
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft
File: u82QAyNOsUDtDYm7OwH7bEY_XK8.mft (raw, json)
Hash identifier: TbsQtmPLMsZhMD0DPwvEHnwiiaZYPAwVxK8F36TzuBg=
Subject key identifier: 33:49:B0:7E:38:39:DD:AC:6D:69:64:47:72:8E:7D:46:3C:B8:92:AE
Authority key identifier: BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF
Certificate issuer: /CN=A9136F4F/serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft
Manifest number: 58
Signing time: Wed 25 Mar 2026 07:19:16 +0000
Manifest this update: Wed 25 Mar 2026 07:19:15 +0000
Manifest next update: Wed 01 Apr 2026 07:19:15 +0000
Files and hashes: 1: u82QAyNOsUDtDYm7OwH7bEY_XK8.crl (hash: wYY8yEOpRqWo0fgJgVYdFxvIv84X4uyhfmxwqvxcn44=)
2: BF6469FCA41611F0A6E79C33C4F9AE02.roa (hash: OQ1fYO/Vfq0H+gJMM7fdxIVe1LUqa54TGpDXZ1n8oiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl
rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136F4F, serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF
Validity
Not Before: Mar 25 07:19:15 2026 GMT
Not After : Apr 1 07:19:15 2026 GMT
Subject: CN=69c38c73-cc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:06:f1:9d:0b:5a:f4:9f:4f:a5:32:cc:b4:
ef:04:c8:76:00:d2:e2:1b:d8:fe:00:51:39:3b:93:
0b:e4:28:b2:69:9c:c9:aa:32:92:83:80:1e:55:48:
d2:6b:de:1e:fe:43:7d:99:4c:bd:6a:d3:76:dc:72:
cf:48:36:49:85:08:12:f4:bb:54:89:bb:6d:d3:85:
8b:fd:2d:7a:d6:c9:c1:44:1f:e2:e2:8a:42:3b:8a:
83:54:cd:68:25:c1:01:68:2d:29:09:fa:3e:28:27:
84:da:d1:18:50:ec:7c:12:78:15:2e:d8:2d:27:45:
b7:9e:af:1b:9a:2e:5b:86:90:7d:46:ca:4a:45:8c:
5b:c3:32:98:7d:2e:67:bc:f0:5e:66:26:d8:84:38:
4e:d1:b8:2d:c6:7c:5d:98:8f:b2:79:72:a7:5f:07:
df:58:aa:22:a3:23:8e:d8:a0:a3:4f:f3:ca:3d:0d:
e8:e8:5a:4c:0f:3f:eb:ae:5f:72:16:a4:0d:01:35:
20:49:6e:f2:eb:cd:e9:30:1c:ac:12:ee:8d:e8:7c:
06:ea:8d:48:f7:fa:a3:f3:fd:d1:aa:1d:55:95:8f:
0d:c1:1d:7a:0e:6d:83:72:65:fe:de:bf:57:ed:41:
99:93:d2:14:52:34:97:5a:fa:11:c6:44:5c:d1:90:
ba:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:B0:7E:38:39:DD:AC:6D:69:64:47:72:8E:7D:46:3C:B8:92:AE
X509v3 Authority Key Identifier:
keyid:BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:e7:11:e3:f7:e8:37:f6:fa:e7:d9:50:36:68:10:25:ac:36:
31:9c:e2:3a:a1:66:7c:5e:3a:94:6c:65:01:af:de:ae:95:03:
8a:72:b8:80:14:7d:6c:f1:63:16:cb:56:1d:89:26:74:a0:33:
79:eb:f7:ab:b6:40:64:8c:a5:1e:35:bd:c4:74:17:2a:6a:63:
98:02:62:b2:79:df:0d:7a:69:ee:ed:a7:df:20:bc:2c:ba:2b:
44:fd:03:bf:f2:4c:bd:3d:03:96:f3:75:d4:1c:b5:35:1c:96:
ed:82:5b:f2:fa:23:82:0d:38:67:33:10:cd:bf:93:62:7e:a7:
a3:8c:56:7e:f9:64:c6:bc:56:2a:0e:25:42:bd:a8:59:13:36:
c1:4b:f7:3b:e6:31:dd:1b:13:be:b5:b5:f4:ae:56:e7:5e:02:
e2:92:6a:17:98:50:f4:23:6b:6b:00:99:14:50:64:b5:9a:e0:
67:50:00:f5:33:f5:cb:dd:de:71:22:1c:12:f1:1e:ca:ca:6e:
36:8c:8c:9e:e7:f2:d6:5f:a6:40:61:b3:46:7d:e9:21:39:7d:
92:a9:9c:8f:79:72:47:d0:a2:59:0b:5f:74:9d:4e:ae:b0:6f:
7e:ac:72:bd:eb:4d:7a:59:d7:88:17:2b:bb:b7:2b:7c:cd:65:
cb:16:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:28 2026 by rpki-client