
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json)
Hash identifier: 33mDg01ucppBE45N2jBstyWvaxFYBnZ2vEexnnpr27E=
Subject key identifier: 47:B6:FD:CB:09:49:11:61:DB:2F:3D:3F:4D:40:D4:A9:C0:08:B9:1E
Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE
Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE
Certificate serial: 3531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
Manifest number: 3528
Signing time: Tue 24 Mar 2026 15:04:27 +0000
Manifest this update: Tue 24 Mar 2026 15:04:27 +0000
Manifest next update: Tue 31 Mar 2026 15:04:27 +0000
Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: 0iWZHFQFgwYG3DDk6jglsMgugC/FXdP3UsTuC94TRAA=)
2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: HFdVNt4ZiF4R9zQBT6nCxIk7l9VcuWYDgKfRl1caTgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl
rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13617 (0x3531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE
Validity
Not Before: Mar 24 15:04:27 2026 GMT
Not After : Mar 31 15:04:27 2026 GMT
Subject: CN=69c2a7fb-7153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:c6:a8:3b:15:45:8f:62:e4:56:dc:12:e2:
66:7f:d6:f4:12:65:45:fd:43:57:08:27:37:15:a4:
18:82:8e:0f:89:d5:21:29:48:cc:85:30:9b:f5:c1:
27:af:09:17:22:00:44:09:5f:1c:d1:0a:7e:93:b2:
e6:51:58:34:2f:ea:98:9b:8b:e0:e9:bb:c4:c2:eb:
67:22:f9:20:4a:be:4d:96:97:f5:7f:9b:51:06:4e:
d9:89:83:f5:59:1c:0c:6a:39:01:e9:0b:c9:53:2e:
b1:0c:ad:2e:04:2d:5e:65:19:8a:4c:b8:da:df:3c:
2c:c0:3a:65:51:57:7c:57:41:3b:d3:9e:43:a5:67:
a9:b5:8e:15:ba:d5:01:08:aa:8c:b9:05:85:65:d4:
90:3c:9e:79:a9:f2:36:ed:ad:f2:8a:5d:d9:75:cd:
a0:9d:cd:fc:4a:d2:ab:e9:29:ea:41:de:f3:61:35:
bb:24:db:24:51:74:e9:2a:ac:be:a9:13:f6:4c:8f:
2c:d1:c8:e9:92:1e:33:65:0a:d1:86:11:b8:95:4d:
ae:56:ae:f3:66:7e:b2:bc:44:ce:fe:e1:d1:49:99:
57:2d:9b:25:b2:a4:77:41:7d:d2:21:b9:ec:98:f6:
55:eb:25:2d:4c:56:4b:ff:d1:42:b1:68:bf:6c:ad:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B6:FD:CB:09:49:11:61:DB:2F:3D:3F:4D:40:D4:A9:C0:08:B9:1E
X509v3 Authority Key Identifier:
keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:2a:a3:9d:68:36:68:4c:af:cb:d1:75:e3:df:68:d4:93:bf:
b8:bc:6c:b8:b5:eb:63:98:3e:a4:6f:5c:aa:83:b2:ff:f2:73:
c4:e2:c8:78:0a:9e:28:0b:75:2b:16:2d:df:f5:ed:40:b1:e6:
6e:f8:88:28:67:86:c7:cf:20:7b:bc:9f:b2:7a:bc:ef:a1:2f:
56:2a:60:46:ab:2e:c6:16:68:f9:64:ca:a6:74:f2:cf:28:43:
cb:04:92:e5:b4:11:53:53:5a:93:2a:2f:b7:1c:3c:a4:39:a8:
83:9a:7f:39:79:0d:77:25:bf:af:d3:1d:0e:f4:2d:8b:3b:6b:
7d:49:27:9e:62:4f:c2:79:aa:f7:1a:91:e1:3a:ec:9e:80:04:
6e:38:a7:25:5b:8d:18:dd:77:1c:2d:b3:6f:c9:5f:0a:1d:b9:
1d:6d:dc:be:56:7a:08:18:b9:5f:4c:92:c5:f4:07:ed:8b:ec:
0c:5d:1a:03:e0:2b:d0:b4:73:55:0d:ad:cf:48:c9:95:a1:5b:
f1:af:51:94:71:0a:05:d2:75:11:a0:69:ca:0f:19:83:a0:e4:
b1:33:5a:1f:45:3f:fa:67:d6:40:9c:75:df:1f:60:33:8a:dd:
c4:0e:35:fa:d7:c0:6f:15:33:94:34:ba:54:83:7c:20:08:43:
f7:c8:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:35 2026 by rpki-client