
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
File: g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json)
Hash identifier: l1FrGmNqCI2vF7+xyJY4NnM0DS79tF/sPtiBDEXGymE=
Subject key identifier: B3:13:56:66:D3:4A:06:EE:9C:91:9E:77:F7:77:E9:4D:63:64:F4:B2
Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
Certificate issuer: /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Certificate serial: 0EF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
Manifest number: 0EE9
Signing time: Tue 24 Mar 2026 17:30:43 +0000
Manifest this update: Tue 24 Mar 2026 17:30:43 +0000
Manifest next update: Tue 31 Mar 2026 17:30:43 +0000
Files and hashes: 1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: LJK2H8sKDGKXpN6BUvSqHYFNR4GXMuNmpiDXRfCLNKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl
rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3824 (0xef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Validity
Not Before: Mar 24 17:30:43 2026 GMT
Not After : Mar 31 17:30:43 2026 GMT
Subject: CN=69c2ca43-e577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:ec:3e:78:37:4c:a7:a2:cc:54:ba:bc:e9:
10:d4:fd:e7:15:11:8f:97:99:88:94:5c:20:7e:ef:
f5:88:aa:df:c3:8f:ed:ab:06:db:da:3e:76:a0:69:
7b:f3:17:d8:79:9e:bc:16:67:87:12:c9:69:02:bf:
62:f6:36:d3:20:a2:a0:91:cd:16:e1:a1:0e:be:7b:
5b:16:0f:24:a5:45:98:49:24:11:ab:e4:47:e8:c4:
01:5a:e0:43:e0:c6:1a:18:ba:bb:81:99:8e:54:ca:
76:37:93:94:0d:e0:3f:ff:b9:2f:df:36:8c:08:61:
b8:52:d5:ec:49:ee:81:28:6b:30:7d:4b:bd:2b:f6:
40:2d:14:bd:c3:75:6c:81:ee:b1:85:27:10:7f:af:
21:2a:07:42:c0:7e:33:2e:40:55:a3:80:75:db:32:
73:1a:cc:8b:df:a3:db:fe:d5:d1:e1:f8:3a:70:85:
c6:93:29:b1:8d:63:79:9a:19:cb:ea:af:0c:b8:a9:
50:ac:4b:89:76:3e:d4:47:59:4b:a0:d6:7c:cb:a6:
02:16:d0:11:9c:64:4e:69:2c:76:ad:db:b3:0c:12:
c0:f9:16:46:04:15:ce:a2:3f:84:53:3d:49:01:01:
68:46:72:53:22:22:b0:61:42:f5:52:fe:14:9e:15:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:13:56:66:D3:4A:06:EE:9C:91:9E:77:F7:77:E9:4D:63:64:F4:B2
X509v3 Authority Key Identifier:
keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:8d:2f:b8:f8:b0:22:22:00:1a:df:07:8f:94:5d:dd:92:e0:
c3:73:40:d8:0c:57:2d:1d:fb:68:a4:04:ad:77:4b:3d:74:9b:
26:d0:d2:93:ec:c3:58:e4:f0:d8:f1:b8:13:2e:4a:1d:78:a1:
4c:bc:ab:52:25:98:31:2e:e3:1e:d1:cc:f0:76:cb:96:1e:7f:
e3:09:9d:28:43:88:17:c6:9d:86:72:24:12:a3:bc:d3:5a:0e:
19:c0:74:c3:00:77:bb:12:b6:e6:07:fd:1f:9a:38:4c:0e:c5:
a5:d6:e2:5c:31:6c:4a:99:f3:95:57:c1:06:d4:31:36:a7:0e:
78:61:18:66:94:c7:8e:f5:86:cc:23:21:24:4c:2b:44:5f:ac:
59:ee:96:46:41:4d:ae:f3:5e:41:31:5e:e1:9e:4e:37:71:47:
d1:ac:66:1f:38:d0:ae:33:bb:06:6b:d3:50:37:84:2c:d0:eb:
3a:fa:55:00:1d:af:49:2e:46:50:dd:91:cb:d3:75:aa:39:2f:
53:0b:84:30:e5:72:31:0b:d6:57:3a:6f:49:20:28:31:35:aa:
2c:89:6b:d5:ef:8b:da:1a:59:e5:6d:37:b2:6f:81:0c:8e:8b:
40:f7:49:12:c8:f0:e4:d8:e4:ad:85:13:08:4a:9b:46:27:60:
2d:5e:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:54 2026 by rpki-client