
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
File: mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json)
Hash identifier: KOcT7TR3pn0CERnkrWDIlQwN1RP1hNhbwZPOsTYStbo=
Subject key identifier: 01:87:33:DB:9B:84:6D:50:2E:8F:77:DB:03:25:E4:E0:47:1D:C1:ED
Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
Certificate issuer: /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
Certificate serial: 05BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
Manifest number: 05B9
Signing time: Thu 26 Mar 2026 22:55:22 +0000
Manifest this update: Thu 26 Mar 2026 22:55:22 +0000
Manifest next update: Thu 02 Apr 2026 22:55:22 +0000
Files and hashes: 1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: ogG9rC9WwurptQ+UTNCcyW5yfimiJgn1fAvA41FWWjI=)
2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: KzwtQ/QRkYsa+yNR5o/R7fqe+y8xhB7fwb4PWs0FRss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl
rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1471 (0x5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
Validity
Not Before: Mar 26 22:55:22 2026 GMT
Not After : Apr 2 22:55:22 2026 GMT
Subject: CN=69c5b95a-b69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:b2:cb:ee:a5:02:2f:eb:28:a8:b0:d1:b6:
d4:d7:bc:05:96:e0:c6:d0:95:2e:76:af:0c:8a:06:
bf:7d:7d:91:c1:11:72:3b:fe:c6:c1:da:39:d7:31:
2b:fd:87:8c:a0:d6:e8:fe:6d:cb:dc:26:c7:99:4f:
ec:b3:f3:b0:c3:e9:aa:8a:8a:51:00:76:0d:c8:f8:
99:a0:65:e9:22:83:c5:22:d4:30:fe:1d:57:c4:2c:
94:25:d0:64:c0:50:3f:ce:4d:59:ad:0e:bd:32:3c:
a0:99:f0:94:e2:a5:e3:3a:89:d7:cf:23:50:8c:58:
c2:0f:cf:48:d7:0c:99:59:cc:38:2e:e8:ea:3c:72:
85:9f:e5:b7:04:30:99:2b:ba:a1:e9:94:15:3c:63:
90:a0:9d:b4:46:dd:fa:ba:6c:77:91:b0:3d:99:9c:
e9:ef:d1:4b:91:4a:f1:a8:db:35:6d:83:17:b7:d9:
27:f0:fd:bb:31:fe:85:15:00:05:59:89:38:d7:d5:
77:fc:12:ac:92:09:71:01:62:7d:8f:be:72:34:1c:
f9:e9:a3:65:20:aa:33:63:0f:38:3c:f4:d8:e6:c8:
15:83:2a:37:69:96:dd:e9:68:f4:41:50:a0:71:9a:
0a:b9:ce:2a:41:90:33:23:b2:e4:6f:8d:96:a5:73:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:87:33:DB:9B:84:6D:50:2E:8F:77:DB:03:25:E4:E0:47:1D:C1:ED
X509v3 Authority Key Identifier:
keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:49:b9:71:71:6e:6a:87:91:89:ad:ca:f0:96:e5:7f:0a:fc:
c6:19:75:9d:d7:40:ee:c4:55:2c:b7:cb:a8:18:e6:65:f5:e5:
f2:6a:6f:53:e0:83:dc:7b:84:87:bd:92:0a:dd:1e:82:79:b8:
cf:68:c5:74:cc:3e:61:59:cb:95:3d:dd:89:c6:f5:b7:b7:f9:
ad:6b:45:7c:71:54:80:e7:0f:38:fd:50:5e:01:17:b4:2b:5d:
8e:9b:92:91:5d:c9:2b:73:2f:48:34:02:48:5b:be:a1:d6:46:
4f:e0:94:74:3c:57:75:1d:c2:d6:db:95:76:22:fb:1e:ff:a1:
b0:1a:bc:64:52:65:e4:c1:71:94:2a:e8:95:ea:dc:3c:67:f9:
39:a4:44:fa:5b:36:19:a0:89:d2:a7:ee:cf:aa:cf:3b:b2:93:
4b:92:51:3e:bb:a1:f5:fd:3d:6e:ed:04:d8:32:5b:1f:f3:3c:
c5:82:15:06:8a:6c:85:d6:cb:45:46:ac:c6:28:c8:a1:f2:95:
5f:3f:0b:f8:6a:c5:80:f0:0d:61:4d:ee:af:3b:8e:c0:a9:86:
be:18:4b:21:6b:7c:a8:71:4b:f0:54:1b:c4:5a:df:8e:85:50:
ee:e8:f7:53:03:71:1b:aa:c7:f7:3d:70:13:9a:7a:e5:e1:03:
61:6a:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 11:34:05 2026 by rpki-client