
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json)
Hash identifier: DwRhhpQyANvA7BIUrER5DI/juxB8y78vwJZEvzPj3gA=
Subject key identifier: 42:02:2C:8B:FF:4E:B8:E7:36:4C:63:D7:02:A0:A3:0B:5B:E3:A4:A7
Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48
Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48
Certificate serial: 0266
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
Manifest number: 025E
Signing time: Wed 25 Mar 2026 01:41:59 +0000
Manifest this update: Wed 25 Mar 2026 01:41:59 +0000
Manifest next update: Wed 01 Apr 2026 01:41:59 +0000
Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: Qzr6X+JJjkB1cEBOTA5k+a4PvfC2E9NVAK3o+nGD0S4=)
2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: qy/cT+8kxyPCb6mO9iq9G3myi+53b9YOx/ZUsaIzpFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl
rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FA48, serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48
Validity
Not Before: Mar 25 01:41:59 2026 GMT
Not After : Apr 1 01:41:59 2026 GMT
Subject: CN=69c33d67-5a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:7d:7b:e0:67:91:96:55:b7:87:c8:c4:ce:
0e:80:1b:3c:8f:b2:00:c3:10:0a:50:db:d5:e3:4c:
34:d6:63:d7:76:c9:31:f5:49:7f:f6:24:ad:25:b7:
25:c9:25:ec:a6:1c:5e:81:6b:d0:7c:87:a8:f7:05:
22:01:fb:cc:67:58:45:3b:2e:d5:99:b6:41:fa:77:
1d:74:6d:38:e4:55:7e:e3:82:6e:70:eb:ca:3d:98:
64:72:09:82:e1:ff:d1:b8:e6:36:75:18:d3:61:0f:
de:06:15:a7:b6:c2:8b:3c:ce:f5:13:03:67:c1:29:
e8:a0:a9:d0:a5:c9:51:95:fe:19:6a:62:d3:49:bb:
1e:0b:55:e1:15:e5:ce:8e:fe:6e:57:b2:01:b4:82:
c6:03:9d:fe:f5:a0:be:1f:3c:59:92:8d:72:60:c3:
4f:66:cb:27:6e:04:19:5c:b0:62:30:a1:e4:75:06:
d1:25:b8:7a:de:16:74:33:82:e7:f5:e8:3c:ef:53:
03:4a:5e:28:6f:1a:c1:54:cb:c0:28:28:41:e6:55:
e2:08:b1:cc:9c:2a:ac:00:cc:37:ee:e6:70:07:34:
59:7b:fc:c5:ea:b3:67:67:99:3a:77:d1:64:48:01:
c0:f4:03:14:fb:eb:cf:b6:af:7c:4d:9d:a0:50:05:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:02:2C:8B:FF:4E:B8:E7:36:4C:63:D7:02:A0:A3:0B:5B:E3:A4:A7
X509v3 Authority Key Identifier:
keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:3e:ee:4f:08:50:9d:5b:c0:9a:88:39:f9:91:e6:85:77:67:
49:e2:66:a2:e0:ce:ce:57:c4:51:11:55:ee:27:c6:3f:5b:cb:
6e:54:62:8f:2d:12:62:8f:db:0b:d9:55:88:76:37:67:df:92:
e9:5c:ae:62:b1:6e:b4:0f:80:3b:bf:44:fe:16:97:34:d3:77:
e0:6d:29:b2:9f:9b:6a:d4:9b:21:c3:3a:1e:39:b6:9a:64:c6:
f2:42:78:e6:77:18:a8:ae:cf:3d:09:84:82:62:4e:2a:35:b9:
f9:68:bc:fb:01:a4:46:ea:22:b9:de:99:d6:20:fd:92:a6:15:
bf:b7:05:1c:2c:a4:1a:30:ee:26:86:93:c0:38:38:47:45:2c:
52:11:65:fc:7b:69:6a:af:35:19:67:43:c6:cb:94:fe:03:45:
c2:7b:5a:b6:e4:c5:1b:74:6b:80:76:e9:85:0c:e9:b3:f7:31:
74:17:3b:a4:72:b5:ee:ba:02:0f:76:f1:3d:60:96:50:1b:63:
84:30:5d:f9:59:25:b0:87:10:48:f6:3c:67:3e:0e:70:a1:80:
0f:0c:71:a8:07:23:aa:03:be:7c:bf:32:61:f0:14:38:23:c6:
b6:4a:66:31:f6:8c:22:58:6e:ee:82:61:fb:ce:89:51:7e:ac:
b3:aa:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:26 2026 by rpki-client