZhmH3WyAneTv/Ng=)
4: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: 6zTCHG3uP3cK2rw/2Eul1AW03DSAhrWGcY7OdFAvbQs=)
5: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: yhJxmZzQ2ZBaUh/TkISXu1owkmR7YDFhHEkIm62M8ls=)
6: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: /NNxt2PRGKi4jINC1uMA6kp3kzBSWqOUAHvR4Zmm09U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151 (0x867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Validity
Not Before: Mar 24 20:41:47 2026 GMT
Not After : Mar 31 20:41:47 2026 GMT
Subject: CN=69c2f70c-2a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:aa:8a:3e:0d:8c:e5:69:e2:27:40:91:3f:
25:06:9b:ca:dd:b1:29:6c:70:98:3f:85:a1:c3:cf:
0c:b1:ae:67:57:03:65:b7:73:d7:ce:02:86:22:74:
10:90:78:22:cc:6a:de:45:5b:da:36:37:01:95:54:
19:df:e0:f4:a0:fd:12:f8:0e:70:96:d6:2d:ae:32:
e9:81:9b:fd:52:36:a7:51:e9:05:ff:ff:2f:ba:51:
8f:be:83:32:2b:f0:5b:3d:f7:36:8b:10:ca:7e:61:
5a:b5:b3:c1:58:07:6b:12:e0:5e:12:f5:61:a1:23:
7e:b5:7e:30:bc:be:09:7a:13:98:1e:62:26:30:87:
26:7e:fa:1a:4b:8a:b0:aa:cd:1a:bb:44:d0:98:b6:
a8:57:c1:f9:70:6a:a5:84:ca:c6:44:ed:05:36:85:
db:6e:25:1b:12:0c:b0:2f:8d:64:58:11:e9:86:39:
fc:b0:e5:44:90:bc:8b:1d:a3:5f:77:78:73:03:cd:
36:15:ea:5c:37:df:e0:f5:09:e9:e5:35:cf:a9:f6:
aa:dd:64:eb:10:d4:b6:eb:b8:82:31:e5:c2:2d:20:
57:74:ca:5c:c5:d0:be:94:a4:0a:9e:9f:84:22:f8:
c2:25:ed:ad:49:15:4d:3f:40:38:d0:9a:e6:23:9b:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:2F:D1:AE:CC:E3:22:1E:C0:6A:C7:9E:02:6D:2A:53:5A:79:72
X509v3 Authority Key Identifier:
keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d2:c4:2e:6e:25:da:0b:23:5c:7f:84:e7:83:38:8a:6b:fd:
e2:90:af:af:41:41:8c:16:3b:0a:0b:3b:2c:f4:b0:12:2a:c7:
20:a5:b5:29:f3:30:2c:4e:aa:42:36:14:19:ec:21:3b:25:23:
e5:47:8d:6d:59:5a:5c:7e:70:ca:1e:3d:36:95:ef:4b:03:e3:
47:80:2d:49:fa:2d:10:85:4f:f4:9e:a9:48:06:9c:4b:87:fe:
02:cf:b3:3a:58:f7:b6:d0:c1:f3:ff:c6:ff:79:bb:41:f7:d1:
63:34:34:3a:7e:35:74:2a:23:38:37:9b:24:7f:ae:79:8f:24:
8a:eb:a0:3b:21:03:03:f4:ec:d5:df:92:a9:bc:6e:23:35:98:
7c:dd:a4:a2:18:24:6e:6f:67:ab:fb:e6:35:a7:6a:68:ef:3e:
96:d6:74:35:30:12:de:d1:c5:37:6e:a8:75:50:ef:c6:00:3f:
1c:18:cb:cf:39:55:0f:20:f3:a7:15:e2:1b:62:7d:ca:e4:e5:
07:b6:93:fb:96:b0:cc:d6:81:e2:e1:79:4b:8b:f6:10:af:aa:
7f:56:57:06:e1:30:9c:45:95:f8:c6:27:03:1d:30:64:a9:e2:
2f:79:18:0e:0f:72:5e:8f:c7:00:3e:e4:5c:85:aa:39:a5:05:
e9:f0:27:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:29 2026 by rpki-client