
$ rpki-client -vvf rpki.apnic.net/member_repository/A915670F/ED7D05D4F9D811F0B7A3964B666F56BC/n9Zil3_AN9YAUuuUlk6xNV9oMJc.mft
File: n9Zil3_AN9YAUuuUlk6xNV9oMJc.mft (raw, json)
Hash identifier: otImBPcLv5rti5x3yjrZZmxkhz17/O+MISHQEirFPwA=
Subject key identifier: 7B:19:52:B7:B9:01:AE:62:E4:0B:81:CA:C9:5E:D1:6E:61:AA:D2:04
Authority key identifier: 9F:D6:62:97:7F:C0:37:D6:00:52:EB:94:96:4E:B1:35:5F:68:30:97
Certificate issuer: /CN=A915670F/serialNumber=9FD662977FC037D60052EB94964EB1355F683097
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n9Zil3_AN9YAUuuUlk6xNV9oMJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/ED7D05D4F9D811F0B7A3964B666F56BC/n9Zil3_AN9YAUuuUlk6xNV9oMJc.mft
Manifest number: 22
Signing time: Wed 25 Mar 2026 08:01:49 +0000
Manifest this update: Wed 25 Mar 2026 08:01:48 +0000
Manifest next update: Wed 01 Apr 2026 08:01:48 +0000
Files and hashes: 1: n9Zil3_AN9YAUuuUlk6xNV9oMJc.crl (hash: X19iuKIX1C/bXxIKKyADFsSii9MMLa1Kx/dvq6kQx3o=)
2: E2CF3534F9D911F0908C8513676F56BC.roa (hash: 3qUWgbROtjuu63ptaa6XTJ4rly63Yiy0dW/vFOxbOk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915670F/ED7D05D4F9D811F0B7A3964B666F56BC/n9Zil3_AN9YAUuuUlk6xNV9oMJc.crl
rsync://rpki.apnic.net/member_repository/A915670F/ED7D05D4F9D811F0B7A3964B666F56BC/n9Zil3_AN9YAUuuUlk6xNV9oMJc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n9Zil3_AN9YAUuuUlk6xNV9oMJc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915670F, serialNumber=9FD662977FC037D60052EB94964EB1355F683097
Validity
Not Before: Mar 25 08:01:48 2026 GMT
Not After : Apr 1 08:01:48 2026 GMT
Subject: CN=69c3966d-5a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:88:c1:25:93:fb:14:1b:98:be:90:d9:47:
82:39:ed:72:55:e0:97:4a:01:30:0d:0a:22:70:28:
b6:c2:92:ab:80:2b:cc:b3:c0:79:3b:39:8f:ef:8f:
c3:a3:bc:51:bd:3f:90:4c:e5:f0:1f:90:56:12:b9:
ab:52:dc:e3:55:49:11:73:1b:30:fc:26:82:c3:a3:
d4:a2:9a:03:13:d5:a2:ab:b4:a4:93:cc:f3:c2:b1:
2b:a8:df:01:c6:33:47:7f:b6:9d:06:88:2d:f0:53:
b9:a7:e8:ca:cf:92:1a:90:16:a7:0b:25:4f:86:d2:
96:b6:b8:8a:0a:57:a8:5e:3d:d7:97:74:14:57:45:
16:ce:8e:c5:e1:8f:67:59:42:8e:0e:e4:10:2a:68:
b7:03:98:c4:4c:d9:3b:c6:30:b5:b6:2d:1b:44:e0:
6e:41:56:da:c4:23:b6:ba:28:46:24:40:45:1f:da:
59:3e:e5:27:c2:67:70:fb:47:f7:43:76:cf:88:b8:
56:7d:c1:7e:31:32:9f:14:4b:99:58:60:eb:7e:4c:
0a:64:e6:56:05:86:ae:83:f6:3d:0d:80:48:69:27:
85:2f:5d:89:17:70:26:d8:f0:a8:f8:c7:18:fa:0c:
f2:82:bb:64:ea:c5:7e:53:70:02:d0:8e:33:59:12:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:19:52:B7:B9:01:AE:62:E4:0B:81:CA:C9:5E:D1:6E:61:AA:D2:04
X509v3 Authority Key Identifier:
keyid:9F:D6:62:97:7F:C0:37:D6:00:52:EB:94:96:4E:B1:35:5F:68:30:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915670F/ED7D05D4F9D811F0B7A3964B666F56BC/n9Zil3_AN9YAUuuUlk6xNV9oMJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n9Zil3_AN9YAUuuUlk6xNV9oMJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/ED7D05D4F9D811F0B7A3964B666F56BC/n9Zil3_AN9YAUuuUlk6xNV9oMJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:e6:e1:32:20:ea:0c:ac:b7:54:75:1d:09:4e:a1:c7:1c:
54:23:08:27:b8:69:2d:4d:d1:73:20:9f:81:67:57:04:2a:0b:
10:98:bb:42:ec:18:b8:61:89:29:65:14:05:0a:d2:b3:1e:0c:
cc:e8:05:b5:7b:53:41:03:d0:30:9e:37:29:7e:0c:dc:9c:7b:
68:15:48:a5:1f:22:ba:80:ba:37:02:92:0c:a9:d1:d1:36:e1:
a5:d2:f7:cc:0e:2b:8a:66:3a:bb:cc:71:2b:e7:e4:63:2f:4a:
56:cd:27:85:06:2c:40:21:75:dc:7e:d3:5e:f4:3e:ef:9f:d0:
6c:70:e8:fb:f3:b2:f0:5f:d1:93:b9:61:6d:ab:31:27:63:e7:
f1:7e:0d:3d:cb:3f:e4:78:f8:15:50:b1:4f:56:0d:e5:3f:a1:
b4:7f:0a:d7:f9:11:af:2f:5d:99:d6:4a:b6:5c:ca:b6:16:72:
92:d8:7f:fc:4b:0b:7a:4c:8f:80:e5:e9:3f:28:6c:f0:f0:48:
68:bd:31:0e:f7:5e:37:e6:50:f3:f1:0c:dc:3c:9f:b0:f3:43:
08:c4:23:04:ef:d2:ce:dd:49:21:6a:9e:8b:e6:cb:d8:dd:ce:
23:6d:b6:97:66:67:5a:d1:7d:ac:5c:f0:b3:2f:bc:9a:96:5b:
54:0a:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:52:20 2026 by rpki-client