
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
File: 40IvTt5eaM7JqqfjxuMnjHMOHnw.mft (raw, json)
Hash identifier: 2xnnsmU0ckP5ZyCMXamVvtSGPhP+gD/En2LhA0QZa9o=
Subject key identifier: 0C:9B:A1:B5:F5:82:F6:51:22:9E:D0:1B:08:ED:CD:02:91:86:8D:45
Authority key identifier: E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C
Certificate issuer: /CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
Certificate serial: 351F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
Manifest number: 351F
Signing time: Tue 24 Mar 2026 14:39:55 +0000
Manifest this update: Tue 24 Mar 2026 14:39:54 +0000
Manifest next update: Tue 31 Mar 2026 14:39:54 +0000
Files and hashes: 1: 40IvTt5eaM7JqqfjxuMnjHMOHnw.crl (hash: ZC1NGiZGeIB6lBhEupGJ3n9dseW55Iyk6TZc/bc91jo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl
rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13599 (0x351f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DA4, serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
Validity
Not Before: Mar 24 14:39:54 2026 GMT
Not After : Mar 31 14:39:54 2026 GMT
Subject: CN=69c2a23b-06b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:fd:de:e9:27:05:ee:d6:40:10:ee:45:ad:
5f:cd:b8:2b:23:bf:4b:41:5c:5a:ca:0f:8c:3c:e3:
b7:7d:a0:18:62:c9:5c:2a:c0:1f:4c:fa:9b:af:a3:
3e:cb:cc:30:d1:e1:ae:a1:26:8d:e2:6a:a9:af:d2:
b3:db:c5:34:48:e8:f0:29:5e:66:a4:86:5d:b2:18:
2a:dc:11:80:46:ac:56:63:16:32:86:43:c7:7d:40:
07:cd:3a:a5:7d:15:17:17:6a:f7:db:69:6f:b9:45:
78:2b:88:ab:01:fe:b1:6d:cc:e5:a7:e3:2a:90:f0:
34:cd:e9:28:81:cd:2f:62:de:cc:3a:3b:5d:67:e1:
e4:8a:39:85:ed:bf:fe:05:5b:bc:65:d5:7c:96:b5:
32:bb:c3:83:76:0f:2a:79:7a:66:67:37:8a:f6:1d:
21:72:d5:57:c1:be:97:ce:f4:3b:9a:2f:ef:59:29:
49:e7:8b:c3:20:f0:d2:4a:a3:ed:82:61:53:bd:62:
32:30:da:18:63:0c:ef:0f:cc:4a:35:2c:d8:34:69:
b1:ad:0c:0e:41:f2:c8:2c:b7:0a:66:7c:bb:4b:e6:
29:bd:20:5f:24:7b:09:c7:e2:bb:99:af:5e:c5:39:
1a:be:45:7b:1e:b0:a7:f0:39:28:ce:da:a0:cc:44:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9B:A1:B5:F5:82:F6:51:22:9E:D0:1B:08:ED:CD:02:91:86:8D:45
X509v3 Authority Key Identifier:
keyid:E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:d4:e8:b0:aa:62:a5:16:c0:1d:9b:a8:eb:ca:ca:5e:af:ac:
24:81:54:d3:d0:a1:ff:16:6d:2d:9a:83:ff:46:77:ad:c3:c8:
54:93:e4:01:7c:60:33:11:83:7f:19:d1:a2:ba:24:14:82:4b:
ae:06:e8:10:21:8f:91:cb:43:e8:5e:27:f9:34:45:9e:1f:f8:
a1:55:b4:11:0e:53:01:2e:0c:a8:51:5e:a0:49:1e:4a:30:11:
a4:84:f1:ba:09:46:da:17:ed:b7:76:d6:f0:a9:f2:08:fd:c8:
2d:e6:58:1a:cf:4b:4f:1a:d1:90:05:0e:c2:ba:d9:3d:9f:0c:
db:1d:37:b1:13:b1:e0:09:47:b2:3e:47:d8:e4:9d:bf:87:1a:
98:d7:b9:c3:3c:b0:30:15:64:a8:6a:13:86:4c:b0:3b:06:f0:
04:6c:38:4c:33:d9:ac:33:fa:c4:23:80:55:9d:11:79:4f:9f:
a1:a4:97:ec:8a:39:68:67:67:c5:e5:35:57:c2:b1:5a:24:2f:
2d:d6:53:40:1c:66:e8:65:18:2f:db:d8:7c:d8:3f:3a:5b:0e:
a8:26:22:0a:38:66:65:7e:81:a0:6f:4b:2f:4f:2c:62:3d:25:
b5:c5:47:c7:81:12:f1:58:e1:22:e3:5b:bf:dc:ff:a2:8c:67:
15:b7:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:20:11 2026 by rpki-client