
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json)
Hash identifier: 3R+14gQFpCfxhzZfYPmezlKimEqg94f2hNHTkYhZzoI=
Subject key identifier: BA:67:54:43:2E:07:F5:B7:05:81:63:56:65:6B:3F:0E:F8:B7:0F:1B
Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
Manifest number: 016E
Signing time: Wed 25 Mar 2026 04:04:05 +0000
Manifest this update: Wed 25 Mar 2026 04:04:05 +0000
Manifest next update: Wed 01 Apr 2026 04:04:05 +0000
Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: ajEcpi97W76ofZqph7GAHbU9GTRCucuzCdlE5HkhHfw=)
2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: ge93gK4lUWgpZWqf0mLTvZJqGeY+ssrFNxVQ9BEvxjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Validity
Not Before: Mar 25 04:04:05 2026 GMT
Not After : Apr 1 04:04:05 2026 GMT
Subject: CN=69c35eb5-33e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:cb:10:96:a9:2e:03:a3:03:8e:d8:8c:ba:
a0:02:d1:8a:57:67:ba:64:45:67:34:98:67:d9:8c:
a7:36:47:7a:55:33:34:47:63:39:fa:9d:35:af:81:
9b:ac:6b:92:fb:71:24:aa:0a:c0:a6:29:44:49:b0:
37:97:24:2e:23:2f:5e:a7:e0:e3:9f:de:ea:48:ac:
b1:7c:06:2b:64:21:42:05:1b:f7:2f:eb:99:22:12:
5f:ed:de:83:40:da:be:9b:80:30:1c:cb:17:83:bb:
ad:6a:e6:78:cc:9e:1e:af:be:2b:2f:91:0e:a9:b8:
03:87:67:01:70:f2:4c:96:45:09:3f:d7:f4:bd:68:
13:1b:0b:2a:33:94:04:1a:14:37:b4:73:b1:79:b8:
88:52:95:8a:56:1c:9d:4c:3d:1d:f0:e4:30:c6:f1:
a0:70:3d:35:04:f8:23:21:83:2a:8e:72:ec:aa:06:
e3:29:5f:03:b4:d1:a5:c8:7b:fd:2e:19:96:41:ae:
84:4d:04:fe:56:9b:dc:02:35:00:35:5e:d6:31:d9:
9d:fa:7d:6b:47:f8:3a:f4:86:f4:10:76:83:49:77:
52:08:01:0e:ab:98:da:52:24:7f:ef:01:5c:e9:90:
39:86:8c:1a:e4:93:3e:0b:c6:47:72:e6:ab:03:2a:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:67:54:43:2E:07:F5:B7:05:81:63:56:65:6B:3F:0E:F8:B7:0F:1B
X509v3 Authority Key Identifier:
keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7c:e9:15:b3:aa:27:75:fc:3f:40:f5:47:67:c2:ea:9b:ea:
7b:0c:53:76:cc:c9:70:39:84:a8:ec:29:c1:79:62:a9:bc:40:
3d:15:6c:b7:e2:98:98:eb:4e:8d:65:e0:4d:7c:34:83:28:59:
12:63:eb:bf:8f:ba:86:fa:37:f2:cc:fb:f2:ae:bc:91:a4:4a:
76:58:37:60:49:9e:f7:be:b5:9a:ca:22:9a:bc:83:ef:ae:ae:
db:88:90:50:dd:a8:57:14:18:a8:3e:0f:5e:f6:17:1f:b9:d5:
90:34:2b:99:01:58:21:b6:44:e5:b7:63:a4:30:5e:4a:06:2a:
06:bf:6c:e7:94:eb:ea:7b:37:f9:db:0b:00:39:db:59:64:43:
2e:ea:ea:af:71:27:2d:d0:dd:1b:e6:90:d2:c4:29:5a:ca:15:
d4:25:d3:7b:01:de:90:10:68:47:64:d8:62:a0:25:f3:c9:f9:
aa:4e:3d:31:4a:dd:6c:18:cf:22:47:d2:ae:17:f7:c5:d1:e7:
3b:b8:4a:f0:f4:d2:51:1a:79:a9:63:fd:9e:a9:4d:22:53:7e:
44:a6:ad:45:4c:4d:ee:14:41:94:c0:c1:4e:fd:81:28:90:1e:
07:d7:bd:16:e4:d3:29:95:6e:f6:20:53:37:8b:c5:c2:8c:57:
71:e3:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:50:48 2026 by rpki-client