
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json)
Hash identifier: U6NLPWtgLDeeNE+HIusdOHI4IqC834TKqFBf82J9m8g=
Subject key identifier: 51:5E:86:A0:CA:1F:48:74:06:79:33:41:5B:06:1A:50:73:98:C2:B1
Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Certificate serial: 0527
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
Manifest number: 051E
Signing time: Thu 26 Mar 2026 23:22:11 +0000
Manifest this update: Thu 26 Mar 2026 23:22:11 +0000
Manifest next update: Thu 02 Apr 2026 23:22:11 +0000
Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: oxcB43AtZv1htTng9KvQ2m34lxAi1w6snMeCg4DgYoo=)
2: CF272560413111ECB71E086AC4F9AE02.roa (hash: B85i9GlcOeiOoR1hQF1a7WIZsOujBEcuH+d9GBIiQdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319 (0x527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Validity
Not Before: Mar 26 23:22:11 2026 GMT
Not After : Apr 2 23:22:11 2026 GMT
Subject: CN=69c5bfa3-8ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:b4:83:91:ec:73:c7:9c:58:05:08:ee:27:
38:4a:a2:82:e1:9a:03:b7:be:a5:9e:8d:21:a6:51:
5e:5e:53:f3:6c:82:ca:5e:95:e6:17:b4:15:00:b1:
10:2f:af:cf:b0:7e:74:fb:7d:cf:7f:7c:1e:e2:c6:
ae:6c:5f:a9:bc:80:2e:32:0a:c2:c0:68:3f:d5:cf:
71:78:d4:ea:5c:38:8e:31:f0:b8:1b:0a:f0:d0:71:
c3:77:37:fb:0d:f4:be:ed:a0:e8:41:50:98:dd:78:
26:ce:7e:54:ea:de:0c:a5:88:65:9f:48:87:64:f9:
e1:cb:a2:b3:2c:54:ce:bf:20:e6:5a:cd:80:ac:3d:
c8:05:22:12:34:62:8b:19:ed:03:22:9b:0a:b2:c0:
b7:48:ca:f8:b8:bc:d4:4f:11:ca:2a:fe:24:9d:bb:
0d:13:b9:dd:80:aa:7f:c9:a4:6c:45:9d:b9:ba:e9:
c5:ef:1c:24:f0:46:17:58:84:51:66:c8:2a:02:07:
10:95:97:3c:53:ae:24:9d:a3:4a:52:b0:e1:a2:b5:
18:21:e7:7d:da:35:a4:e3:66:27:8b:a3:46:39:e8:
a1:05:a3:f8:f1:af:13:c4:93:bc:6e:a2:72:51:a2:
d5:cb:3b:41:09:ae:85:b9:89:b8:03:80:74:ec:6f:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5E:86:A0:CA:1F:48:74:06:79:33:41:5B:06:1A:50:73:98:C2:B1
X509v3 Authority Key Identifier:
keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b5:e7:62:05:42:d4:72:cd:c5:5b:c2:67:94:5a:db:81:cf:
46:d9:d1:b9:eb:ed:0b:2a:2c:51:d3:15:4f:2b:29:c0:84:c4:
14:b6:7b:50:39:fb:56:a8:f0:49:b5:6f:6b:2d:ac:94:e1:70:
44:89:a0:fa:58:2d:b8:60:07:d6:16:bc:ec:99:18:b6:e6:de:
ce:1c:2c:cc:c1:62:17:99:f9:e1:e4:1e:16:7b:bb:aa:69:72:
ee:2a:e6:59:24:a3:16:62:95:22:b3:df:de:34:34:24:b0:13:
e3:4d:06:ed:ac:74:b7:90:5b:60:92:44:df:78:7b:53:67:fd:
86:9f:80:8e:f4:06:61:4e:32:75:fe:66:26:5a:ea:b5:86:58:
77:c0:a4:e3:c7:ec:74:15:0d:cc:1a:7a:92:45:75:5e:05:56:
f7:6b:20:94:69:e9:69:77:c1:67:a5:79:ed:41:87:c7:9e:81:
c9:79:4d:dc:e9:a4:43:d0:56:dc:89:04:ae:2a:3d:b4:c6:b1:
d6:9e:84:23:16:0c:df:2f:2c:9b:35:64:a7:b9:ba:4f:0a:18:
f0:9c:19:8c:22:f6:ed:0d:80:98:58:c2:c8:73:38:33:72:4e:
fe:91:3a:46:d0:5f:19:99:0e:c4:cd:18:2b:e6:1a:31:04:27:
26:c8:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:52 2026 by rpki-client