
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
File: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json)
Hash identifier: TwKGRdeSZ27vU6s8/1gPHvUPqXgDr+dDMzCOYgJ5VVo=
Subject key identifier: E3:C3:BB:1B:69:49:62:9E:13:C1:02:1D:20:42:4B:98:2F:3D:56:DA
Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Certificate serial: 352A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
Manifest number: 3520
Signing time: Tue 24 Mar 2026 15:05:10 +0000
Manifest this update: Tue 24 Mar 2026 15:05:09 +0000
Manifest next update: Tue 31 Mar 2026 15:05:09 +0000
Files and hashes: 1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: seaqL/EeL8WFOPsx5hX5uiC7x2UkYvlFnqPoXiiEr2o=)
2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 7GSQDTT9lMYmgzXavnFlTfzMx9O0vxKB1jx7qYaBTfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13610 (0x352a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Validity
Not Before: Mar 24 15:05:09 2026 GMT
Not After : Mar 31 15:05:09 2026 GMT
Subject: CN=69c2a825-d625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:96:c4:d0:4d:98:7e:6a:91:be:a8:12:50:
ae:60:4a:13:a5:ba:d0:01:21:85:fa:31:6b:7b:54:
19:ea:b1:81:fa:de:55:27:56:98:b1:51:58:c6:91:
2d:72:42:16:59:8f:f1:be:63:8a:aa:14:bd:53:c2:
af:e1:d2:25:d9:be:73:f9:7a:2c:37:f7:70:5e:1e:
c3:25:d4:d6:79:c7:80:31:57:fa:7b:d2:24:64:23:
2d:b4:47:c3:9c:3b:6c:1b:8a:4b:6c:da:a4:fe:95:
5f:82:ec:51:0b:d8:a4:f9:60:5d:ec:db:70:0e:86:
e9:71:83:39:3a:10:b9:39:9c:9a:1c:4d:ee:7c:ce:
5d:c7:6c:5a:ca:55:10:21:2d:88:3c:17:34:2b:8c:
30:2c:38:65:a3:ed:2f:0b:de:95:18:af:81:9b:96:
fd:0f:57:5e:7a:c2:5e:83:a6:42:3c:48:91:17:4e:
74:bb:c2:09:0f:be:ae:89:97:57:ae:96:f4:e5:09:
ba:c3:56:50:3d:70:2a:96:35:95:e1:49:65:03:de:
86:a1:2b:68:44:5c:5f:a1:c2:7c:31:4d:a5:a7:4f:
95:6a:94:4c:b1:67:5d:93:f8:80:0b:0a:9c:81:66:
71:37:b0:29:90:ec:93:79:47:85:03:d1:ca:c2:47:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C3:BB:1B:69:49:62:9E:13:C1:02:1D:20:42:4B:98:2F:3D:56:DA
X509v3 Authority Key Identifier:
keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:42:7f:5b:24:f8:4c:08:f9:55:e0:29:a9:bf:68:a3:fc:e3:
32:0e:37:e3:c2:9e:95:ab:6b:cb:9e:a6:5f:98:f4:b1:1f:29:
b0:6e:0a:3e:5a:0e:1f:f9:9c:a6:a0:0e:eb:a4:ad:33:9b:df:
60:ee:89:f1:d8:e9:6a:e7:cb:12:1a:f3:28:42:dc:63:53:51:
ae:91:32:32:19:50:e6:74:df:95:80:6d:7e:66:54:4d:d6:ba:
24:e2:fb:68:a7:3e:ee:28:12:e5:40:5b:c3:7c:70:aa:5d:65:
01:31:05:fc:2c:75:76:1d:df:20:9b:88:6a:10:90:a3:85:7a:
37:9a:bb:a8:1e:b9:a6:66:32:8c:d7:e5:14:8e:08:3e:cf:11:
0f:fd:33:d3:81:fb:78:e4:b5:1a:b2:4f:c1:35:33:b5:b3:14:
ef:1d:4b:21:14:49:27:b4:1e:14:fc:46:f7:d3:05:25:76:6a:
36:15:84:89:03:22:cc:d9:b8:37:aa:cb:71:9a:d3:6e:0f:8f:
8c:84:a3:30:4d:fb:ac:10:d2:1f:3f:d6:43:50:41:67:10:55:
0d:cf:00:e7:b4:4d:6d:bf:b0:5b:0c:64:f6:47:55:ff:47:2a:
52:d1:6c:f1:bd:bf:e4:90:16:9b:0c:af:93:3a:0d:65:d2:2c:
ed:86:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:23 2026 by rpki-client