
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json)
Hash identifier: 1yvkiYh8Ul3UgCJLdAXmwgPOFyy6M6yT2fRoqCmP/HI=
Subject key identifier: E3:DE:52:25:A1:76:E4:0D:B4:F5:D6:94:60:83:4A:D2:9E:1E:F9:F4
Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Certificate serial: 0CAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
Manifest number: 0C9F
Signing time: Tue 24 Mar 2026 18:20:36 +0000
Manifest this update: Tue 24 Mar 2026 18:20:35 +0000
Manifest next update: Tue 31 Mar 2026 18:20:35 +0000
Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: n82gCohwuFQC34C5/KDLn1x4ll1AVKcRHgwa+4ykUHA=)
2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: 0Hmli8aWk0dgV3lUCCWGP1GJukUHiPUwNOV3a1obzec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3242 (0xcaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Validity
Not Before: Mar 24 18:20:35 2026 GMT
Not After : Mar 31 18:20:35 2026 GMT
Subject: CN=69c2d5f4-a3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:cb:01:16:fc:43:8a:31:87:18:ce:cd:a7:
56:7d:05:b1:13:f3:3c:1c:5d:5b:e7:62:c8:9f:b2:
f0:3d:92:ae:7a:aa:cd:55:de:b1:ae:f8:2e:60:13:
56:72:1e:08:dc:35:45:e8:5d:e6:c9:9e:f3:96:d0:
54:9c:24:48:a3:7e:ae:2f:55:d3:51:97:0a:62:c2:
cc:42:90:95:1d:69:45:58:d2:9a:0f:4a:1f:72:81:
1c:23:6c:5b:58:40:e4:0f:25:06:e6:45:b3:85:ec:
23:e7:77:67:a8:98:53:53:ad:14:17:eb:cb:77:3d:
50:ca:83:36:c6:4b:6e:87:90:06:df:e4:b3:9f:59:
e9:bb:1a:aa:96:ae:6f:a9:f2:f8:e8:ac:dd:90:5e:
34:80:70:25:ff:8d:91:02:d6:8b:1d:c5:2b:87:b1:
64:20:92:47:b2:50:b5:84:fe:ea:c7:e0:af:e4:1a:
47:5a:94:ee:c7:f8:65:bf:82:19:28:88:20:4f:6d:
f3:8a:28:ba:22:8d:12:3b:c5:f0:0b:d5:b0:09:81:
18:7f:32:71:10:bb:41:67:ab:0b:d9:14:9b:c6:0f:
49:a0:61:c3:aa:e9:74:db:25:fc:e8:c2:c3:a8:a9:
b5:78:1e:d2:33:ad:2e:f1:c3:09:f1:90:21:79:c9:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DE:52:25:A1:76:E4:0D:B4:F5:D6:94:60:83:4A:D2:9E:1E:F9:F4
X509v3 Authority Key Identifier:
keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:ac:1e:72:f7:0f:11:aa:06:be:0e:d0:76:22:39:28:36:2c:
73:52:4b:f8:5a:02:6d:7b:87:0d:04:8a:6d:a2:dd:33:cb:76:
f3:e1:13:37:b0:f7:ad:36:9d:54:85:b2:c2:71:bd:74:7e:64:
08:29:d2:45:d7:1a:9d:b9:cd:a2:2a:ec:a8:45:23:8f:ca:c2:
f8:98:95:76:01:b9:7d:97:74:9b:a2:84:a9:26:46:0d:38:f6:
f6:53:90:5d:a8:5a:97:00:b5:5a:46:28:0b:16:78:b0:58:ba:
33:59:e4:c2:4c:41:5e:e7:f6:34:da:43:b6:dc:8c:7b:10:6c:
bd:c0:5b:35:47:c0:94:b6:1e:fc:ed:96:b6:ce:2f:58:68:21:
fc:22:75:7c:ed:99:00:95:e8:a8:fd:8e:b8:5a:9a:ea:52:50:
12:3a:71:39:56:66:97:04:d0:1c:d8:8d:9e:0a:0d:35:63:84:
2c:b6:6e:27:fb:52:2a:42:c0:0d:d6:81:c9:8e:a2:5c:de:54:
d1:66:f1:05:74:e5:74:66:b5:b7:0b:0b:6b:22:82:e5:92:8d:
00:aa:54:a8:58:b7:b2:b7:2e:b9:4b:38:f6:d5:db:e1:50:80:
c0:9e:90:12:a8:87:42:c7:b0:39:5f:79:63:d8:00:49:41:1a:
5e:da:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:41 2026 by rpki-client