
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
File: 55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft (raw, json)
Hash identifier: 1z79x2YrN6JA/yCDT7UISKP4X4tmV1YnMsvm3hG6lGQ=
Subject key identifier: A8:B2:1E:B7:24:09:CF:7B:F5:BE:38:A6:30:CC:07:F1:72:B8:FC:4F
Authority key identifier: E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73
Certificate issuer: /CN=A9141796/serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
Manifest number: 0240
Signing time: Wed 25 Mar 2026 01:58:00 +0000
Manifest this update: Wed 25 Mar 2026 01:58:00 +0000
Manifest next update: Wed 01 Apr 2026 01:58:00 +0000
Files and hashes: 1: 55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl (hash: BNppfIG4qfdp+yIsIJOzGePEByLAEiP5po0FmLBDyjQ=)
2: 0B361848BC4211EF86E55A27C4F9AE02.roa (hash: GEiGFVj7iZWfLwJkWUzsrbq8ChoLJyOmN6jevKNFxe0=)
3: F1AA5BA0BC4111EF8F383127C4F9AE02.roa (hash: YOqxFO1tVF6+LN43G8TnGo+tbKJA22iLwXTimkV4klQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl
rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141796, serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973
Validity
Not Before: Mar 25 01:58:00 2026 GMT
Not After : Apr 1 01:58:00 2026 GMT
Subject: CN=69c34128-9ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:94:e9:de:a5:e4:a5:9b:84:55:0d:19:6b:
72:46:d7:4f:7e:16:07:00:4a:8e:c0:db:80:bd:d4:
f5:56:83:38:1c:3b:9a:e1:36:7b:ad:8b:18:f3:5f:
48:c1:c4:54:22:86:4d:5c:00:e7:5b:20:57:78:0c:
8d:7f:30:43:44:2a:43:6a:5b:c7:a5:c0:bb:8b:ba:
f4:27:54:38:83:30:fd:2e:b5:67:8e:77:26:a7:19:
4b:f3:2f:92:c5:d7:da:81:0b:29:51:41:96:7e:c2:
2a:36:58:80:d9:f3:07:7f:aa:b2:af:e8:61:e8:e2:
85:ca:ff:e7:3e:f5:6b:87:c4:37:41:d3:06:78:6b:
44:3a:7d:f1:7f:1e:7b:bd:9b:4d:de:88:86:75:12:
ea:ca:2d:82:36:c7:a7:ce:81:cf:3b:02:b0:ac:8a:
7e:c7:3a:95:32:5a:f9:04:b3:05:be:4b:c7:0d:2e:
c4:d3:a7:c7:d7:be:95:91:a8:62:88:14:68:f6:f3:
4b:76:23:63:1d:00:6a:aa:3a:6f:1d:69:14:10:80:
1e:e0:92:3f:8b:da:3b:37:5c:1c:87:bc:ac:ee:71:
82:2d:b5:34:2e:32:cc:11:56:92:f0:ad:1e:a2:0b:
01:3f:43:11:0d:a5:73:fc:fb:37:e7:97:20:38:a5:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:1E:B7:24:09:CF:7B:F5:BE:38:A6:30:CC:07:F1:72:B8:FC:4F
X509v3 Authority Key Identifier:
keyid:E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:05:c9:a5:ff:09:da:8b:2c:38:d7:89:89:16:e4:f5:22:7a:
ff:d3:79:fd:d3:89:92:e5:32:88:b4:a7:ce:d8:64:a8:ee:ec:
8a:81:36:81:d9:cb:19:0f:ca:a3:b4:fe:53:5c:7b:66:74:c9:
f7:33:fa:d2:44:1e:ea:26:09:0e:cc:13:2d:0f:10:a7:fb:cf:
de:a7:66:4f:81:dc:45:70:9a:cc:d1:a7:02:fc:1d:99:6d:bb:
0f:a1:73:4d:cc:17:86:6f:f2:a3:1f:39:e0:7a:85:57:11:9d:
71:44:08:ea:70:e5:c7:ec:fd:b8:d8:06:60:7f:24:65:dc:b1:
95:42:4c:55:b7:d5:a9:66:ff:81:85:0a:63:a6:89:d6:52:fa:
4d:91:74:c7:2e:4f:6e:05:9c:a3:a1:80:4b:00:0d:6c:2c:5c:
e3:c1:2f:ec:04:07:0d:0b:11:fc:ba:7e:f6:9d:92:e3:52:8f:
6c:b2:4b:14:33:53:2b:02:4d:e3:f5:8c:bd:31:3c:46:89:c8:
ed:0a:7f:86:30:ef:9a:7f:11:88:71:fb:49:a0:9d:13:5d:53:
91:ee:a3:4a:c0:60:c5:a0:60:38:5a:d5:91:8d:a9:36:0a:cb:
a2:b7:9e:a3:03:07:a8:11:d6:4f:79:a7:05:61:cb:21:cb:fe:
42:64:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:51 2026 by rpki-client