
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
File: L71gGUYMdo4C0QZloGiN0flxhG8.mft (raw, json)
Hash identifier: Ze2MJdJ7I7rSZ+kz1oOri+ce/mEjXXbjshR9gQliu80=
Subject key identifier: B3:CE:A2:37:BA:F5:B2:0A:FF:E5:72:90:0C:40:EB:1F:84:58:1F:E6
Authority key identifier: 2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F
Certificate issuer: /CN=A9110C8B/serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
Manifest number: 18
Signing time: Sun 01 Mar 2026 10:27:42 +0000
Manifest this update: Sun 01 Mar 2026 10:27:41 +0000
Manifest next update: Sun 08 Mar 2026 10:27:41 +0000
Files and hashes: 1: L71gGUYMdo4C0QZloGiN0flxhG8.crl (hash: vf9eVdlx+dXSy/U11FGlTBgoB5mo7Gc4MuD9tkhGMuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl
rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C8B, serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
Validity
Not Before: Mar 1 10:27:41 2026 GMT
Not After : Mar 8 10:27:41 2026 GMT
Subject: CN=69a4149d-beaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:b3:ec:3a:79:c7:9d:30:1c:6c:5e:de:aa:
d2:6b:0e:88:e1:d9:79:97:72:22:a6:47:de:f9:17:
f5:53:d4:3f:a5:33:08:ba:59:f3:33:8c:85:8d:7a:
75:2b:f3:e2:3d:bc:ad:a0:d9:d4:b7:a2:38:ed:b8:
46:ca:2c:ad:ce:52:c8:40:74:6d:75:53:68:98:7d:
cd:e0:3f:51:17:f9:15:42:55:79:b4:98:4a:42:6d:
33:c0:d5:f4:f8:61:ff:0a:0a:6c:89:53:da:6d:4e:
cd:74:60:f9:e0:52:5e:7c:65:ba:45:cb:c4:c3:09:
04:b7:6d:ef:8e:f6:6a:69:5c:79:78:64:bb:7d:7e:
cc:23:f3:ee:94:76:e5:58:8a:f5:6e:5c:19:3c:6b:
cc:6a:12:28:56:af:de:5f:fb:13:24:be:2b:3f:23:
71:a3:5a:51:4c:d0:a6:a4:b9:18:68:04:41:bc:cb:
f2:3d:4d:b6:82:09:90:52:b3:4c:18:2c:18:a5:57:
fe:28:4b:2a:9d:cb:2c:dc:ff:87:58:34:13:d7:9c:
78:13:21:00:6d:d4:09:7a:9d:7e:7c:bd:80:6d:72:
8e:fd:e6:2f:27:8a:13:8c:f1:d3:40:61:a2:e6:ca:
c2:cf:2e:0c:55:96:8c:48:71:61:73:96:b4:9d:50:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CE:A2:37:BA:F5:B2:0A:FF:E5:72:90:0C:40:EB:1F:84:58:1F:E6
X509v3 Authority Key Identifier:
keyid:2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d4:cc:30:d6:d0:53:a7:c1:67:d2:41:65:87:ec:60:da:03:
5a:84:d7:b2:d1:89:a1:74:d7:58:a9:46:15:0e:b6:74:d2:75:
83:77:54:25:83:7b:ca:3a:cf:69:9e:84:dd:59:20:5f:b0:b1:
6d:4f:68:60:98:66:eb:58:bb:7d:af:8b:55:3a:15:51:05:e4:
31:1d:86:8d:77:28:84:f0:58:54:df:39:29:85:37:39:c1:88:
54:aa:54:f2:dc:14:50:4e:d1:e7:c9:05:8c:b7:50:f1:99:ef:
da:f4:dd:c8:39:3a:95:40:b9:bb:f2:c4:be:b2:77:91:12:91:
2b:9a:d9:dc:d5:b6:fb:de:21:9b:87:5f:ca:6d:f9:f5:a6:d8:
2a:26:78:4a:2f:b9:05:a8:42:0b:85:33:ae:e1:17:7e:b6:ed:
d3:5d:a7:0d:3a:f7:a5:03:b4:8a:11:4e:94:9b:c6:65:df:f5:
d9:25:ea:b9:eb:f6:ce:07:7d:92:f5:03:33:0b:06:0d:c6:da:
7f:29:5c:5d:e5:36:cc:4d:3d:07:88:b1:16:a1:a9:d2:43:aa:
54:0f:16:ef:34:be:1f:06:3d:d3:a7:e6:1b:e0:3f:78:e5:b5:
bb:0f:95:63:c7:8e:91:51:87:de:66:12:a8:82:cb:90:e1:2e:
7f:83:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:31 2026 by rpki-client