
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json)
Hash identifier: tDfgdKHasGZu+++be0YzuNnyNdpPyHGTzsUnu0Bnf9E=
Subject key identifier: 84:95:BC:A4:A9:E1:59:3F:73:5A:CD:F3:66:DA:FB:FA:37:D6:06:3B
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial: 0338
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
Manifest number: 0327
Signing time: Wed 25 Mar 2026 00:47:01 +0000
Manifest this update: Wed 25 Mar 2026 00:47:00 +0000
Manifest next update: Wed 01 Apr 2026 00:47:00 +0000
Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: QdNX0W1W2gdZ/E50jtOyep3xl9pvy64j+1potCKDOs8=)
2: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: ERom4Ei0HIGCTmZt1BesT0wAL5vdqp/U/eF25sHImyc=)
3: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (hash: pI7DQlML4G8nsrMbEd9F1IKO++WC4YpDB08JHhvsskQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 824 (0x338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Validity
Not Before: Mar 25 00:47:00 2026 GMT
Not After : Apr 1 00:47:00 2026 GMT
Subject: CN=69c33085-5410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:b7:d9:7d:9d:4c:cb:c1:d9:f3:8d:82:ef:
32:a9:88:3b:70:36:99:5f:e7:fa:f2:df:87:ba:dc:
ba:57:64:b6:82:35:74:a9:3c:39:fb:4d:0f:18:be:
0e:2c:08:18:0a:88:c8:26:e2:16:57:47:69:ef:ee:
86:96:42:f1:a4:bf:12:4a:5a:f6:d1:cd:2a:a4:7f:
50:93:d0:fa:40:cc:65:37:46:c6:8b:fe:dc:83:b4:
53:bf:d8:2e:43:66:ba:b6:1b:04:2d:1d:d9:f0:0a:
9b:a5:cc:05:77:f3:f8:84:d1:00:96:0c:a3:9b:7d:
1e:cb:af:62:3b:2e:81:a7:b5:6a:ce:90:db:fa:d8:
2d:a0:19:46:29:5b:d5:d3:00:04:71:a3:5e:37:4b:
3a:50:7d:b3:7a:80:91:75:67:ff:f1:e9:de:59:b0:
d9:13:0e:f0:57:1e:c9:3a:93:76:fe:6a:31:59:07:
e3:02:55:95:e5:30:db:c0:ed:4f:14:fc:c8:24:70:
36:09:b4:5a:0e:19:62:a1:e2:71:07:55:46:74:66:
da:4b:4d:98:0c:11:5f:77:aa:d1:9d:50:7c:8b:95:
5d:cd:20:59:82:c8:61:08:30:13:f6:12:0f:06:65:
8e:10:34:3b:65:7d:c8:92:61:4d:75:4f:21:8e:57:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:BC:A4:A9:E1:59:3F:73:5A:CD:F3:66:DA:FB:FA:37:D6:06:3B
X509v3 Authority Key Identifier:
keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f9:ea:91:80:4b:be:88:a9:15:ff:3f:39:70:d4:7d:36:1d:
30:c0:01:e1:cd:dd:b6:9b:dc:bd:44:d2:ee:b0:15:9c:8e:ad:
18:20:ba:61:5b:e4:89:17:e2:9f:6c:bd:77:3d:ba:ac:a7:a2:
2e:df:29:29:68:47:81:30:5b:c3:06:3d:78:d5:e5:41:cd:0b:
7c:ab:a5:1d:8f:fd:b2:f2:5f:78:28:2c:63:e4:81:3e:b8:98:
8d:3c:0e:ce:34:82:29:a8:7f:38:39:4b:6b:b7:ce:3d:b3:fb:
9f:cf:06:5a:b1:06:6f:c8:60:43:3d:44:a4:a9:f6:70:19:48:
9e:c8:26:8d:50:6d:77:30:67:d1:57:07:d1:10:eb:2c:3b:8f:
04:7d:12:f1:0d:5c:ae:a7:e0:26:0c:f0:82:ab:58:b8:07:74:
c7:80:38:56:4f:e0:4c:6e:1e:bf:12:27:03:e7:24:09:b2:32:
ae:93:a4:8e:d8:49:9c:fa:8d:e1:39:72:47:b9:fb:68:6e:22:
74:be:19:a7:6a:a6:00:cd:2a:0b:20:d0:4c:2f:4a:df:4e:0b:
14:f3:36:8b:44:a7:e2:c4:c0:20:1c:a6:03:55:85:d0:c2:67:
01:d9:37:f0:a2:dc:34:b8:4a:87:75:4a:b3:05:33:6c:53:f9:
01:84:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:17 2026 by rpki-client