
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json)
Hash identifier: fHXerw7hTe1vYuXUiofuI6c9srXynrjgQERFhOWa3Qs=
Subject key identifier: FF:BE:6B:5E:A4:08:15:5D:1B:60:A0:0A:2E:2B:1D:98:F4:CB:78:2E
Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE
Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE
Certificate serial: 352D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
Manifest number: 352B
Signing time: Thu 26 Mar 2026 14:57:07 +0000
Manifest this update: Thu 26 Mar 2026 14:57:06 +0000
Manifest next update: Thu 02 Apr 2026 14:57:06 +0000
Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: 6d4II5iZy8UAbQqv5CyqL1dvSmHL00FRKPmns7sO0xY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl
rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13613 (0x352d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE
Validity
Not Before: Mar 26 14:57:06 2026 GMT
Not After : Apr 2 14:57:06 2026 GMT
Subject: CN=69c54942-ebdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:c0:41:38:f9:36:a3:45:43:59:e4:fa:50:
69:d9:64:87:7b:62:33:f9:d4:49:3d:cc:0c:6d:ce:
bc:44:13:b2:3d:a4:d2:65:2a:4e:49:4e:92:31:11:
ae:e2:96:a1:23:1c:57:29:04:c9:95:97:02:f7:2b:
fa:db:4d:b3:39:e6:85:97:0c:3a:24:7a:ad:ff:bf:
4d:3f:b5:9c:9b:ee:14:82:46:f3:bc:8b:8f:9c:3c:
56:26:50:e0:8d:da:67:b9:a3:b4:d4:ce:ec:9c:1b:
3e:2d:99:0c:85:10:08:e2:07:54:c5:e7:b4:88:39:
8c:22:b7:57:e6:d6:cf:06:22:b7:d0:10:e0:4c:90:
ef:86:51:57:9d:ea:fb:55:f5:13:e1:03:54:93:dc:
93:c3:26:e5:1b:74:f7:b5:4b:5f:75:ef:f5:b2:a4:
7a:aa:b0:70:79:57:7a:b9:81:db:6c:da:36:3a:1a:
2e:35:15:cc:4c:65:f4:b0:2d:68:1e:51:04:34:bf:
ad:41:b4:6a:2b:82:d2:cd:e4:db:23:8f:cd:21:4d:
0c:a1:c4:60:95:00:5e:67:42:5d:25:9c:36:e2:8d:
42:21:25:ec:d2:fd:b2:31:fd:43:5c:ea:9f:61:f0:
7e:9c:12:4e:34:ef:8f:24:42:45:fe:8e:79:a6:c4:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:6B:5E:A4:08:15:5D:1B:60:A0:0A:2E:2B:1D:98:F4:CB:78:2E
X509v3 Authority Key Identifier:
keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:b7:d9:ad:a2:a5:0f:c3:a0:4a:c2:0d:95:60:28:9c:f9:12:
b0:c5:c9:fe:71:4f:2d:0d:7b:dc:7a:20:71:74:98:0c:6d:11:
9c:22:70:f1:30:6e:b5:be:2a:2b:b4:79:17:74:57:9f:34:5e:
11:1a:a7:63:9d:e9:04:2b:6f:fb:16:f2:f8:7a:75:41:92:c0:
08:aa:9c:04:c1:3a:e8:73:7a:ec:61:1b:1e:02:07:6f:59:65:
72:9d:cb:47:41:e5:a6:c5:04:f7:4e:fa:d0:0b:b4:22:03:9e:
59:c1:40:8f:7c:f5:ea:8b:ce:c2:f3:62:90:fc:2d:ee:35:9c:
b5:e4:b4:15:6b:7c:9f:bd:e7:35:16:20:8c:dc:3f:ed:f3:47:
5e:4e:ac:7c:d0:3c:a9:b6:a8:cb:89:a2:1e:86:19:06:64:ba:
45:ba:04:fc:f0:0f:ff:94:5c:a0:2e:88:3c:67:eb:17:fd:ee:
0b:1b:4a:fb:a6:8e:c2:39:0a:7e:5b:f1:19:b3:15:4f:04:ad:
a7:ac:b5:a0:2f:c3:05:b4:df:11:a9:dd:26:e8:ca:5a:2e:d1:
7a:08:31:3c:f6:8d:29:70:1e:57:a4:ae:d3:97:7d:dd:f8:62:
c8:b7:00:28:93:c4:46:46:89:26:4d:af:01:a1:e3:14:a5:94:
6a:61:3f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:45 2026 by rpki-client