
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File: RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier: dacPHrNb9WVwx+yNZ22QRooVz9Fqn15vrfj8MV2CrZc=
Subject key identifier: E0:F2:F1:34:F6:5A:8C:7A:32:02:92:40:27:12:B3:8F:80:1E:58:8E
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer: /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number: 0257
Signing time: Wed 25 Mar 2026 01:40:09 +0000
Manifest this update: Wed 25 Mar 2026 01:40:08 +0000
Manifest next update: Wed 01 Apr 2026 01:40:08 +0000
Files and hashes: 1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: 1Y7kOz9MsiEDHgiATQTYSokWQJsY2VhpeqGU2fe3WrE=)
2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: evtrgH99xTRhsjxDYSVy8xCMMoeXXNDwtZDEk4wJBb0=)
3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: 8Xdi8ir9IzionCTHsxTwuX8olpBr+epxWoFk8JYRHpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Validity
Not Before: Mar 25 01:40:08 2026 GMT
Not After : Apr 1 01:40:08 2026 GMT
Subject: CN=69c33cf9-c2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:b2:cf:b8:60:e2:09:f5:9f:6f:52:21:da:
02:9d:32:5e:62:17:a7:55:95:c6:ae:7f:00:8c:ae:
76:03:7c:a7:3b:a0:df:a5:2e:85:20:0d:0c:c7:59:
54:0e:a1:55:03:ae:cb:f6:67:d4:f6:5b:8c:1f:47:
1c:64:28:66:90:7c:5a:dd:98:a1:ed:1b:4f:d6:ae:
9a:ec:43:fb:fc:97:74:bc:70:59:2a:67:2f:78:3b:
79:14:34:c4:55:70:48:64:f0:57:22:5a:41:c6:e4:
d7:d5:f2:42:f9:1f:02:42:64:89:44:44:af:7d:80:
1c:34:ff:11:1b:51:27:6e:2c:05:56:df:68:46:c0:
b6:1a:b7:c6:f1:d6:52:e2:fa:34:16:ac:9b:aa:e8:
70:d6:79:cd:e9:29:26:f7:25:81:90:44:5e:d0:f8:
2b:74:a2:4e:e6:46:09:c6:12:22:eb:13:1c:f8:ca:
dc:62:29:b4:e9:a9:25:f3:31:30:13:03:ac:96:d2:
ac:18:0d:5a:e9:5d:0c:fc:a5:e8:15:25:f0:46:07:
15:be:7f:b2:f4:b4:96:33:a4:eb:4b:8d:3e:09:e7:
8d:df:5a:0c:a2:f9:5e:2a:16:10:cd:9f:81:b9:4c:
b3:3f:9e:3e:8a:50:1a:b4:49:68:d0:0b:b3:59:c4:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F2:F1:34:F6:5A:8C:7A:32:02:92:40:27:12:B3:8F:80:1E:58:8E
X509v3 Authority Key Identifier:
keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:14:ac:a9:f5:4d:ec:d3:cd:d4:d6:e0:06:60:9e:8e:90:22:
8d:1f:9b:92:ad:4f:bf:5b:6c:9b:78:bb:78:a6:90:90:48:d4:
9e:19:cb:53:0b:fb:91:a8:6a:81:e0:b8:71:92:f8:b9:91:ae:
86:03:da:8b:4a:fe:85:38:12:fd:ec:38:3a:a4:de:a1:88:23:
6b:b6:5c:8f:54:cb:9c:97:b0:31:d3:a2:bf:55:e6:78:ab:c6:
40:21:56:e9:27:1d:a9:10:87:62:4f:d3:f3:33:26:c2:96:26:
dd:c9:92:c3:e0:d6:60:51:fc:66:b6:3b:0b:78:a3:ad:aa:f2:
d0:49:5d:af:87:1e:9f:77:46:4a:c9:48:96:01:c9:d0:fe:75:
52:8b:5c:f6:c2:3d:97:31:2d:bd:1e:5e:db:c9:7d:a7:3b:9f:
ac:06:8e:9d:07:ca:61:67:f4:94:17:32:a0:ce:f8:0a:76:80:
2c:24:16:d8:b5:0f:cd:8f:a8:4d:83:39:fd:43:8c:f2:4d:e1:
32:9f:c3:73:98:19:d7:d3:eb:18:0e:84:9b:a6:0e:cf:2e:cc:
61:20:22:92:3b:65:7b:43:95:86:e9:cc:e0:af:eb:45:62:c3:
3d:b0:01:df:73:33:da:7e:91:de:ad:23:d6:ce:d2:26:90:ad:
4e:6c:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:49 2026 by rpki-client