
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File: 9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier: +b0Zae71c0Lc5yPQ3kCHglglxE4//nYIcyBemgMn+9E=
Subject key identifier: 49:DF:AB:1A:5E:B3:DB:D6:C3:CF:93:F2:A7:D5:1B:7D:71:A1:5A:1C
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer: /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial: 0494
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number: 048D
Signing time: Tue 24 Mar 2026 23:41:19 +0000
Manifest this update: Tue 24 Mar 2026 23:41:19 +0000
Manifest next update: Tue 31 Mar 2026 23:41:19 +0000
Files and hashes: 1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: Lxls0yHCqxSX2N9ymqUJ88Y/4joZnlrmQOyekTFSI6A=)
2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: 2rQJWPdUgZ0hNF0HMVFMTi4ImpvJKJ7bVW+COUiFLto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172 (0x494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Validity
Not Before: Mar 24 23:41:19 2026 GMT
Not After : Mar 31 23:41:19 2026 GMT
Subject: CN=69c3211f-9d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f1:77:98:95:12:11:57:3f:48:15:52:c4:22:
10:ce:29:07:9e:3f:cc:d8:b5:54:c3:f3:3d:13:a7:
03:3a:18:0f:4b:e4:b1:d8:18:da:2b:8e:66:3f:c8:
ef:9f:af:46:8c:99:13:ae:1b:77:e6:6d:ba:e7:3e:
ca:b3:86:5d:0c:51:85:72:ed:db:db:3d:c7:21:0a:
00:ad:c7:41:eb:6b:93:68:af:53:70:fb:01:93:c6:
23:b6:e6:f0:87:47:6d:7c:12:23:3c:63:fa:ef:b3:
b9:35:2d:40:fc:ec:58:87:49:98:00:08:fa:76:a0:
58:1a:ef:a5:d0:0d:d3:42:78:8e:c1:d3:f9:75:d2:
df:65:93:de:5e:5e:a2:ac:e1:c8:26:e3:e3:a2:24:
09:c8:02:a5:12:67:86:d5:61:62:22:f4:e7:c5:9b:
39:ca:76:e1:40:3e:54:4c:65:e0:bb:8e:ae:ec:58:
7c:c3:d7:95:b2:ed:e2:e1:c3:6f:e5:63:dd:78:ee:
cf:86:c5:dc:be:58:96:a3:c5:00:70:93:f6:64:0d:
5a:99:c7:ae:9e:f2:6c:87:88:95:24:a9:08:91:20:
95:48:24:fb:28:e6:86:71:93:8c:b5:c7:31:e8:a1:
d2:3c:fb:48:94:e2:b5:7e:a9:a7:37:c5:91:74:c7:
81:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:AB:1A:5E:B3:DB:D6:C3:CF:93:F2:A7:D5:1B:7D:71:A1:5A:1C
X509v3 Authority Key Identifier:
keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:1c:a2:61:0e:27:6e:89:5c:65:6a:be:c6:05:0b:4a:53:fb:
01:e4:18:47:ba:8c:fc:25:23:3f:26:0b:76:b4:87:50:77:ec:
38:b5:8e:f7:07:19:55:79:b6:11:e2:00:f7:05:41:e0:39:b2:
dd:de:40:10:ab:4a:b5:c8:90:2e:2c:f8:16:7b:e3:f3:e9:25:
16:94:02:67:66:37:25:a6:c2:b2:77:64:4d:ec:0d:8b:44:c6:
f8:b6:ab:c0:52:db:18:ba:aa:0e:3f:76:c7:c0:4f:e1:f0:4c:
69:97:ef:d5:e8:43:85:35:09:6e:6d:fd:0e:d4:5f:a9:5a:42:
75:d4:e1:ae:37:c3:d0:9b:83:fd:7c:19:19:e9:0d:14:ce:1b:
29:02:91:74:62:ea:d6:84:71:ad:a6:b7:4b:7a:f1:f8:ce:f4:
08:43:1c:83:4b:75:87:ab:e1:30:dc:c3:15:7f:d5:64:55:65:
23:50:b7:36:27:7b:af:ba:85:5e:e7:88:28:bb:dd:e2:cc:ef:
6c:5b:2e:24:aa:0e:90:67:fd:1a:81:c9:76:91:d3:47:75:be:
76:de:ba:00:65:cd:5c:0b:19:57:d8:9b:68:35:c9:26:ce:d3:
67:a5:1e:89:75:c8:c5:69:50:9e:d3:05:07:4e:a9:e4:e8:cc:
f8:90:b7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:56 2026 by rpki-client