
$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json)
Hash identifier: GvpnRp0X05nuhh3uy1qcKvTC7114mI+RJpITZ1IzFsM=
Subject key identifier: 57:BC:20:5F:41:67:86:0C:76:FF:06:A9:C5:7E:15:C3:61:09:34:81
Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Certificate serial: 08F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
Manifest number: 08F0
Signing time: Tue 24 Mar 2026 20:06:19 +0000
Manifest this update: Tue 24 Mar 2026 20:06:19 +0000
Manifest next update: Tue 31 Mar 2026 20:06:19 +0000
Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: +wrFSBMZjV0dlHEfVnadC82ZkaEybA7zhWsGYpN/in4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288 (0x8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Validity
Not Before: Mar 24 20:06:19 2026 GMT
Not After : Mar 31 20:06:19 2026 GMT
Subject: CN=69c2eebb-84ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:14:ae:f8:55:37:9d:eb:16:c3:20:19:c2:
cb:ca:d7:de:60:b6:37:f3:07:9f:04:55:09:40:f8:
a3:62:9e:f4:dd:73:49:a6:2f:45:0c:6f:10:6f:6f:
3b:a5:ef:57:47:41:64:46:5d:1d:5f:29:fc:27:75:
c3:64:8e:96:e8:15:a9:f4:08:80:92:a6:9c:87:bf:
96:ea:d6:e2:04:0d:76:20:b5:cb:70:45:80:77:98:
d5:d4:75:64:90:17:13:a4:db:ea:7a:7f:f2:84:5f:
fb:79:31:45:62:27:0c:2c:36:5b:54:95:7f:b0:0e:
71:01:9d:bf:84:9f:34:e3:17:5a:25:b8:58:ba:8c:
6f:44:e3:dc:99:74:dc:f9:95:cd:ae:77:da:82:4b:
06:09:e4:79:bf:1c:9c:07:32:d7:bd:a9:f4:e8:43:
3a:05:0a:78:44:c7:fc:aa:ce:6a:d0:87:cf:8e:92:
a3:e2:9c:a2:04:6f:a3:72:e9:8b:d7:52:62:5b:08:
ca:31:1a:a1:ab:95:7a:7d:52:0c:ac:b1:6f:22:e2:
a9:f8:9e:75:1a:51:0e:31:37:c0:a8:d9:f2:f0:17:
b6:02:35:58:95:40:81:5f:de:e1:a2:37:c1:bb:70:
88:ad:96:4c:c7:47:47:90:84:fa:99:20:95:de:57:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BC:20:5F:41:67:86:0C:76:FF:06:A9:C5:7E:15:C3:61:09:34:81
X509v3 Authority Key Identifier:
keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a3:a1:54:15:43:29:db:c1:e5:82:d1:de:e6:f6:8e:8c:c1:
d5:7a:82:59:d4:c5:cc:32:15:bf:34:0c:4a:87:bb:04:ab:66:
e2:25:51:31:33:e7:f8:61:93:3b:9b:d3:da:51:3f:ed:7f:e6:
d4:6e:4c:44:52:6e:2f:d7:f8:bf:48:99:1b:83:bc:bf:b9:62:
3d:04:61:47:f0:ea:25:45:7f:78:8f:1e:f4:43:64:bd:51:d4:
44:0e:44:5f:d9:67:5f:cf:38:c5:92:82:a2:3e:2e:9c:19:0d:
21:90:89:b8:a1:cb:bd:e3:ea:57:59:8e:15:6b:7b:81:12:00:
98:da:32:4b:46:43:0a:b0:a7:eb:03:40:d4:c0:ff:56:24:a5:
f7:86:ce:1d:d3:eb:3d:9b:f8:a4:e3:77:ac:5b:e0:be:8f:e1:
c0:55:25:b1:93:4b:68:42:a6:c2:c2:c0:e8:51:6f:9b:14:c9:
22:58:a5:b1:61:8f:8d:d6:03:0a:95:7b:dd:89:17:e3:7e:e5:
1d:03:08:9e:10:66:f2:1f:61:2c:ba:9b:3b:90:d4:32:41:03:
f5:c4:53:3c:50:2a:a9:50:33:82:b4:15:04:b1:73:b7:e9:b6:
3a:91:77:a2:6e:3d:a6:a0:25:17:4f:0f:d2:22:5f:f5:35:7e:
50:ac:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:49 2026 by rpki-client