
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
File: RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json)
Hash identifier: SlJP9DMBSspQ0MlWcbXVXhjo3FTzgdlaZPUuEf8aoqk=
Subject key identifier: 79:90:13:7F:39:A3:C4:3E:16:CF:83:AB:87:9A:0B:4E:F2:7F:66:FF
Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55
Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
Certificate serial: 03D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
Manifest number: 03C9
Signing time: Fri 27 Mar 2026 00:21:43 +0000
Manifest this update: Fri 27 Mar 2026 00:21:43 +0000
Manifest next update: Fri 03 Apr 2026 00:21:43 +0000
Files and hashes: 1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: BqWPcVG9Xr3e4VeIep2bwYNzha5750bjRYFYzeyw1HY=)
2: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: vd7/c73lLNTzKiOupkJvInFXPhKY9E+Gw/hTf0zKkVY=)
3: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: HbxNhJfwCG1ujU694+Ro5Mhy7fzReoL73klO5RKGIM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl
rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983 (0x3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171235, serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
Validity
Not Before: Mar 27 00:21:43 2026 GMT
Not After : Apr 3 00:21:43 2026 GMT
Subject: CN=69c5cd97-a547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:ac:87:4e:de:ae:bf:57:f6:ab:bc:79:a6:
3e:dc:6c:04:a3:93:d5:68:b8:d6:9a:48:3f:e1:16:
fa:43:04:08:1b:70:d3:d1:cf:4e:b8:ca:66:d0:97:
5e:3b:fc:e8:0d:46:23:99:f1:2c:36:19:0e:d0:83:
d5:2e:a4:46:4e:c9:05:95:5e:7b:b2:bd:4e:9f:66:
c8:74:4c:36:75:05:66:74:58:0e:af:d3:c0:83:1a:
db:af:ff:51:c3:8f:88:32:02:a1:63:50:1c:7e:ad:
d7:f9:3f:3b:22:90:1a:f5:1b:91:c1:e0:36:62:56:
91:c5:b1:c0:eb:79:cf:7e:f8:ba:d0:7f:2c:22:72:
0f:5d:c6:8d:8c:a4:76:de:d0:e3:18:82:97:26:34:
c5:d0:06:bf:7a:42:3e:c6:98:4b:ab:7f:43:d6:f3:
67:6e:f3:b6:e1:5b:24:93:07:5d:38:b4:db:f3:74:
bd:81:a8:e3:66:eb:2b:79:06:80:7a:d0:d0:7f:7a:
4d:4d:96:2f:27:81:fd:6f:6c:61:96:9a:8e:6d:c6:
82:61:7e:7d:75:87:c5:ca:2a:44:7b:78:55:87:17:
d7:8a:50:b9:f0:37:8f:ce:75:66:89:4d:8b:48:6c:
45:2f:0e:60:08:e1:87:e6:f4:1f:55:b8:55:1a:44:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:13:7F:39:A3:C4:3E:16:CF:83:AB:87:9A:0B:4E:F2:7F:66:FF
X509v3 Authority Key Identifier:
keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:38:1b:92:7a:e2:c9:46:4a:25:bb:56:39:d6:13:6f:2f:54:
06:56:4d:a5:b1:88:38:e9:b5:1d:17:66:e6:b8:d4:f7:b5:de:
d3:67:30:bd:1e:f9:ed:53:a2:3f:ae:ec:07:71:d7:68:cc:8e:
f9:93:3d:5e:70:3e:47:cf:b6:cb:d5:b5:af:c4:fe:ea:9d:63:
bc:ca:6c:99:23:ce:3c:d0:8e:2b:aa:ca:52:61:0c:9a:ae:df:
57:f2:a8:26:5c:72:c8:43:f0:64:05:47:7f:57:98:bc:d3:42:
78:10:00:5a:2f:13:8b:4a:36:d0:a9:c4:c1:a0:a4:40:d0:3b:
6e:70:eb:7c:6b:0f:53:53:20:c4:3c:df:2c:7e:10:60:48:1a:
87:b0:0e:84:db:4b:cc:c8:25:72:7c:cb:fe:ea:f4:3a:c9:c5:
8e:81:54:97:14:17:70:cf:99:78:20:db:39:ad:12:52:2e:c2:
94:1b:65:59:8a:62:e5:24:a2:e4:3c:f9:63:a8:43:1e:6e:3f:
cd:f7:a0:7d:08:a8:c7:c7:60:37:40:71:c4:1e:b9:63:3c:f3:
5f:39:b1:15:2b:9c:54:56:4e:47:01:6b:56:5e:c5:3d:3b:c0:
db:3a:eb:0c:91:2b:ca:ed:e0:03:83:13:90:6d:d2:a7:15:3d:
8d:53:c0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:49:23 2026 by rpki-client