
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
File: mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json)
Hash identifier: lBgR3JXaZl2uqnOxtdtF8p7LguyYYdlOcbSR3LksMZY=
Subject key identifier: E4:09:99:47:FA:FF:96:11:08:93:A2:B8:3A:1C:EF:18:92:6B:CE:79
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Certificate issuer: /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial: 125B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
Manifest number: 1236
Signing time: Tue 24 Mar 2026 17:01:12 +0000
Manifest this update: Tue 24 Mar 2026 17:01:12 +0000
Manifest next update: Tue 31 Mar 2026 17:01:12 +0000
Files and hashes: 1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: uqLVU26SB3vX7uHKT+OiHsx8zCa2lzhfkg1fuL56GN8=)
2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: V0cr8aX14uWEEWz5HgA49PAr418Rwt7O1IgwtljgIiE=)
3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: uw3x4cCrEOXVGSx9HLNoaCGi5i7d3mdJuRAyyNS0hCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4699 (0x125b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Validity
Not Before: Mar 24 17:01:12 2026 GMT
Not After : Mar 31 17:01:12 2026 GMT
Subject: CN=69c2c358-39d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:1d:42:5d:c5:6e:1a:a8:7b:9a:c2:49:e5:
52:e3:a2:6a:a8:d1:a6:4b:c7:47:5e:17:52:e8:d7:
79:c1:80:eb:52:a0:2e:d8:ec:52:bc:5f:d0:68:e7:
3f:29:aa:db:ea:84:17:8b:03:46:f9:f3:c7:7a:b2:
d1:7f:52:2d:dd:25:92:06:37:5f:56:a6:7a:e7:b8:
33:d6:d1:ab:1f:40:44:10:54:8d:db:66:06:1e:bf:
c1:50:bf:0f:24:8e:e3:f6:e8:4b:1a:84:7a:93:62:
a7:50:4b:1e:c6:29:62:58:ca:00:8a:e7:d1:ca:b2:
05:fd:69:84:1d:7c:1c:1e:a0:49:d7:26:ea:25:4e:
06:ab:e0:ac:f8:d9:d5:0e:5d:b9:04:b2:94:e0:34:
7b:71:e1:6f:76:57:0f:cb:55:7b:82:96:2a:66:53:
28:57:34:2a:a4:ce:f7:2c:7c:65:85:ef:8e:05:8d:
be:cc:ac:72:46:02:7d:35:d7:cb:85:32:fd:c1:93:
12:29:ad:92:80:bc:f4:e1:a8:b7:c8:93:9a:1f:03:
c1:b2:b5:34:aa:ac:55:43:c8:02:80:99:c8:45:09:
e2:d0:08:7d:67:6b:b9:49:38:ae:52:4c:7d:ec:7d:
a5:80:c9:91:69:d4:ae:db:66:4e:1c:40:de:cc:6e:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:09:99:47:FA:FF:96:11:08:93:A2:B8:3A:1C:EF:18:92:6B:CE:79
X509v3 Authority Key Identifier:
keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a4:c3:52:68:69:7b:fc:d9:cf:6b:71:fa:a1:61:e7:6a:b3:
a9:55:45:df:40:0b:73:0b:ed:ba:90:44:f0:30:e4:39:4c:67:
00:aa:02:8a:b0:22:e8:ba:83:a3:fa:81:1f:26:0d:7c:1b:82:
09:19:0a:1f:87:69:c6:4c:1b:02:26:03:bb:32:db:ee:f0:14:
2b:17:e4:9a:24:b0:b4:8c:86:67:4b:2c:1d:f2:40:2a:74:cf:
d6:ca:78:70:79:81:e8:ea:78:3f:84:d9:5c:73:cd:bf:74:b7:
83:69:b7:d5:4d:26:d2:91:ee:39:cc:d6:30:49:aa:b4:c8:f4:
b2:75:d7:f7:5c:3a:ad:1a:48:23:bc:75:e1:67:78:78:49:59:
cc:fb:3f:be:33:4a:4a:01:99:7b:e3:65:8b:46:e8:ed:bb:35:
3e:33:20:16:55:08:15:07:97:d2:66:ba:a8:b7:6e:67:79:60:
70:70:d2:d2:0c:1c:3e:87:e7:de:94:1d:11:1e:18:2b:13:33:
fa:f8:75:18:05:48:3b:fb:09:9e:f7:51:ac:7a:f2:01:b5:6d:
7e:5d:63:fd:cb:37:c9:50:a3:4e:06:2b:7a:21:33:1f:93:31:
05:6e:b3:f9:31:a3:a2:f5:7e:e8:b1:6a:8b:57:6c:77:21:6a:
5d:fc:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:13 2026 by rpki-client