
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
File: 444NefP9KSMew_PjAp05P0MnfLM.mft (raw, json)
Hash identifier: QqBM09PqXpvIyTNApG0wGZtebyicC8QzKvzZUcAZGJ4=
Subject key identifier: 98:75:D7:A3:DC:1B:62:C0:FE:F9:3B:31:11:07:40:43:90:49:9E:C5
Authority key identifier: E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3
Certificate issuer: /CN=A9128298/serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3
Certificate serial: 0682
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
Manifest number: 067E
Signing time: Tue 24 Mar 2026 22:12:15 +0000
Manifest this update: Tue 24 Mar 2026 22:12:15 +0000
Manifest next update: Tue 31 Mar 2026 22:12:15 +0000
Files and hashes: 1: 444NefP9KSMew_PjAp05P0MnfLM.crl (hash: h9KhmLs2KMAD5PQ2TT6AUwt0Kf1FDsuzmns65jpVmlw=)
2: 832F7D72B20E11EBB73B4E2FC4F9AE02.roa (hash: ty8CivLD0jPzuEhlcoW5AlOudebXWw4EwNKxY6PCl9U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl
rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128298, serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3
Validity
Not Before: Mar 24 22:12:15 2026 GMT
Not After : Mar 31 22:12:15 2026 GMT
Subject: CN=69c30c3f-6b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:d0:64:4e:bf:fd:38:4d:00:f0:16:90:30:
04:f4:f9:4f:59:b2:3b:df:bb:63:26:e8:3b:89:94:
34:3f:51:2f:0b:3c:e7:87:89:94:af:d2:c9:cb:92:
63:6a:a3:f2:26:d9:78:57:3d:5e:be:05:fc:e9:10:
6f:0f:81:00:c7:35:f8:f1:4b:a5:cf:21:b6:9d:71:
d8:52:13:1d:53:9b:a5:ea:55:b8:1b:29:c4:88:be:
2c:59:54:ef:c2:22:65:a9:8f:a2:3d:9b:59:13:d0:
01:c4:bd:b2:34:ba:fc:b2:1d:26:95:ee:91:b7:ed:
b1:d7:48:08:2e:ce:0a:b9:d9:16:b2:ba:eb:dc:87:
5e:68:d7:2b:e1:58:89:6b:5a:2f:b0:50:2e:a4:d6:
28:b0:13:a0:37:a9:9f:34:81:4d:54:9e:9e:b5:c4:
1b:47:79:14:3f:19:ca:87:07:00:8c:1e:7a:35:48:
57:90:9b:a6:61:dc:ef:5f:cc:4e:77:e1:b1:10:d1:
35:88:25:f5:5d:a3:57:ce:01:78:fb:8e:b7:6c:00:
d3:f1:78:b0:c1:53:f3:73:98:f0:94:6b:ff:a0:da:
ec:c4:25:4b:6e:33:38:5b:88:33:d4:8c:c5:50:6b:
1b:26:7d:2c:66:31:ce:af:60:fc:87:97:f2:9f:7c:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:75:D7:A3:DC:1B:62:C0:FE:F9:3B:31:11:07:40:43:90:49:9E:C5
X509v3 Authority Key Identifier:
keyid:E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:09:ec:5d:80:30:fc:1b:36:05:33:a9:73:3d:d3:90:39:e4:
a8:98:1c:01:d9:15:ba:d4:0a:ce:82:5e:bd:56:fa:9f:69:af:
97:f0:78:20:6e:ea:84:9a:0a:78:a9:58:87:26:38:f0:c1:a1:
76:29:b9:8b:2a:61:57:69:65:c1:1d:1b:c2:8c:dd:c0:05:58:
c5:d5:7e:ec:ac:5b:be:0e:8d:1c:71:a0:2e:7d:64:6f:ca:a1:
d1:74:0d:e1:34:a6:80:de:ca:7c:03:e3:55:16:15:3c:8b:92:
f3:ed:57:ad:9b:57:40:93:d9:d3:4e:28:8d:93:8a:33:57:6e:
18:41:38:6d:34:79:93:33:46:6e:14:7d:11:35:4a:09:3e:42:
70:85:e9:81:ef:4b:b2:23:1d:ff:03:2b:83:04:a5:7b:bf:9d:
b8:3f:cb:ec:bf:55:5d:b0:a1:68:1f:f5:34:b6:34:a1:cb:00:
ce:1e:a9:72:54:42:67:3e:7b:ae:79:2e:81:dd:56:72:a1:58:
35:3c:24:25:97:94:97:dc:3e:7a:70:54:48:f8:2a:6b:c6:f2:
de:b3:0c:a0:c7:d4:96:e5:b4:1a:7b:6e:6b:00:65:5c:49:37:
4d:e5:0f:60:dc:da:ac:76:c3:12:db:02:39:13:d6:dd:98:e0:
62:d7:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:11:56 2026 by rpki-client