
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
File: T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json)
Hash identifier: zd3Wv8wly1mM7o4xW/HYWgu4O8KUeBNG/rx62FuGLqc=
Subject key identifier: 37:CE:24:59:8D:FD:CA:67:18:CA:0F:B7:64:34:36:6F:21:66:1F:3D
Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
Certificate issuer: /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
Manifest number: 010D
Signing time: Wed 25 Mar 2026 05:12:33 +0000
Manifest this update: Wed 25 Mar 2026 05:12:33 +0000
Manifest next update: Wed 01 Apr 2026 05:12:33 +0000
Files and hashes: 1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: 15miRH6neB0DzBUU/zbeMSs+YdreDqvwPcufsH7WdUw=)
2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: GWxvbbNMDfEq6GjtAEuqf8igE/KKZ5xAZH6r5owzQZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Validity
Not Before: Mar 25 05:12:33 2026 GMT
Not After : Apr 1 05:12:33 2026 GMT
Subject: CN=69c36ec1-cdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:ec:ff:6e:83:02:1f:3c:70:58:bc:ed:11:
2c:ef:65:31:be:3f:0a:b1:dc:e7:d7:2c:1d:be:ec:
22:af:f1:c6:5f:98:19:77:c3:3d:ed:29:17:c7:0a:
29:22:fc:59:2c:e8:1d:06:1f:9a:6a:3e:96:dc:f7:
a9:d0:c8:19:8e:55:15:9d:5b:fc:da:73:2b:28:3d:
b1:20:50:f8:29:11:3e:8c:14:af:cb:d8:76:05:4d:
9a:5e:0e:22:19:49:a2:8e:a6:c4:83:ba:82:f9:68:
5f:0d:0f:d0:53:e1:56:d2:82:21:be:3a:40:cb:61:
c8:10:44:63:27:77:e0:87:65:33:80:55:fe:83:12:
8b:79:a0:32:18:5a:ac:01:56:c1:29:b6:6b:3b:00:
54:5d:2d:cd:41:93:17:c9:72:6d:57:e8:b6:cf:53:
2a:69:b1:73:ab:27:73:53:13:3f:18:8b:15:76:7a:
62:0e:7c:d6:4b:c8:0c:e1:47:1b:8a:b7:71:78:03:
06:c1:80:c4:f6:03:a5:94:8d:4d:52:64:5a:b3:8b:
3b:ff:7e:f5:50:bd:04:af:98:b2:af:ec:21:a0:f4:
1a:93:77:b8:0e:0b:eb:62:47:80:8e:94:22:0a:f2:
7c:94:d1:41:9f:a6:ec:94:4c:e2:fb:1d:8b:a8:bb:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CE:24:59:8D:FD:CA:67:18:CA:0F:B7:64:34:36:6F:21:66:1F:3D
X509v3 Authority Key Identifier:
keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:0b:a6:a9:06:d2:17:cc:7a:bb:fb:b9:54:c3:2e:39:39:15:
1e:7e:ac:5d:68:0c:85:28:6a:89:35:76:fb:3a:2a:60:4c:ae:
c4:6c:f6:78:af:89:4f:4b:1c:d9:20:49:ee:95:9f:16:13:98:
a2:ab:fa:88:77:dc:fe:ae:ca:f5:73:b7:94:bd:0b:09:d3:f6:
11:29:73:06:38:98:a0:5b:84:7c:71:97:9b:38:bc:75:de:ce:
df:4e:7d:00:b4:26:2e:2c:ed:44:66:f3:69:72:76:02:dd:11:
50:0a:78:48:4f:66:18:8a:f0:87:37:88:c8:70:6f:3f:b7:61:
b7:a4:b7:dc:fb:da:04:85:c9:92:82:b5:91:b3:42:53:af:e5:
7f:a0:e0:0c:20:4c:10:1a:1f:a5:3f:6b:b4:ed:18:14:48:b8:
41:7e:ed:e2:40:db:01:8a:32:7a:b1:7a:c3:4d:f6:0c:3b:79:
9f:87:40:6e:57:5f:53:14:ab:1a:87:42:eb:ca:6d:7d:54:3f:
f6:ae:1b:35:ab:75:da:99:6d:87:f4:e4:e8:69:25:ba:8f:3f:
6f:9c:74:2e:04:73:f1:7e:4e:99:7c:fe:d3:4f:13:c5:e4:57:
c9:69:e4:b6:81:d8:dd:86:dd:df:be:38:9c:d6:59:e4:88:ba:
9e:84:35:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:00 2026 by rpki-client