
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json)
Hash identifier: ifGioDNTuJdhEACBFjFBGH7L3OTSHuYl/GTo2IiaX6E=
Subject key identifier: 0B:1D:F6:4B:B1:32:AF:DD:07:0A:9F:91:B8:5A:75:67:98:96:88:0F
Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
Manifest number: D3
Signing time: Fri 27 Mar 2026 06:13:11 +0000
Manifest this update: Fri 27 Mar 2026 06:13:11 +0000
Manifest next update: Fri 03 Apr 2026 06:13:11 +0000
Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: sc4KnijgLjTqAPhBOsJNU11NC9aaZG+50YW8ZSdEDBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Validity
Not Before: Mar 27 06:13:11 2026 GMT
Not After : Apr 3 06:13:11 2026 GMT
Subject: CN=69c61ff7-13e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:88:bf:7f:37:71:f2:e3:2e:90:a8:53:f2:
69:ac:e1:23:bc:2e:bf:ee:2d:8c:5d:86:21:88:16:
68:ef:bd:e4:40:67:97:ac:36:75:94:cc:7e:69:dd:
17:6d:41:8a:ab:c9:7e:28:a2:83:53:3d:c2:25:96:
75:23:c7:b7:af:da:3e:25:94:2f:04:0a:f4:09:bc:
c4:96:ad:2c:6a:f9:0c:ca:70:6a:5d:1e:66:c5:be:
47:25:64:6a:dd:9d:e9:16:c5:16:4e:95:cc:ce:4a:
fa:58:2d:c4:f6:0a:8c:12:fd:66:b1:f5:0a:88:1f:
42:dc:83:f2:ad:d1:d3:64:33:35:ed:b9:62:1a:c9:
46:b4:c2:c3:51:fa:99:25:c2:67:f9:2d:27:af:e6:
f0:98:04:fc:bb:91:28:16:75:b0:97:bc:ea:ee:6d:
51:a3:f2:f4:96:ce:82:05:ff:67:86:21:5c:26:91:
b2:66:da:cc:a8:24:f8:35:1b:7e:2b:12:bf:f4:55:
e0:c9:ed:8f:fa:3b:d5:91:18:ce:ee:af:ef:5c:3c:
c3:3f:39:87:01:9e:4a:51:cc:3a:a7:86:a6:2e:3b:
82:4e:ee:d6:05:5d:16:72:e9:fe:70:55:81:59:4b:
c7:7f:db:67:66:61:68:93:7e:9f:7e:6d:5d:70:7f:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1D:F6:4B:B1:32:AF:DD:07:0A:9F:91:B8:5A:75:67:98:96:88:0F
X509v3 Authority Key Identifier:
keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:36:fa:14:13:13:39:f0:e8:8c:44:89:01:95:ba:bb:23:59:
52:96:67:f1:12:a2:f7:da:4a:84:3d:f2:65:9f:c2:3a:00:2b:
88:ae:ad:56:4c:b8:15:3e:bb:8b:78:01:ac:c0:3c:c4:bf:01:
a0:ae:9e:a2:56:f1:3b:22:93:ba:19:0d:e4:fa:09:06:48:a2:
61:50:0e:3f:c8:aa:53:10:2f:79:88:fa:21:8c:9a:d6:23:5e:
a0:ae:84:da:66:20:56:5b:07:db:32:54:37:38:5c:6c:7c:28:
81:7d:0d:d1:27:14:da:bd:de:96:5e:87:c2:88:7a:aa:82:8b:
33:a0:0e:84:0f:1a:4d:8b:cf:53:a2:c8:13:12:fc:0a:1b:6b:
6f:4c:18:0d:2f:59:b0:41:ed:14:27:6c:b1:0d:e3:ec:f6:4d:
4a:ce:8d:e7:1f:1c:2b:ae:ab:68:d5:d6:57:85:08:4c:b8:0f:
e1:ee:ce:94:61:43:5f:5f:18:ef:13:eb:8e:2c:89:51:e7:fc:
c9:63:dc:84:a3:ca:a2:a5:e4:f2:70:cb:2f:bb:ed:a2:75:ca:
77:00:08:b4:2c:43:b8:bf:19:f8:cc:d5:00:4c:11:39:4a:b3:
0d:b4:65:17:a3:aa:a5:10:54:a7:ee:a2:e5:cf:fd:9c:51:43:
e5:88:35:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:25 2026 by rpki-client