
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier: O55zbAsKNKhOpXSds64pOwwkzRmogJJz/u9xPC7jKC4=
Subject key identifier: 71:DB:58:A0:86:3D:B1:3B:42:94:AA:08:73:9E:E5:D4:2B:51:20:F3
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial: 04EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number: 04E6
Signing time: Tue 24 Mar 2026 23:26:41 +0000
Manifest this update: Tue 24 Mar 2026 23:26:40 +0000
Manifest next update: Tue 31 Mar 2026 23:26:40 +0000
Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: IFDdxUShMr9kb5UpgkRQh8ImHwvNL7Rvw8zoh75lY5I=)
2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 9TiMPZCiPjXqHR9KYA2Vwop1NQpu2NZ+fmkYgv1k0eQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1260 (0x4ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Validity
Not Before: Mar 24 23:26:40 2026 GMT
Not After : Mar 31 23:26:40 2026 GMT
Subject: CN=69c31db1-199c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:5d:c7:3f:91:dc:4f:9e:93:63:e1:e5:a9:
b6:b1:9b:9c:0c:0e:e2:81:66:41:cc:86:2c:cd:84:
c2:1b:34:65:f4:69:65:81:70:7c:c9:e6:d3:ed:3e:
4f:73:d4:3f:9d:99:a0:0d:7f:5a:a4:61:45:9d:64:
d5:64:de:85:47:54:59:ad:d3:27:60:4f:64:0a:0a:
a9:4f:8a:cb:1a:43:13:f8:a9:0e:07:b1:bb:ef:f5:
b0:a2:2e:1b:0e:ae:1d:ca:8b:b1:cd:94:64:98:e4:
4d:78:75:0e:84:7c:6f:1e:cf:26:f2:64:2e:4d:63:
b5:93:76:c2:9a:df:56:2e:e1:57:9d:e9:ae:92:f8:
50:99:a1:75:73:3a:0b:86:e6:df:91:da:3b:c5:32:
30:da:53:cb:34:04:c6:8f:f9:7c:90:02:ac:14:d6:
5d:92:53:1e:ae:f2:4e:9b:ff:1c:5e:73:fe:f7:0e:
a7:54:8b:ed:47:96:ca:10:e3:4d:57:03:b5:65:21:
b4:80:6b:5a:61:1d:f3:7f:e4:26:47:db:91:e4:f3:
85:61:36:9c:52:62:2f:36:39:72:46:ff:7e:4e:81:
11:2e:af:64:07:28:fe:d6:d7:55:b0:e7:7f:cd:1f:
24:ed:81:f6:4d:fb:6c:12:03:46:47:3e:07:c4:bb:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DB:58:A0:86:3D:B1:3B:42:94:AA:08:73:9E:E5:D4:2B:51:20:F3
X509v3 Authority Key Identifier:
keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:33:35:48:c6:23:6a:b1:d8:48:ad:4f:6e:a2:69:d8:8b:e9:
ec:6b:23:d2:b1:f5:f7:8a:ed:db:b7:6f:a4:8c:ce:49:7d:ee:
af:22:8f:e8:80:f2:03:54:a8:83:59:b3:68:18:26:2a:00:66:
52:5c:d3:7c:38:da:11:61:5c:98:61:17:93:31:d1:d3:62:66:
95:81:1b:14:d5:51:07:2a:25:25:5f:bc:e9:76:32:29:f0:b9:
fa:37:51:e2:a1:95:74:c0:07:b1:b0:4c:1f:74:50:ac:84:ca:
1a:a0:25:fd:08:71:11:2c:07:9c:2e:66:68:49:1e:20:4d:59:
d7:5c:1e:d0:5a:d3:42:94:e3:45:71:5a:f3:d6:bd:51:27:10:
14:38:41:5e:bf:30:2a:9f:f2:70:f1:2e:0b:b1:cb:1a:75:36:
c2:0d:a7:4f:5c:c1:d6:a3:84:a6:30:12:fc:bf:b5:cc:29:93:
8b:62:7d:c3:07:65:87:97:23:76:53:e7:5c:e9:01:af:9d:65:
61:d3:0f:a2:25:39:2a:53:36:c5:29:fc:9e:80:f5:f0:42:5d:
32:e7:0e:4f:4f:21:17:2d:4e:fa:c3:00:c2:6f:09:17:d5:81:
06:55:59:99:50:74:77:ea:41:7a:6e:4c:f5:3b:ed:26:ca:d4:
73:8d:f4:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz
NkNDNDk3MUYwHhcNMjYwMzI0MjMyNjQwWhcNMjYwMzMxMjMyNjQwWjAYMRYwFAYD
VQQDEw02OWMzMWRiMS0xOTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzZ1dxz+R3E+ek2Ph5am2sZucDA7igWZBzIYszYTCGzRl9GllgXB8yebT7T5P
c9Q/nZmgDX9apGFFnWTVZN6FR1RZrdMnYE9kCgqpT4rLGkMT+KkOB7G77/Wwoi4b
Dq4dyouxzZRkmORNeHUOhHxvHs8m8mQuTWO1k3bCmt9WLuFXnemukvhQmaF1czoL
hubfkdo7xTIw2lPLNATGj/l8kAKsFNZdklMervJOm/8cXnP+9w6nVIvtR5bKEONN
VwO1ZSG0gGtaYR3zf+QmR9uR5POFYTacUmIvNjlyRv9+ToERLq9kByj+1tdVsOd/
zR8k7YH2TftsEgNGRz4HxLv+BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHbWKCG
PbE7QpSqCHOe5dQrUSDzMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2
RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy
Z1V5c1Y0WFV2MDAyekVseDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGTM1SMYjarHYSK1PbqJp2Ivp7Gsj0rH194rt27dvpIzOSX3uryKP6IDyA1So
g1mzaBgmKgBmUlzTfDjaEWFcmGEXkzHR02JmlYEbFNVRByolJV+86XYyKfC5+jdR
4qGVdMAHsbBMH3RQrITKGqAl/QhxESwHnC5maEkeIE1Z11we0FrTQpTjRXFa89a9
UScQFDhBXr8wKp/ycPEuC7HLGnU2wg2nT1zB1qOEpjAS/L+1zCmTi2J9wwdlh5cj
dlPnXOkBr51lYdMPoiU5KlM2xSn8noD18EJdMucOT08hFy1O+sMAwm8JF9WBBlVZ
mVB0d+pBem5M9TvtJsrUc430ug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:59 2026 by rpki-client