
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier: f1pD7+dMxUejh/8CPu5FzuqT+D1aZGM+rMSMVmaBU30=
Subject key identifier: B4:35:1D:CB:C6:33:6E:2E:B6:CC:EC:6A:E5:73:E7:DF:E7:37:BD:F9
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial: 06DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number: 06C1
Signing time: Tue 24 Mar 2026 22:03:47 +0000
Manifest this update: Tue 24 Mar 2026 22:03:46 +0000
Manifest next update: Tue 31 Mar 2026 22:03:46 +0000
Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: TpkK1eJQ3aOtKHJCYywMs5xxfDMqWiwKke6bnrAtQvU=)
2: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: Rlwd9V0UyAZ+wngxzGsVfDnfL9HwwVlxbBwY31cYYjQ=)
3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: C9QuYAu99xYfQCc0kG7HsrANXXNYdfdra+AEIE1V61A=)
4: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: ggYLAZLBkQHkBSRUA3z1VEuHuytE5FGiVTm9TlrkgRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Validity
Not Before: Mar 24 22:03:46 2026 GMT
Not After : Mar 31 22:03:46 2026 GMT
Subject: CN=69c30a43-5c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:92:75:2c:1c:77:fd:4e:14:d0:df:21:0d:
fd:c2:c3:67:0c:ef:8c:20:b8:d1:f4:f0:d4:72:77:
8d:26:a1:aa:57:dd:64:8a:fb:7e:52:6e:58:38:18:
d9:82:e2:82:1e:58:21:ac:eb:78:c4:9d:23:3c:24:
3c:a1:e4:36:48:1f:5e:5a:1c:80:e9:d3:21:4c:6c:
22:58:a7:53:70:76:73:2d:03:a1:c4:20:20:3e:44:
6d:e9:ed:06:5c:99:24:12:4a:a8:b0:76:ca:b5:7b:
1e:57:21:36:d2:26:b8:f9:ec:8d:1b:12:10:3d:3e:
60:c4:9e:6b:df:76:8d:be:10:7b:71:15:f7:ad:30:
21:f3:60:15:bd:ce:78:7a:86:4a:f8:cc:20:11:3d:
c2:1a:59:71:7a:79:da:b6:06:53:c6:7a:a7:10:f9:
1d:43:14:3f:80:7d:65:85:66:a5:ca:69:7a:76:78:
89:de:a4:07:f3:b9:f0:84:f7:44:bd:f4:e2:47:43:
8f:11:00:eb:31:d9:7c:ee:b9:65:d2:74:c0:2d:47:
98:44:39:b7:a7:dc:86:35:88:6d:4b:13:6b:b1:2b:
6d:72:39:3a:a8:0c:2a:21:b1:b3:62:2d:ae:4a:99:
13:3b:80:0f:01:a5:56:ad:2b:96:2f:7b:4a:02:4d:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:1D:CB:C6:33:6E:2E:B6:CC:EC:6A:E5:73:E7:DF:E7:37:BD:F9
X509v3 Authority Key Identifier:
keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:30:7e:25:5b:ce:db:db:30:c2:a9:bf:14:99:75:1a:94:e9:
ab:39:04:97:8e:db:0e:a9:c0:71:2b:07:a1:e6:66:31:b5:d2:
88:ee:2f:c1:7f:40:87:ad:72:ae:ca:a6:7f:0b:b1:9d:b3:ec:
3e:4d:4d:69:73:d7:cb:4e:11:84:03:d4:af:da:4b:aa:11:0c:
83:24:c6:a5:a4:ad:81:0c:9c:14:ca:e9:58:ad:de:98:6f:f6:
71:12:8e:0d:c5:4c:3f:b1:99:89:22:1a:e6:5a:f3:43:1e:20:
82:f3:df:4b:3c:0f:09:bc:25:8f:1e:5b:d2:70:b5:6f:58:7f:
16:3d:d1:07:14:32:f4:b4:a7:b6:ec:c2:38:56:57:3d:15:db:
b3:52:e7:85:0c:a6:b8:f3:e4:b3:2f:3a:db:c2:28:a0:ce:56:
cb:68:e3:0e:a0:3c:6c:6a:76:e1:66:74:2a:9b:e9:b2:1b:9e:
9d:1a:39:e8:d6:72:bc:26:dc:6d:21:b8:d6:06:ba:d2:d4:d6:
7c:3a:5e:36:bc:dc:83:09:4e:aa:23:a1:7c:ca:2e:99:43:59:
e9:e8:fc:64:98:ed:05:ed:e2:8a:34:22:a4:41:de:b6:d7:31:
c2:86:24:19:a7:20:13:a8:a4:4a:3b:44:31:c1:50:37:35:7b:
10:e1:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:00 2026 by rpki-client