
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
File: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft (raw, json)
Hash identifier: gcIiCyunw0+zChx4/VF0L+BM4j3ngrgtDdaoDAdn8YM=
Subject key identifier: A6:8E:E4:35:26:6C:A8:3B:08:D9:9E:DD:3C:19:6F:2E:95:3D:87:A6
Authority key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4
Certificate issuer: /CN=A9128F1E/serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
Manifest number: C2
Signing time: Wed 25 Mar 2026 06:08:41 +0000
Manifest this update: Wed 25 Mar 2026 06:08:41 +0000
Manifest next update: Wed 01 Apr 2026 06:08:41 +0000
Files and hashes: 1: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl (hash: 8R13oO57TwBtauEyL1RCavJIUnaNBQY5Vdxt/S0EJl4=)
2: FC25E548019411F0A44E3285C4F9AE02.roa (hash: WeS4tdLinZT9Yay+VY4z3vysrkv1mxqxKTqlxqMfwp4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl
rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128F1E, serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4
Validity
Not Before: Mar 25 06:08:41 2026 GMT
Not After : Apr 1 06:08:41 2026 GMT
Subject: CN=69c37be9-aa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:e9:5a:f2:1a:2f:cd:92:58:14:06:0d:91:
41:46:a9:6e:fc:61:24:0b:60:27:c6:08:13:64:10:
5d:d3:5b:3e:a5:eb:53:cd:eb:cb:09:1f:60:fc:c7:
86:c2:43:75:79:c2:1f:10:c5:9d:0a:37:a6:7c:97:
29:6a:8d:4a:e5:73:0e:1d:e8:7a:44:c0:0b:60:ce:
05:08:71:15:b7:7d:71:b2:27:ef:91:ea:ad:c9:f2:
5c:c3:b5:52:40:31:1b:b9:2a:45:b6:a5:b9:16:14:
16:11:fe:ee:dc:81:33:3a:08:b2:11:d9:b3:8a:58:
09:46:b1:fb:64:80:bb:af:6c:8f:5c:1b:87:f0:e5:
81:41:35:ac:2d:c7:62:22:b3:6f:a7:6a:2c:b4:e5:
7f:ba:65:66:86:41:bd:71:3c:34:c6:fc:56:3f:4e:
9d:ba:37:56:7b:bd:87:bf:be:f6:7e:36:b0:ea:d8:
d8:f2:53:88:cc:63:8b:92:50:12:4c:66:f6:cb:50:
64:dc:c8:7c:c4:6f:10:26:e5:3f:bf:0b:86:58:41:
30:7a:18:77:c7:fb:4d:fb:df:7a:58:cd:1b:b7:a6:
f0:0f:82:aa:66:0b:8d:58:8a:d0:3b:f6:d5:0e:67:
ea:c8:0d:9a:af:1c:9a:8d:bd:a3:26:9a:00:47:4f:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8E:E4:35:26:6C:A8:3B:08:D9:9E:DD:3C:19:6F:2E:95:3D:87:A6
X509v3 Authority Key Identifier:
keyid:FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:c7:04:ad:f4:d9:f4:c1:6b:60:de:e9:0f:3e:77:5b:74:15:
d9:62:8f:84:6b:76:f4:c1:54:b9:4a:f1:e4:ff:80:bb:20:85:
f8:ed:33:32:38:32:0e:cd:83:4e:d5:e6:aa:49:b0:da:e3:0c:
06:8a:33:1f:15:ba:33:26:ec:64:12:9c:37:7b:b2:61:a9:2d:
af:a8:c3:46:94:39:8e:96:5a:6e:40:0e:91:31:59:c2:37:23:
7c:0d:c6:89:57:4d:32:f0:1c:94:a4:9d:fb:29:5b:d8:a3:30:
ee:6b:75:54:98:8d:06:fb:a3:75:ac:71:26:d4:db:6c:fa:66:
ee:54:ce:40:a2:24:bc:4c:02:38:b3:7c:98:e9:e9:54:f0:c3:
b0:ec:4c:6b:05:0e:d9:7f:57:52:9d:45:1f:fe:4d:67:86:51:
44:a2:c7:76:4a:a1:ee:0d:1b:54:eb:ec:8c:07:f0:a4:d6:50:
be:ba:22:c2:e1:69:9c:bf:5a:33:a0:37:aa:cd:46:5b:bb:e0:
91:de:f5:0b:1e:53:e6:af:43:e0:54:26:1b:3a:ad:e6:57:a6:
f6:87:c4:0a:32:fc:8e:8e:23:cf:cd:1f:bf:eb:cc:e7:9b:cf:
93:17:a2:e8:bb:d3:7a:8b:87:15:83:9a:f3:60:67:60:c8:78:
40:df:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:10 2026 by rpki-client