
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json)
Hash identifier: Ct7/07Pgj5oRHQrICt7rvx9oAy9OiI6HEVuXvT+RsbE=
Subject key identifier: F8:C8:0D:31:EA:F4:0B:93:F1:74:57:E3:D5:22:B0:E9:39:D2:FB:55
Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Certificate serial: 04EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
Manifest number: 04E4
Signing time: Tue 24 Mar 2026 23:27:07 +0000
Manifest this update: Tue 24 Mar 2026 23:27:06 +0000
Manifest next update: Tue 31 Mar 2026 23:27:06 +0000
Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: QpWDVoTaXgAOf0POCPCMxMMJd5E1DtB0l/77uGmYLaU=)
2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: wBrg9EM4NwDkdFMcEqz/Qv1QuFLGEbWiLtavdDRu3+I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259 (0x4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Validity
Not Before: Mar 24 23:27:06 2026 GMT
Not After : Mar 31 23:27:06 2026 GMT
Subject: CN=69c31dcb-2e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:6e:e8:47:0e:2c:bc:f6:6d:56:f3:60:3c:
29:7f:f5:f3:cb:b7:98:51:91:7b:e6:d5:93:df:97:
55:84:98:d6:9a:f7:c1:26:02:85:e7:8c:3a:7b:6d:
a7:fd:c6:9b:a5:98:06:2a:02:7d:6c:e6:22:21:26:
10:c6:05:98:cc:fc:24:08:74:b0:60:0c:d7:46:f5:
1a:fa:a3:b9:c8:1b:d1:f1:77:0c:31:78:62:ae:c4:
f7:93:3e:7e:bd:f9:de:1f:1c:68:28:01:56:50:fd:
7f:fb:21:d7:93:f2:69:01:3d:97:c4:7d:56:6e:b5:
59:80:2b:be:c6:a6:aa:22:12:af:3c:e5:f6:e9:d1:
d1:b1:98:e6:69:e9:9d:6a:b3:5e:03:e3:e8:ef:4b:
40:15:2b:40:14:8b:7a:d9:da:1e:7c:00:89:f2:32:
dd:35:a7:19:53:3b:bc:07:20:d7:e0:ca:4e:7c:dd:
5c:1b:21:a1:14:44:32:be:01:b3:26:7f:46:8a:49:
bd:22:9c:93:a2:51:39:32:60:17:ce:10:6f:8a:da:
9e:a9:d6:aa:ef:20:b1:fd:0f:f7:ed:70:14:81:84:
1f:4b:42:2e:48:7f:f8:49:6a:f0:64:d1:3e:7c:81:
ab:63:25:62:26:8c:13:50:f4:37:73:0c:90:5f:ca:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C8:0D:31:EA:F4:0B:93:F1:74:57:E3:D5:22:B0:E9:39:D2:FB:55
X509v3 Authority Key Identifier:
keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:54:c1:8e:8d:a8:89:37:3d:0f:2c:c8:4b:66:d8:a6:25:9d:
2a:f6:30:2c:c0:1e:55:36:45:8d:d7:06:13:3d:cb:ed:0d:95:
18:3d:74:12:65:16:57:83:9f:fa:8e:b1:d0:08:91:5b:e1:bf:
fb:62:82:ae:ad:06:c7:7d:5c:00:f6:65:fb:44:2f:27:d3:1e:
ea:b3:09:8b:77:b7:40:6e:6a:b8:e6:1b:e5:22:46:46:ed:f5:
9d:03:b2:1e:be:8a:e8:d0:a0:7e:52:82:a4:2a:ea:21:12:20:
a2:8c:dd:7e:4a:8e:9c:f8:bd:80:61:46:89:e7:fc:0a:1d:81:
93:c7:d5:9d:df:89:48:0c:b6:16:ac:df:bc:c3:13:f1:28:a5:
fd:c1:6b:37:d8:91:b4:cc:88:06:67:75:72:2d:27:a7:32:fe:
ab:ba:52:b2:b2:8d:21:b2:10:8f:eb:f9:09:8d:47:0f:4d:b1:
b5:4d:50:cb:7f:53:36:11:2f:7e:75:30:94:4f:69:b8:87:e1:
43:3f:0c:09:73:f5:38:e3:db:bd:a6:1c:89:43:d5:08:a9:f7:
f4:2c:57:27:6e:10:dd:27:e9:fd:03:48:ad:a7:83:ad:bb:6b:
d0:4c:26:73:eb:b2:cd:e2:ed:4d:c9:92:37:79:c0:53:8c:f9:
47:85:81:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:21 2026 by rpki-client