
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft
File: g8K1S2QeP_BuMaK0RQwVetrVm2g.mft (raw, json)
Hash identifier: pfylFh0NFZtHkL7MjrinGAdJAqymWZRNm8m8LZeg65s=
Subject key identifier: 92:FE:04:89:F6:51:B8:13:A0:80:B3:09:7F:23:6E:7C:50:79:21:59
Authority key identifier: 83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68
Certificate issuer: /CN=A9137E5F/serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft
Manifest number: 0129
Signing time: Wed 25 Mar 2026 04:51:15 +0000
Manifest this update: Wed 25 Mar 2026 04:51:15 +0000
Manifest next update: Wed 01 Apr 2026 04:51:15 +0000
Files and hashes: 1: g8K1S2QeP_BuMaK0RQwVetrVm2g.crl (hash: X3VSye/5vXikmIh/lJRGer07f7QusNUbyabsiQJM9fo=)
2: 7114716A653911EFB61F430DC4F9AE02.roa (hash: xSWO0CTcQGpa06Eh3Wh+x2FwEZv1Nax7hDU1hAzLKjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.crl
rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137E5F, serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68
Validity
Not Before: Mar 25 04:51:15 2026 GMT
Not After : Apr 1 04:51:15 2026 GMT
Subject: CN=69c369c3-2204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:9b:0f:e4:b0:0f:25:55:59:80:eb:f0:85:
ac:68:1c:6d:a4:44:bb:31:0d:d8:bf:fb:48:1c:8d:
82:d5:2a:b6:4c:de:8c:0d:86:a0:58:88:d7:a1:c4:
06:25:df:64:6b:31:51:a1:82:b2:7d:ce:18:0b:50:
b6:7a:e1:55:18:e3:68:30:b7:28:b6:fc:79:82:8c:
9e:3e:93:b9:e0:bc:99:86:9c:b9:5c:68:38:56:44:
8b:e4:32:13:11:15:f3:df:22:e0:0a:22:ab:94:db:
f5:e8:fb:6f:68:c0:79:fb:53:55:28:1e:85:a8:b0:
12:ba:48:1c:bf:fe:23:8d:bc:66:55:59:c8:cd:26:
6f:d9:f2:1e:4b:95:c5:55:2e:b2:72:57:b5:29:82:
4d:d4:11:3d:77:fa:2f:b4:cf:69:f2:7f:d8:7e:94:
7f:c6:8c:a8:dc:b9:25:85:5c:60:2a:95:74:9b:c0:
00:72:ed:35:25:74:a4:1b:5c:78:ac:1f:7d:29:f5:
42:b6:9d:b9:18:3f:78:3c:7e:1d:45:80:f9:22:5f:
17:41:06:40:cd:ce:ba:47:4f:49:9a:0a:be:2f:08:
71:bd:66:75:27:4f:ec:b2:85:10:7c:3e:99:e9:9c:
52:f5:d1:4d:8f:a1:d3:55:af:9d:d5:fc:6b:bf:cc:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FE:04:89:F6:51:B8:13:A0:80:B3:09:7F:23:6E:7C:50:79:21:59
X509v3 Authority Key Identifier:
keyid:83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:88:f0:da:b9:6c:f7:e7:37:57:66:e5:7a:13:ec:df:38:fa:
d0:3f:48:70:a1:94:ad:a2:0a:69:4b:42:59:90:ce:7a:d6:36:
bf:36:35:fe:41:36:3a:c6:ad:3b:8a:2b:a8:e8:b1:32:22:26:
d3:6d:6b:2e:56:be:28:f5:c2:69:f9:7d:16:aa:83:8d:fc:25:
2c:05:71:34:cb:cb:08:6b:7d:12:ec:b4:d0:ca:bc:cd:5a:3e:
f4:ed:28:76:2f:93:27:16:b3:06:69:1c:9c:7e:7e:68:34:14:
fa:8b:94:f5:e9:ac:6c:e6:2a:75:3a:d2:d9:04:4e:27:b8:f1:
b3:0e:b9:e9:5f:a3:20:dc:d3:33:cf:bd:ed:70:67:4c:88:c4:
68:f0:dc:c4:22:ca:32:98:67:a1:23:da:c0:03:fe:b1:b4:8f:
b3:79:78:5b:a1:00:15:0b:09:bd:b1:ac:36:70:37:c1:f4:2c:
d9:96:4a:53:38:ff:ce:02:dd:a9:b3:06:8a:dd:88:b0:7b:dd:
19:1a:5c:d6:ef:b8:d3:96:e6:01:08:3e:4f:db:66:ac:e4:91:
ed:32:a8:0a:11:5e:85:c8:04:a2:8a:0e:94:f2:30:96:af:0a:
99:b5:89:b5:9d:26:62:b8:ff:20:40:52:83:2a:e5:9f:de:a9:
68:73:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:59:41 2026 by rpki-client