
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
File: pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json)
Hash identifier: 8hsAJZX5lUmdwfvMhGSC7KbhY1QLdYquW2UWhvOyn0M=
Subject key identifier: F2:9D:0F:4E:32:7A:6D:61:B6:45:75:57:48:36:7E:77:23:0F:AA:FF
Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Certificate issuer: /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
Manifest number: 010E
Signing time: Wed 25 Mar 2026 05:12:03 +0000
Manifest this update: Wed 25 Mar 2026 05:12:02 +0000
Manifest next update: Wed 01 Apr 2026 05:12:02 +0000
Files and hashes: 1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: PIZWZbdGpXXa5nJP9HbHXKCZr+5sXhuggwICrl35OkM=)
2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: WPfdAXefVfZ1Z8B0KAdDL3U8aL68A120XQbVokS39W4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Validity
Not Before: Mar 25 05:12:02 2026 GMT
Not After : Apr 1 05:12:02 2026 GMT
Subject: CN=69c36ea3-0221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:7e:a2:d6:f8:ff:a3:58:8f:72:1d:0b:17:
f0:8a:de:ad:94:28:66:5d:4a:a0:93:07:b9:a8:0a:
c0:77:ce:b9:0a:9a:86:7c:5f:31:9e:92:0d:fa:64:
64:6a:9f:16:9a:bf:d1:a6:d7:bb:bb:ec:c7:22:27:
6b:f2:c0:00:0b:55:51:33:4e:3c:e6:d9:86:48:bc:
70:3c:2e:e0:f9:60:36:ab:27:f8:82:60:52:75:2d:
e6:c8:2c:c5:ec:2a:1a:73:71:f5:b7:03:32:cd:45:
2a:95:ee:c5:17:13:dc:c8:0f:94:a1:59:61:13:9a:
5e:f4:3d:8b:a0:ce:50:c2:58:6d:ae:49:5d:35:33:
5b:3b:d3:59:c7:9a:a6:db:84:ea:52:fe:05:ea:b2:
6a:11:2a:55:50:d0:21:74:e2:83:9b:76:db:a2:01:
98:a6:ca:89:d8:0d:93:c0:cf:94:35:d2:29:0a:08:
d7:b1:ae:08:8d:c4:b0:3a:a4:34:9e:ad:76:7b:b4:
ef:19:fa:f8:86:c1:3f:4c:b8:d4:34:62:c3:5b:a8:
70:37:8b:75:53:a4:6c:41:cb:a0:8c:11:37:e2:4d:
65:00:6f:24:37:06:1f:f2:3c:de:57:46:d8:47:88:
33:40:34:3a:31:e4:89:56:d4:13:74:1a:a8:59:8e:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9D:0F:4E:32:7A:6D:61:B6:45:75:57:48:36:7E:77:23:0F:AA:FF
X509v3 Authority Key Identifier:
keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:9e:80:81:7f:cf:db:53:7e:44:01:38:6c:b7:22:69:7e:63:
f6:a3:e1:93:e0:cd:b5:b4:91:6c:72:fc:df:83:60:d3:de:20:
cd:02:84:54:f6:0f:51:4a:e1:ac:8b:37:98:f5:81:a4:33:f1:
f3:bd:f1:0a:34:92:26:cf:32:9c:eb:b8:2c:50:e6:10:89:db:
08:20:ba:a2:22:8d:1b:06:ec:f8:80:dd:8a:6b:45:fa:b6:ae:
c6:39:cf:e7:28:79:25:58:7b:e8:6a:42:72:da:e9:ff:58:41:
95:72:c8:81:11:fe:3f:2f:2f:ca:d3:60:a7:91:bb:59:94:52:
ff:aa:11:da:76:78:c2:a8:89:c1:55:6e:10:b2:78:2e:3f:01:
3a:62:07:af:eb:f3:e1:8f:b0:7a:08:45:9a:b8:b6:d0:1f:4b:
7c:f5:c9:a4:48:c6:ab:18:9d:23:04:b3:b4:62:eb:60:62:b9:
64:d2:b3:1b:e3:66:8d:17:c9:7f:18:6f:26:22:ce:2b:5e:45:
3b:ba:4e:97:ee:76:eb:01:80:4c:f5:ae:c6:6b:ba:d4:7c:fd:
c3:f0:f2:64:6c:19:d5:c5:c8:24:1d:ce:6d:ce:80:24:30:80:
02:11:cc:e5:97:3a:44:bd:4d:f6:82:96:fc:e0:17:76:9e:40:
34:88:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:21 2026 by rpki-client