
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
File: T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json)
Hash identifier: 2n87zpdd5tzWdbUDRT/IZCK5BV4h/cjSfjhnADq4mPo=
Subject key identifier: 3A:B9:1D:EA:35:54:85:76:E9:5D:C0:EC:F3:0A:50:11:80:45:6A:23
Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
Certificate issuer: /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
Manifest number: ED
Signing time: Wed 25 Mar 2026 05:36:29 +0000
Manifest this update: Wed 25 Mar 2026 05:36:29 +0000
Manifest next update: Wed 01 Apr 2026 05:36:29 +0000
Files and hashes: 1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: d/790Jh0ux98ykGdyfYF/2OozGTCMKWRTD2HwQixc48=)
2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: cA4EpqB36n167Q1HdD3K3flvs1ql/TPMQ9D+AoLp6ME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Validity
Not Before: Mar 25 05:36:29 2026 GMT
Not After : Apr 1 05:36:29 2026 GMT
Subject: CN=69c3745d-5deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:0a:cb:e6:ac:23:e1:a9:73:79:20:75:3a:
21:d7:b2:46:f5:a9:a7:d9:b9:34:ed:03:60:42:4a:
6b:9e:16:c5:e4:70:40:ef:d0:77:90:37:f3:9b:2e:
4c:47:05:e4:0b:2f:7c:8d:e7:cf:0b:1c:8a:9c:c2:
e5:ec:a8:cb:3f:49:40:09:ab:9d:53:ac:b0:48:36:
06:24:49:e3:16:c7:f8:0c:8b:c6:76:58:8a:1b:52:
af:2f:55:20:a9:ed:ec:72:5f:83:ca:a2:83:fd:46:
03:80:a0:4f:3a:a0:cf:c1:00:31:8b:32:90:d3:bd:
40:b4:aa:65:72:6e:ca:26:5c:0d:db:7e:ad:63:09:
ea:c5:14:b9:a0:9e:cf:f1:61:97:11:31:df:c2:79:
10:2e:c5:eb:59:f2:b0:b0:70:1e:e8:70:29:3c:bf:
f4:88:66:2a:e2:37:79:9d:f8:68:7b:28:19:e1:24:
0e:80:e8:90:46:7e:f8:e8:42:ab:55:3a:f2:b9:08:
9d:da:d5:0c:a2:4d:21:e5:e6:75:c9:ea:c2:87:a9:
14:25:1f:ac:ca:f8:c4:79:c5:3f:65:64:44:e6:1b:
73:79:ed:76:d7:1d:b6:06:77:e7:10:6f:4a:cf:e3:
0e:84:82:93:f3:cc:8b:81:f1:a0:f9:53:20:61:27:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B9:1D:EA:35:54:85:76:E9:5D:C0:EC:F3:0A:50:11:80:45:6A:23
X509v3 Authority Key Identifier:
keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:65:6b:b1:2a:02:07:81:bd:c7:c0:e5:96:72:4f:51:89:77:
c2:e2:36:18:4a:26:99:7a:28:b0:13:4d:02:6c:67:f8:49:7f:
cd:c6:13:c0:7d:f7:e0:e3:c6:e4:be:63:ff:11:bb:12:c0:23:
10:fc:70:32:8a:ee:e6:97:b4:3b:4e:7a:4f:f2:84:ac:36:ad:
3a:41:14:1a:93:2b:98:19:7f:12:5e:02:21:24:7a:90:6a:df:
c1:a3:d6:5f:ba:c3:15:75:55:2c:ae:9b:fe:6f:6a:3e:20:8c:
f3:19:61:85:5f:fe:8f:ff:47:fb:52:40:67:35:83:1f:37:1c:
6f:8c:f9:34:8c:86:77:69:fb:65:6d:51:33:a1:9f:81:ab:4f:
eb:a4:f4:ec:3f:1d:a6:8a:c6:29:55:7c:2f:1e:41:9f:b2:b8:
81:a4:a2:7e:89:49:38:03:c1:7a:0a:55:8f:1c:d4:4b:c1:b7:
b7:6c:9d:b7:de:a1:36:49:7b:41:95:82:29:ef:40:f7:a4:8b:
97:32:26:be:3d:4c:48:0c:98:76:61:47:2d:f5:45:6a:4d:25:
eb:a1:2a:96:96:c1:f6:18:ff:ee:ce:00:fd:e0:5a:f0:b1:20:
12:4d:0e:2b:93:22:13:a6:b1:0c:8a:0d:a8:e7:96:9d:e3:4f:
ee:74:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:06 2026 by rpki-client