
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
File: MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json)
Hash identifier: leGLJYW3KKAAJFkoCbKj/u6UHgm2ii74+jlIGYMw47E=
Subject key identifier: 92:94:52:6B:B5:BD:C2:B0:9C:B6:29:E6:EE:80:8E:76:AE:A9:38:77
Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
Certificate issuer: /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
Manifest number: 2B
Signing time: Wed 25 Mar 2026 07:53:53 +0000
Manifest this update: Wed 25 Mar 2026 07:53:53 +0000
Manifest next update: Wed 01 Apr 2026 07:53:53 +0000
Files and hashes: 1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: HBUZoP7r4Hg6CFzYncYuntXLiDCCjxQSTEhEUe9k+dI=)
2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: sYeLNL3T3Y0IoxBgp4l6jxzmh3sw3CZxXvB5Mj0h7DA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Validity
Not Before: Mar 25 07:53:53 2026 GMT
Not After : Apr 1 07:53:53 2026 GMT
Subject: CN=69c39491-0ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:a9:41:a2:1d:5e:e1:fd:d6:18:3d:44:96:
b0:04:64:e2:21:d5:97:eb:5d:66:36:79:b3:84:13:
5c:5c:b2:a8:51:c3:59:ae:f9:c8:31:fb:3d:52:d7:
92:00:bf:47:03:2d:9a:a1:cc:c1:09:af:b5:9a:a6:
35:2a:71:b5:6f:b6:70:10:f8:f0:96:e0:1c:cb:21:
ae:d9:f7:eb:b0:af:bd:d3:3a:b6:34:4e:2e:c8:a0:
d3:33:2b:a8:65:1e:34:8a:91:73:e9:99:82:ba:36:
d1:bc:a5:de:27:83:e1:b4:59:ab:bf:f2:f5:80:c0:
13:1f:40:6b:92:f3:df:82:d6:ed:97:de:a7:e9:44:
99:57:fd:ab:da:bb:be:c8:bb:1d:3b:a2:3a:64:2a:
36:8b:a2:ff:0a:13:93:53:20:46:5a:5d:ed:f8:a1:
5f:a7:be:45:8a:81:f2:c7:5f:5a:5f:5e:ba:f7:ce:
2c:a2:57:10:c5:a9:a2:8e:d9:21:52:ec:93:1d:dd:
37:f6:63:04:b0:78:86:3b:ae:61:5b:b1:6b:c7:37:
c9:5a:a0:85:fe:18:64:92:e7:48:d2:f2:a0:77:4a:
fe:cf:2a:c3:64:a4:66:01:9a:62:4f:d3:9e:05:5d:
64:85:46:e3:24:91:e6:be:0e:71:91:f6:1e:32:bd:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:94:52:6B:B5:BD:C2:B0:9C:B6:29:E6:EE:80:8E:76:AE:A9:38:77
X509v3 Authority Key Identifier:
keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:40:26:a4:3e:18:20:d5:c2:48:7f:61:55:24:eb:2b:07:1b:
61:65:15:36:2c:8f:72:d3:ec:9c:56:14:19:95:c5:12:05:4c:
ef:a9:92:1d:f3:f3:42:93:69:e5:21:57:be:8a:04:89:bd:34:
5a:02:13:5f:15:e8:6c:80:11:ec:94:2d:d5:ee:72:8b:cc:1b:
0b:b6:a8:d4:b1:12:7a:47:3d:b0:2b:6b:6e:10:26:ac:1e:1b:
5c:b1:75:80:7f:62:d0:6d:bb:d2:fe:d8:cd:ff:58:d7:7b:c8:
8e:ce:0b:e7:e2:fc:b4:71:6b:83:f4:85:41:34:b0:5c:a4:18:
5c:ee:d7:28:cc:1a:1f:89:b1:38:a6:d2:4b:db:80:fd:e9:b3:
39:59:79:bf:15:ca:7a:c2:cc:d3:78:79:d7:43:f8:07:da:3e:
84:59:74:42:91:54:fc:ea:f8:56:59:0c:c8:56:a2:06:3b:95:
69:28:33:0b:fe:d3:7a:20:a4:f0:0c:6d:d6:5d:71:cd:58:72:
37:c1:3e:a8:d7:48:06:4a:2a:eb:f7:42:4a:f0:2d:af:f4:5e:
a1:00:ed:f3:6f:aa:c5:47:72:1f:db:bf:8d:26:92:c0:c9:b6:
ce:b7:d7:b9:c2:e1:e5:47:ba:82:ac:a3:e8:00:2f:1e:74:3e:
e3:46:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:05 2026 by rpki-client