
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
File: piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json)
Hash identifier: 2xZeqDq8l0CUdTqy34X9tc6Nuc8qKz2d0Asr3uavs28=
Subject key identifier: B4:DD:FB:A9:04:2E:42:15:09:3E:AA:68:32:55:7A:B7:36:31:DB:BC
Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
Certificate issuer: /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
Manifest number: 0102
Signing time: Wed 25 Mar 2026 05:25:34 +0000
Manifest this update: Wed 25 Mar 2026 05:25:33 +0000
Manifest next update: Wed 01 Apr 2026 05:25:33 +0000
Files and hashes: 1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: MJZDPL7LIjBTdWl3q3veSvQxHCHQX9i31P6GfVnroag=)
2: 4418B6FEFF2E11F09DBB6B6D89EE528E.roa (hash: 3hmprgko0q9FMFEoLpiQRh3laFSikHZ8WhKG0GnJ96U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl
rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Validity
Not Before: Mar 25 05:25:33 2026 GMT
Not After : Apr 1 05:25:33 2026 GMT
Subject: CN=69c371ce-6856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:fa:d3:7d:5e:e3:06:28:08:2f:33:5e:cf:
a8:34:cb:7c:e7:65:8a:f7:71:6c:86:dc:00:fc:5f:
c7:2b:60:91:36:46:80:93:ab:11:37:65:d9:53:b2:
92:4e:69:98:74:65:5d:6d:b7:a2:67:0c:a8:f7:5f:
e7:78:19:d3:f4:73:5c:ca:aa:fe:2e:32:fc:e9:7b:
5e:07:38:6a:3a:e2:3b:c0:1c:45:5d:62:02:32:7f:
04:f5:24:ef:5d:93:ca:df:df:86:d3:96:1e:00:1a:
0a:0e:50:dc:11:49:b5:d6:fd:2f:1f:a7:89:b9:b6:
53:73:4a:9f:e8:a5:fc:e3:2a:c4:43:c7:d2:d1:5a:
e9:73:17:9d:b5:3e:52:52:7b:1a:df:fd:ee:a5:7a:
d3:26:16:7e:c9:59:73:9b:e0:66:5d:dd:3b:e3:c5:
dc:92:44:38:b8:19:bc:4f:d1:a0:28:0e:54:a6:5c:
7a:5a:71:d6:11:65:4c:56:f5:41:8b:3c:aa:bc:94:
5e:82:47:0c:c2:d4:de:df:39:e6:ba:d9:22:18:83:
11:87:b4:ee:63:10:1e:ac:48:3a:52:60:3f:18:a0:
53:a6:2b:ed:f6:a1:2f:d9:e6:5f:26:b9:43:62:12:
55:08:ae:dc:fc:8c:c8:be:b3:56:eb:94:29:ae:89:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DD:FB:A9:04:2E:42:15:09:3E:AA:68:32:55:7A:B7:36:31:DB:BC
X509v3 Authority Key Identifier:
keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:e1:64:74:8b:36:c4:9f:83:dd:1d:66:3d:50:9b:7d:64:12:
51:e8:78:e6:94:01:ed:ce:65:be:da:8f:46:ce:b2:8a:c5:4c:
c3:05:af:6f:65:ad:67:1b:98:d4:87:0a:95:9a:3e:e3:34:2f:
af:02:6b:b3:54:ce:22:6c:c3:e7:e5:46:f5:62:a2:cf:b9:58:
57:07:4c:d7:df:6a:b6:52:03:f2:de:bb:b6:8c:d4:b7:e2:d1:
12:48:36:8c:81:42:b5:95:cd:67:0d:51:af:c4:be:e3:37:d6:
d5:a5:99:ad:38:38:d8:d7:fd:0e:53:04:dc:91:73:54:59:e6:
02:f5:23:07:e6:68:d7:66:72:da:c5:03:c5:a5:de:ab:25:d6:
2d:dc:48:78:a3:41:ec:0b:b9:82:57:f7:ef:fc:e5:13:fa:5b:
77:00:a0:8d:df:aa:10:bd:cb:bf:95:f3:46:4c:1e:87:ae:4b:
00:1f:4b:8e:bd:73:6c:6a:c2:70:f2:90:88:34:17:3b:0c:df:
b0:74:fe:89:f5:11:1d:f1:ff:35:6e:95:32:51:5f:38:25:dd:
94:d9:bd:a1:e3:c8:63:8a:ee:c0:f8:98:be:3c:32:5b:63:bc:
39:1a:c4:28:13:2b:c8:ed:ac:ce:c2:2c:1e:96:6d:90:cd:7e:
2a:51:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:24 2026 by rpki-client