
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
File: s02Q9DN0N_l3bvB0le1r-joN4rI.mft (raw, json)
Hash identifier: C/1mJdArm9DsfM3JnrkpWXbUEaNST0ueDZyNYPdJc6U=
Subject key identifier: D3:5F:D0:40:E6:17:4A:FC:5D:60:9D:1D:21:F4:16:0D:A6:24:15:EC
Authority key identifier: B3:4D:90:F4:33:74:37:F9:77:6E:F0:74:95:ED:6B:FA:3A:0D:E2:B2
Certificate issuer: /CN=A9182509/serialNumber=B34D90F4337437F9776EF07495ED6BFA3A0DE2B2
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
Manifest number: 34
Signing time: Wed 25 Mar 2026 07:51:21 +0000
Manifest this update: Wed 25 Mar 2026 07:51:21 +0000
Manifest next update: Wed 01 Apr 2026 07:51:21 +0000
Files and hashes: 1: s02Q9DN0N_l3bvB0le1r-joN4rI.crl (hash: owVebRwnF2elC5/CwFC5nCPRKCNzFODYaYZuTFX6k6U=)
2: BE29D45EE48611F0890F621E446F56BC.roa (hash: hKsoH8oLZIQOc0nbhGD9YegDajB0Xhwk9YbaG8Vcg5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.crl
rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182509, serialNumber=B34D90F4337437F9776EF07495ED6BFA3A0DE2B2
Validity
Not Before: Mar 25 07:51:21 2026 GMT
Not After : Apr 1 07:51:21 2026 GMT
Subject: CN=69c393f9-134d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:24:d2:f7:1e:56:cf:56:45:3b:48:8d:c8:7e:
bb:76:c4:57:b9:bb:58:f8:21:f6:b5:ed:7b:cd:b2:
75:ff:64:6d:85:e6:55:8e:79:4d:7f:b3:a8:dc:05:
31:e9:f8:b6:18:38:4c:2c:7d:ac:19:6a:0c:08:0d:
64:53:31:5e:8d:84:9b:5e:38:aa:42:8a:9e:d6:a8:
f0:ba:5a:b1:59:25:e1:38:1f:4c:cb:d7:b8:fa:3d:
56:53:72:a9:1e:3d:4b:82:8a:59:9d:6a:8a:a1:ae:
e5:28:c4:17:af:b8:6f:83:06:d6:d2:21:a9:35:31:
16:e4:d6:c9:a5:ef:cc:8d:a1:f0:33:f3:a5:91:d4:
d2:c2:4e:04:24:b0:36:40:61:63:c2:fb:e7:b7:b4:
bc:b3:01:b6:fc:00:08:bc:6d:d3:39:f0:66:a0:fd:
6f:9a:5f:11:21:30:72:d4:52:59:5c:90:41:db:a4:
99:ea:ba:6e:b4:e8:5e:a9:da:2c:99:ee:41:ef:e3:
b8:90:1f:70:6b:60:d8:ae:7f:6f:e4:90:99:1c:fa:
a0:aa:0b:c0:b9:84:49:d8:5b:0e:41:a0:9a:77:56:
51:42:cb:e8:15:f8:45:6d:a5:14:df:64:ff:95:1c:
81:4b:20:ba:86:4e:c7:cf:81:9b:f5:b9:dc:91:b5:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5F:D0:40:E6:17:4A:FC:5D:60:9D:1D:21:F4:16:0D:A6:24:15:EC
X509v3 Authority Key Identifier:
keyid:B3:4D:90:F4:33:74:37:F9:77:6E:F0:74:95:ED:6B:FA:3A:0D:E2:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4d:58:dc:6d:1d:7a:92:1f:aa:a5:2c:01:c7:85:29:9f:46:
23:53:c2:8a:82:73:36:bf:90:20:82:82:ec:b8:b9:4e:22:ec:
6d:ad:75:b0:5e:a6:e3:b7:a3:e7:72:3a:20:7d:cb:a6:15:b9:
a4:00:b6:4e:81:27:62:50:d4:56:6d:8b:8d:ab:38:1a:23:4a:
c4:0d:4b:1d:62:1e:0b:d7:2d:bf:11:51:a1:9c:08:02:d0:06:
79:7a:d7:a7:78:f7:55:6c:2a:98:68:2c:01:e2:47:75:1e:4b:
9e:d9:13:b1:9c:f6:d1:15:44:b9:29:93:30:be:95:1f:89:a7:
fa:c4:9f:51:62:0e:33:ce:f2:91:ea:3e:00:92:a2:b7:61:6c:
a1:ce:ca:39:83:7d:57:7f:70:85:62:47:9e:2f:39:73:cd:44:
a3:67:ab:1a:ba:87:b0:23:55:71:b7:23:25:f6:77:43:3c:b2:
8b:5c:0c:6e:ae:1f:8f:c5:ab:b4:7a:f0:95:c7:df:f3:2e:f1:
2d:1c:5f:67:43:c0:29:2c:78:27:0c:66:b9:3b:ce:76:72:71:
05:58:6d:5f:1b:63:c7:ec:25:d6:11:30:20:49:6a:c3:66:35:
3d:9b:73:1d:c7:ed:37:1c:5b:6c:4a:a6:71:7b:f1:64:ea:49:
5c:36:42:9a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MjUwOTExMC8GA1UEBRMoQjM0RDkwRjQzMzc0MzdGOTc3NkVGMDc0OTVFRDZCRkEz
QTBERTJCMjAeFw0yNjAzMjUwNzUxMjFaFw0yNjA0MDEwNzUxMjFaMBgxFjAUBgNV
BAMTDTY5YzM5M2Y5LTEzNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD7JNL3HlbPVkU7SI3Ifrt2xFe5u1j4Ifa17XvNsnX/ZG2F5lWOeU1/s6jcBTHp
+LYYOEwsfawZagwIDWRTMV6NhJteOKpCip7WqPC6WrFZJeE4H0zL17j6PVZTcqke
PUuCilmdaoqhruUoxBevuG+DBtbSIak1MRbk1sml78yNofAz86WR1NLCTgQksDZA
YWPC++e3tLyzAbb8AAi8bdM58Gag/W+aXxEhMHLUUllckEHbpJnqum606F6p2iyZ
7kHv47iQH3BrYNiuf2/kkJkc+qCqC8C5hEnYWw5BoJp3VlFCy+gV+EVtpRTfZP+V
HIFLILqGTsfPgZv1udyRtSDZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU01/QQOYX
SvxdYJ0dIfQWDaYkFewwHwYDVR0jBBgwFoAUs02Q9DN0N/l3bvB0le1r+joN4rIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyNTA5L0E0OThCNjVFRTQ4
MTExRjBBQzQ2N0JDMTQyNkY1NkJDL3MwMlE5RE4wTl9sM2J2QjBsZTFyLWpvTjRy
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvczAyUTlETjBOX2wzYnZCMGxlMXItam9ONHJJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy
NTA5L0E0OThCNjVFRTQ4MTExRjBBQzQ2N0JDMTQyNkY1NkJDL3MwMlE5RE4wTl9s
M2J2QjBsZTFyLWpvTjRySS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBeTVjcbR16kh+qpSwBx4Upn0YjU8KKgnM2v5AggoLsuLlOIuxtrXWwXqbjt6Pn
cjogfcumFbmkALZOgSdiUNRWbYuNqzgaI0rEDUsdYh4L1y2/EVGhnAgC0AZ5eten
ePdVbCqYaCwB4kd1Hkue2ROxnPbRFUS5KZMwvpUfiaf6xJ9RYg4zzvKR6j4AkqK3
YWyhzso5g31Xf3CFYkeeLzlzzUSjZ6sauoewI1VxtyMl9ndDPLKLXAxurh+Pxau0
evCVx9/zLvEtHF9nQ8ApLHgnDGa5O852cnEFWG1fG2PH7CXWETAgSWrDZjU9m3Md
x+03HFtsSqZxe/Fk6klcNkKa
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:35 2026 by rpki-client