
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json)
Hash identifier: eZ9wCT52WNF5gvZNXuhJZtPA9esdrW5B62rO6DA4Dyc=
Subject key identifier: 0B:07:9B:68:C1:8D:3E:E7:F6:E0:90:0B:C4:8C:BD:82:E5:66:DE:FC
Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A
Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
Manifest number: 018C
Signing time: Wed 25 Mar 2026 03:42:35 +0000
Manifest this update: Wed 25 Mar 2026 03:42:35 +0000
Manifest next update: Wed 01 Apr 2026 03:42:35 +0000
Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: 0teW6ghczOheLGEhcJWuLYSAJJGIFM4ehqCSixmRw30=)
2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: Z1cqE+byBhamVYt8m6TD+SMQZ7V+S/UmeqhVRsfA3MA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl
rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
Validity
Not Before: Mar 25 03:42:35 2026 GMT
Not After : Apr 1 03:42:35 2026 GMT
Subject: CN=69c359ab-9439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:7f:c6:c0:e6:10:86:ef:ad:19:6b:6a:8f:
49:1c:9b:47:49:fc:9e:9a:97:96:9e:ed:2e:2b:4f:
38:ff:02:bc:60:3b:04:ab:90:0d:56:44:55:e2:5e:
16:13:96:4f:1b:13:46:3c:fa:b2:b9:62:43:fd:5d:
74:12:53:79:db:9f:20:5a:62:bf:d2:e2:5d:6c:cf:
e7:80:ba:86:e1:a6:3a:c7:c8:5f:7e:c0:18:23:ef:
40:12:27:bc:fc:b3:5b:b9:8e:57:03:c2:b8:29:a2:
14:8f:85:12:82:f2:0d:21:f0:89:b9:2e:15:bb:53:
3a:fe:e8:00:b6:5e:67:7e:ac:27:58:33:08:ac:9e:
70:2c:0a:6a:f2:c3:e1:a4:1a:26:21:19:8b:2a:9f:
c3:48:94:a6:d7:ee:2b:a8:7e:dd:19:a0:b3:9c:5a:
4e:db:f8:9e:dc:d7:10:81:d8:b0:50:f6:87:38:9e:
db:88:7d:6e:de:7f:c7:3e:08:70:25:a1:41:a7:75:
76:cd:c0:95:55:eb:62:05:1a:4e:48:92:7d:e8:63:
a7:8f:16:80:2c:28:9f:5a:34:1d:98:73:b7:bb:96:
03:5b:db:4e:6c:bc:e9:97:e7:58:60:26:d7:00:c6:
61:25:f2:d9:08:31:70:ad:ce:d1:13:00:7f:b6:8a:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:07:9B:68:C1:8D:3E:E7:F6:E0:90:0B:C4:8C:BD:82:E5:66:DE:FC
X509v3 Authority Key Identifier:
keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:88:2c:4e:98:2b:87:0e:95:33:f0:bc:e2:52:c0:61:9b:c0:
79:29:da:de:e7:f4:68:58:ca:be:27:db:fe:af:5f:be:95:30:
06:1c:6b:80:35:f2:85:83:56:df:cc:db:47:3c:af:c6:b8:cd:
f3:59:d8:8d:19:27:92:fb:44:cf:4b:ef:08:9e:44:d6:0d:fe:
ef:5e:d2:1a:c9:56:ee:69:df:c6:11:9f:a0:fd:a9:d7:8b:c3:
ec:70:c0:29:ce:3d:2f:7b:65:78:a2:02:78:80:ea:5b:24:b2:
fe:80:0c:d7:e4:d7:97:2c:b7:30:b3:a5:1b:12:b9:8a:55:30:
17:16:16:e8:c0:09:c8:da:7b:70:7a:3c:93:2a:5d:a5:64:87:
94:c0:14:d8:e1:01:8c:b2:bd:07:51:dd:a9:4d:76:20:fb:a9:
c0:e7:06:7e:3b:8e:27:c7:c3:91:62:b8:0c:49:74:11:f4:8e:
5a:c6:9b:64:db:c8:86:41:d8:49:da:65:1e:ce:88:4a:ab:e0:
84:0d:4e:ff:af:79:61:90:0f:77:6b:19:a2:c7:dc:c6:f2:d6:
cc:c0:5a:e8:51:2a:20:d8:64:cb:0b:63:bc:ce:bf:69:d5:4c:
b8:d2:51:19:23:62:6c:a7:9d:43:2d:c7:cd:31:c9:b3:7d:3d:
91:de:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:42 2026 by rpki-client