
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json)
Hash identifier: +seXYdfP09l18b18WQ7drR0SbxpPMyMOkSxqk7NWOn8=
Subject key identifier: 1B:15:23:BB:DF:7F:D5:DD:4B:3F:45:49:E8:A5:10:B8:23:20:3C:EE
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
Manifest number: 0228
Signing time: Fri 27 Mar 2026 02:14:57 +0000
Manifest this update: Fri 27 Mar 2026 02:14:56 +0000
Manifest next update: Fri 03 Apr 2026 02:14:56 +0000
Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: 1hOljzFs3kqJ+JQg+ByhQZx+9ZbJJROJ/Ut34hV4uXQ=)
2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: Oz1YYz2nVnKK3rUGjD/1v81WOTw67n/9ST3sUEa1Jz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Validity
Not Before: Mar 27 02:14:56 2026 GMT
Not After : Apr 3 02:14:56 2026 GMT
Subject: CN=69c5e821-090b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:2f:a5:cb:0d:de:43:83:fc:04:52:13:07:
6d:1a:fe:f8:ae:2d:86:e4:25:13:35:e7:c6:52:25:
03:b2:86:1a:78:f0:68:7d:98:15:64:5a:64:85:10:
96:d8:54:b3:07:f9:6b:a4:0d:39:cd:f1:4c:37:d3:
c3:d5:7b:3c:30:1d:31:e0:a8:e2:97:8b:f5:c4:04:
56:4c:30:f2:2b:56:da:50:ca:fd:47:67:6f:48:83:
e8:44:e0:a7:0c:6c:91:d6:26:7c:fb:70:18:6c:3f:
b7:15:4a:35:bc:4a:d3:c3:63:1d:9a:36:4f:18:cc:
46:86:35:d5:ce:14:1c:54:e0:67:2d:5b:38:bb:ef:
79:c0:49:28:76:3d:91:8d:46:63:5e:ee:97:53:03:
0a:38:d6:f1:66:1d:76:50:ed:b5:4b:95:2e:c0:0f:
ff:15:c5:15:d1:06:24:a0:77:0f:68:b1:9d:0a:e9:
67:2f:3f:39:c6:bd:a8:f1:c6:6f:6b:4c:10:be:47:
8f:9b:c9:90:e7:9e:7a:78:f1:38:8f:eb:23:eb:f9:
27:19:3d:b1:8f:91:3b:ba:23:c1:da:30:03:71:16:
61:4b:f7:78:04:61:ba:e1:d6:88:e3:a3:3a:28:b1:
83:78:53:24:e4:c8:7b:d2:56:35:62:b2:01:65:ff:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:15:23:BB:DF:7F:D5:DD:4B:3F:45:49:E8:A5:10:B8:23:20:3C:EE
X509v3 Authority Key Identifier:
keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b7:ad:2f:6e:39:13:44:61:50:15:a5:25:bb:50:f9:cd:9e:
11:4f:ae:0f:ce:25:c6:99:77:2e:41:db:47:22:48:98:d9:d1:
47:c9:b4:76:0f:f7:e5:65:df:2c:a6:b0:4c:b9:44:3c:ef:f6:
cd:0d:8a:16:bf:56:e3:31:f8:8d:af:1b:7d:01:7a:5b:f2:fb:
bf:8a:6b:da:bc:9f:62:4b:b8:c3:70:10:70:1b:0b:db:f3:72:
5e:66:41:2b:1a:fc:a9:8d:b8:d6:ad:42:0f:e6:84:7f:11:05:
03:02:9e:60:ab:14:7d:5f:14:1d:7b:d5:ab:4d:40:11:27:a1:
c2:b2:86:9c:7e:8b:43:fc:d0:12:47:b8:ed:2b:14:d1:d6:a3:
3b:da:25:c1:62:5d:72:0e:e0:be:14:67:71:a4:fc:da:37:27:
7d:4e:d3:ba:d6:e2:d4:3a:e7:bb:99:a3:b0:20:11:ef:4b:26:
24:60:4d:1d:d3:bd:e7:2e:dd:7b:d6:69:cd:09:39:4f:f0:10:
49:f6:69:5c:75:ba:75:64:ed:95:7b:71:f9:9f:ce:fe:5a:d9:
9b:85:77:55:4e:6f:ec:db:de:13:38:eb:7e:fe:1c:ab:cd:32:
db:9b:45:a6:fe:1b:99:dc:65:d3:81:1e:3d:50:7c:22:01:ed:
96:30:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:06 2026 by rpki-client