
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier: ZGbU32KbB+E03HsgoBSoP4Fa+2y8j3SEmeQiCKOz0EA=
Subject key identifier: 32:4C:20:05:5D:40:E4:69:60:D8:90:A0:5F:7D:4E:5B:B0:E8:D6:01
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number: 01B7
Signing time: Wed 25 Mar 2026 03:13:06 +0000
Manifest this update: Wed 25 Mar 2026 03:13:06 +0000
Manifest next update: Wed 01 Apr 2026 03:13:06 +0000
Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: 8HrPlGCYsqflDbVY9zSV1B+zu5xbxqs2zLDgerCxbu8=)
2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: ebXBmrMowh/BzcI13cagAANQL2xXB2uTMEpfoJ7XUcw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Validity
Not Before: Mar 25 03:13:06 2026 GMT
Not After : Apr 1 03:13:06 2026 GMT
Subject: CN=69c352c2-5058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:9b:2c:e0:ad:8e:18:ac:7b:2b:9b:c2:e4:
2c:dc:56:40:2d:17:be:57:d3:56:e2:13:fa:bf:ac:
ea:d6:29:8b:ff:66:5f:ef:11:89:6e:d0:7b:b9:ea:
b2:66:00:80:8a:d7:eb:95:69:55:85:38:3d:bc:e8:
1d:dd:c7:82:01:d9:74:b5:37:4a:dc:63:c5:50:0f:
94:49:a7:40:e9:04:7f:e4:68:52:3b:6c:db:96:2d:
53:73:97:88:1d:52:b0:3e:aa:73:e6:3a:68:f5:98:
8c:a1:11:39:d9:b9:ac:3e:98:70:e8:83:36:17:70:
6a:ac:2a:23:a7:0d:54:f0:44:e4:fa:9c:bd:c8:de:
51:c7:35:26:da:a0:2c:23:13:6f:6f:00:af:6c:ab:
23:3a:e2:5c:93:89:c0:e5:d7:a1:66:ff:d2:fd:c3:
97:00:93:d7:74:16:53:e0:2c:6f:d1:18:9c:c7:ba:
29:c4:80:9b:0d:b7:fc:7b:fa:50:f8:08:1a:62:cc:
f8:9e:62:ca:01:2c:e6:20:71:c0:af:5b:63:2f:1b:
3f:ac:6a:34:bb:c7:2c:9e:7d:df:de:c9:74:97:ae:
d8:24:cf:3d:e8:f1:72:5b:9c:1d:95:1c:cb:89:0f:
0d:3b:57:e0:55:7b:a6:19:be:61:82:1d:fc:83:23:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4C:20:05:5D:40:E4:69:60:D8:90:A0:5F:7D:4E:5B:B0:E8:D6:01
X509v3 Authority Key Identifier:
keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:04:d8:f9:48:26:16:5e:fa:89:ac:65:2d:13:cf:f4:e2:5b:
f3:0a:d3:73:29:81:78:9b:3d:63:4c:9b:47:ff:0b:d3:a6:fb:
52:1a:8e:9e:7a:fb:cc:30:fc:f1:52:26:ea:48:64:64:ee:bc:
d4:9d:32:6a:df:08:94:3d:1a:d4:d8:db:2d:e3:e6:02:35:ff:
a7:68:08:cb:57:f1:3d:aa:c2:74:04:78:db:7e:35:76:47:81:
7b:aa:b9:83:39:0b:21:60:af:23:7a:51:60:0f:8b:2a:d2:15:
47:a2:60:4e:f1:3e:fb:b7:c8:b1:1e:a2:8b:d8:af:a5:26:6c:
a9:02:f2:35:2d:c5:b3:e5:cb:88:4e:1c:56:38:a6:e0:2e:88:
20:8e:49:b1:e8:0b:f1:2e:7f:ae:75:1d:6c:70:25:8f:46:41:
3b:5e:e3:ee:2f:89:4f:05:42:71:a3:ec:02:e8:c6:24:a0:1c:
d6:b2:5f:8b:2b:59:f8:5c:84:94:69:26:33:02:68:ac:39:ff:
dd:21:d8:5f:33:ba:b6:cd:af:b1:19:c6:27:55:db:9f:59:24:
d3:e9:6c:0c:54:1a:f4:09:5b:b8:5d:4b:b5:c4:ce:82:c0:13:
7d:a1:47:15:bd:7d:e6:ef:ba:0d:ca:f1:9c:f3:0e:51:8f:8d:
ee:0c:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:15 2026 by rpki-client