
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
File: 489F-AUQY7vbMX_dFREyqUAE_Vs.mft (raw, json)
Hash identifier: wmo6RtQlgr2TOw0fIbJO0KRdpZgtKId0vljYx1fWfi4=
Subject key identifier: 9C:44:C8:74:70:3C:63:66:FB:CC:7E:A7:9F:94:1E:A9:04:05:A9:76
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial: 037B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
Manifest number: 0362
Signing time: Wed 25 Mar 2026 00:36:25 +0000
Manifest this update: Wed 25 Mar 2026 00:36:24 +0000
Manifest next update: Wed 01 Apr 2026 00:36:24 +0000
Files and hashes: 1: 489F-AUQY7vbMX_dFREyqUAE_Vs.crl (hash: dsVZbO/Z1g7s/WkMY/IJAKKDDIM/67TGuBcflS2fDV4=)
2: 920E981CCAAA11ED8371524CC4F9AE02.roa (hash: fkyJKn8Oh+03JayycchiXNnOyFPcVFyNkr5e5TiQlCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891 (0x37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Validity
Not Before: Mar 25 00:36:24 2026 GMT
Not After : Apr 1 00:36:24 2026 GMT
Subject: CN=69c32e09-31b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:18:81:ee:bf:5d:2e:7b:21:f5:b2:03:04:
4a:1a:b6:77:70:75:7e:35:3c:89:08:44:ca:8c:8f:
7c:fa:7c:ea:c0:49:ab:f7:e4:fd:75:aa:b7:88:76:
d9:4c:e4:8a:49:0d:0c:40:7f:83:83:d6:2f:4e:20:
e0:e4:05:6c:08:ee:bd:5c:f8:83:fd:4d:c3:4a:99:
6b:32:be:81:eb:80:3a:bc:d2:fe:bb:25:c2:37:58:
a6:78:3f:a5:9b:40:2c:c6:7b:d8:4d:26:04:6c:31:
77:bb:92:d7:49:56:41:f8:19:ea:19:c0:7a:c0:9f:
1d:c6:9a:3f:8e:de:6b:bb:10:9b:60:77:49:f0:fe:
bc:87:d9:9d:af:33:1a:d2:25:49:ab:76:37:4c:8e:
fb:20:d4:fc:b4:09:7f:92:40:1b:b6:94:71:c9:14:
6a:16:ee:14:22:00:09:49:c8:95:c6:47:7d:5e:e6:
2e:c6:34:5e:67:20:5c:65:25:ea:22:aa:21:c9:f5:
ac:d0:7a:bb:dd:7b:d3:82:87:b4:2c:89:8b:9d:cf:
20:44:f0:05:16:48:26:cb:68:8d:0f:5c:68:40:7d:
fa:84:cd:d3:6a:03:8c:1a:c8:94:de:ee:9d:9e:7f:
0c:22:71:ff:b8:e9:2e:fc:bd:be:64:e0:c5:54:59:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:44:C8:74:70:3C:63:66:FB:CC:7E:A7:9F:94:1E:A9:04:05:A9:76
X509v3 Authority Key Identifier:
keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:59:c4:5b:c4:6f:1c:d8:6e:d0:b7:01:d4:37:d4:7f:52:32:
e5:c9:14:b1:c4:be:18:80:93:5a:4b:17:e2:41:03:74:31:97:
d1:1b:b4:17:e9:cc:e7:ee:8b:f8:61:4f:38:bc:3f:81:8c:2c:
30:93:1e:f4:9b:97:34:73:3c:63:e1:89:69:a1:96:b5:95:1a:
f5:f1:41:5c:b9:fc:d9:c8:bb:cc:c0:d4:a4:79:a1:4f:e1:c1:
d0:d3:47:0a:62:4a:3f:e2:0f:3d:e3:c3:7b:60:89:19:d7:5c:
83:79:bf:42:6e:34:60:cd:5a:d3:f0:69:40:81:1e:f0:13:2f:
cd:08:44:30:95:bf:09:5e:d3:79:bc:b8:a0:77:8d:39:14:97:
2c:e5:3d:91:3a:3d:e9:a0:ed:83:e5:d9:c1:ee:46:b5:d4:e0:
e6:9d:a2:fd:03:17:be:5e:fb:8b:5e:6a:82:99:75:c9:de:a4:
db:16:97:c7:6b:5f:13:5e:cf:93:59:cc:14:1e:3e:5d:bb:62:
8e:50:a9:4b:7d:85:b5:9e:dd:31:7f:ae:24:8b:d5:b4:af:ad:
d0:7c:49:19:6e:8d:04:e7:e3:1b:19:ae:43:33:d7:c1:6e:48:
bc:10:a9:a0:7c:7f:39:e1:72:38:80:33:8d:db:d3:0c:bb:47:
1a:82:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:16:51 2026 by rpki-client