
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
File: Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json)
Hash identifier: TVsiimAhy8PEYhEp/2vIZEbB9mn/ip/aDL/ycJeMi9A=
Subject key identifier: B8:9D:0E:2D:9D:45:71:B0:8F:B4:82:CF:A8:26:B4:89:34:A0:74:38
Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Certificate serial: 0B7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
Manifest number: 0B73
Signing time: Tue 24 Mar 2026 18:57:39 +0000
Manifest this update: Tue 24 Mar 2026 18:57:39 +0000
Manifest next update: Tue 31 Mar 2026 18:57:39 +0000
Files and hashes: 1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: WYqdO6WH80NcvmrqjTamo8g6OD6RpS6cKVSBB8mp/oA=)
2: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: wcBn6zzmuqZgVHobc9nnX0MwLLhfrJhdoOLry6NW5b4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl
rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2941 (0xb7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Validity
Not Before: Mar 24 18:57:39 2026 GMT
Not After : Mar 31 18:57:39 2026 GMT
Subject: CN=69c2dea3-9428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8e:72:c6:75:b1:34:93:6f:32:82:1d:58:aa:
d9:d7:6f:83:06:53:6a:d3:9a:d6:c2:a1:f1:57:79:
28:91:50:ad:f7:41:70:54:09:ac:7a:b0:7f:23:d2:
32:02:96:14:6a:1a:91:5b:1d:ec:16:a6:0f:a9:a7:
c7:f4:91:a5:56:c8:65:aa:2c:3a:32:27:d0:76:75:
7a:45:03:0a:6f:4f:58:e8:1f:6a:87:71:e8:e2:08:
8a:4f:1c:be:30:44:0f:0e:04:f6:9c:7f:77:88:19:
67:f0:e1:fd:5f:13:3c:b4:f7:ba:aa:6d:49:45:91:
a2:91:76:61:56:a6:1e:3e:d1:81:61:ed:d3:67:15:
04:2a:62:30:6d:41:49:3a:38:15:a8:6e:82:2c:9f:
09:28:cf:e7:a1:ec:04:5e:1e:f3:d0:7a:ee:5b:6c:
20:66:af:d1:5b:7d:af:00:f1:ef:86:45:7b:d5:c3:
0c:df:44:3c:a2:27:ab:48:7e:3f:08:e5:ad:c3:5e:
96:d3:03:19:25:b2:51:7d:ad:ff:98:02:6b:b6:df:
21:99:a8:e9:33:d3:7f:6d:be:ba:c5:c4:57:26:13:
97:6b:d9:a7:50:05:9e:ff:da:8b:81:23:e0:5d:77:
cc:97:ef:84:46:7f:ef:4e:14:26:bf:8a:c7:01:fb:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9D:0E:2D:9D:45:71:B0:8F:B4:82:CF:A8:26:B4:89:34:A0:74:38
X509v3 Authority Key Identifier:
keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:48:8e:ec:1c:cb:d7:8b:a8:44:5b:91:ba:74:75:30:2b:1b:
99:73:ad:ca:cb:4b:3a:f0:37:92:01:a0:a6:e4:06:11:fb:df:
de:35:a6:57:0b:fe:6b:7a:fd:4b:e1:a2:24:85:76:25:29:44:
17:da:d0:99:f6:bb:7d:9e:51:ef:7e:31:81:db:b2:ec:3b:23:
8f:62:80:cd:83:37:c9:c2:39:1c:16:b4:de:d8:28:98:77:10:
02:e2:54:df:9e:83:23:a6:1b:af:4f:c8:89:6f:80:c4:53:2e:
a2:2a:14:3d:2c:22:3f:2e:01:02:ef:21:63:f4:9b:23:95:16:
a6:e8:1d:c2:37:27:a2:9f:b0:00:9b:c9:d3:63:64:1f:1e:10:
39:df:56:06:02:9f:f2:bb:2b:39:b6:91:56:e1:6a:c2:77:5d:
28:a2:1c:ab:05:a6:f3:7d:a4:f9:10:ad:55:e0:f6:28:2a:97:
17:c5:dc:82:64:ea:33:b1:9f:72:fb:5c:92:38:3f:60:04:61:
9a:16:ed:0d:45:d8:56:3f:18:bf:14:cc:e8:2a:78:25:d6:73:
66:23:08:59:88:6c:d0:1b:87:2f:ea:57:f6:1a:48:16:fb:de:
4d:11:73:5e:46:d4:d7:a4:f7:c9:55:62:63:ca:2d:a4:43:69:
a2:84:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:25 2026 by rpki-client