
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json)
Hash identifier: vOcGJf5tdmuBxjSp6smOI8kSfVzFIXtraLud5B8RkcM=
Subject key identifier: D1:E4:43:82:DB:90:FF:B2:FE:5F:51:20:27:42:82:A8:3E:3D:E8:39
Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
Manifest number: 01C9
Signing time: Wed 25 Mar 2026 03:01:38 +0000
Manifest this update: Wed 25 Mar 2026 03:01:37 +0000
Manifest next update: Wed 01 Apr 2026 03:01:37 +0000
Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: BTQGXDBL+Eb0TAzysE0Bt+XzJY4pxx/X0NxRWdisw88=)
2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: uq1kihQpsHqPtfnJKhqjRrtt4j4NKFgy3qB8nhVLYas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Validity
Not Before: Mar 25 03:01:37 2026 GMT
Not After : Apr 1 03:01:37 2026 GMT
Subject: CN=69c35012-d7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:e4:b7:55:74:e7:12:16:b0:19:cf:d0:ac:
16:3e:2a:a4:40:89:6b:e6:1c:d2:d4:4b:1c:e4:49:
99:7f:3e:a1:cb:26:95:d5:b9:02:91:62:18:f6:8d:
f6:bf:ab:e7:ee:cc:7e:11:f4:f9:6d:f2:f3:65:9a:
2d:2c:86:6d:cc:cc:d6:e8:a7:28:e4:57:b3:4e:7e:
41:42:70:c1:21:f7:af:76:65:3e:87:2a:9f:be:61:
41:ec:90:e1:23:9a:1b:5d:46:a7:82:d4:ad:ee:b2:
8d:c0:d9:a6:c5:56:76:36:dd:f1:ea:5f:f4:bd:ce:
c1:30:ee:3d:ee:db:7b:31:16:09:10:fc:58:e3:2a:
7d:1e:7f:83:e1:3a:9c:6c:94:f2:2e:ac:cb:28:b0:
d6:52:0c:7d:77:2e:6e:15:01:97:a1:94:1e:74:84:
ee:71:b5:e3:fa:be:9b:9c:c8:3a:9c:8c:72:b0:58:
1a:ff:6d:9b:08:20:e1:12:8c:cc:0b:bd:ab:c1:6b:
60:29:8f:9c:16:45:8a:84:5b:21:a1:c3:41:2f:70:
ac:ac:a5:ab:bf:41:e9:08:0c:de:3e:06:02:86:ff:
c0:8b:e5:1a:b6:ed:98:36:41:b4:e2:ec:10:4e:76:
d9:d5:05:67:1e:9f:34:f8:c2:e9:c3:da:d3:15:b5:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E4:43:82:DB:90:FF:B2:FE:5F:51:20:27:42:82:A8:3E:3D:E8:39
X509v3 Authority Key Identifier:
keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:20:16:45:9e:35:f9:8e:5b:ab:5e:a9:c0:74:83:82:f3:3c:
66:5e:e3:0d:ac:47:6b:46:d2:c4:69:47:53:b8:f8:f8:1c:a1:
fa:32:e6:bc:fc:6a:57:b6:90:d4:15:d9:7d:4b:8c:4a:de:75:
ce:96:93:24:ec:a3:46:d0:47:43:bb:ea:e4:e6:b3:25:d6:07:
27:16:62:d6:b6:d5:76:7f:8d:a2:4b:cf:3c:80:e0:97:4f:ac:
bc:91:d4:33:03:f7:3a:e3:3a:f4:83:7f:bc:5e:e0:6e:3e:78:
22:ca:34:99:99:dc:a2:2b:d8:e5:4d:1a:9f:47:4d:18:77:0c:
88:5c:2f:cf:03:ee:95:db:6d:67:c9:89:69:f5:e8:59:7a:b2:
9f:e6:08:83:68:65:53:2e:81:65:94:72:6a:a1:c1:7a:1a:ba:
fc:08:10:f3:03:16:bb:d3:6e:1e:ff:96:07:39:ae:04:50:b7:
35:55:66:28:57:f6:d0:1e:1f:17:2c:04:f5:8f:50:9e:66:04:
1a:9f:af:ff:8d:6b:81:93:d8:0c:20:22:8d:75:f5:65:0c:ef:
93:9a:88:0d:37:e7:33:df:06:b6:3e:26:25:ca:63:eb:4d:17:
12:b4:c9:b7:db:91:e5:5b:3f:84:dd:c5:58:b7:4f:8a:e1:37:
bb:2f:37:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:06 2026 by rpki-client