
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File: u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier: LuURysyP/vkKji9R19zVoD2RnA3qp80szgGZkiJU/Iw=
Subject key identifier: 8E:0B:27:9F:9A:0A:12:EE:FE:F2:34:EE:81:23:04:74:37:6A:99:06
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer: /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number: 025C
Signing time: Sun 01 Mar 2026 02:47:57 +0000
Manifest this update: Sun 01 Mar 2026 02:47:57 +0000
Manifest next update: Sun 08 Mar 2026 02:47:57 +0000
Files and hashes: 1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: jA1+sj2sBcus3iTJxUzsVKRy1mFR0gzvgPiV49lp43s=)
2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: HvJRtP/1M+AejuhqdGaCDBK61eDiFrYobniM96LvHvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Validity
Not Before: Mar 1 02:47:57 2026 GMT
Not After : Mar 8 02:47:57 2026 GMT
Subject: CN=69a3a8dd-8c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:ad:39:f4:02:22:52:dd:98:91:73:9b:6e:
c9:40:ba:06:45:4f:12:05:a3:fa:ff:cb:4e:a3:26:
a0:0a:2a:9a:9f:cb:7b:36:aa:c6:72:f2:11:8b:13:
29:45:40:4f:21:a5:2b:6e:76:38:f0:19:cb:bc:cc:
84:40:3d:a8:c7:7b:68:8f:44:0b:54:90:59:0d:d9:
21:c4:36:ee:f3:89:fa:0a:5c:b1:19:43:1e:5f:64:
a9:92:32:a8:4d:10:27:9f:db:9a:84:1e:bf:59:8d:
72:50:5d:70:4c:27:38:36:f6:03:aa:c0:ef:ac:ab:
a5:99:3e:af:3d:ea:73:fb:a5:db:f0:3c:07:50:7a:
92:8f:96:dc:40:3c:8b:88:be:3b:66:b7:cd:8a:3e:
d4:21:24:02:20:79:6d:0a:d7:54:9b:a6:de:f6:05:
de:17:cd:ab:64:ff:6f:c9:f7:89:b7:56:26:c4:2b:
94:ac:e0:7f:80:10:b1:c0:99:88:51:a3:b1:63:6a:
00:03:b5:37:57:67:ac:05:43:bb:cb:bb:17:2d:66:
55:4d:60:ad:2f:18:12:ba:66:52:85:af:39:e8:ca:
02:8a:62:dd:0d:61:93:7f:91:7c:0d:3e:a7:a6:85:
80:bf:b5:2d:34:e2:32:dd:17:0a:8c:52:7f:30:6c:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0B:27:9F:9A:0A:12:EE:FE:F2:34:EE:81:23:04:74:37:6A:99:06
X509v3 Authority Key Identifier:
keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dc:0a:b8:a6:0e:9c:6e:8e:8b:9b:e8:a3:ba:e9:62:74:c5:
c0:6f:34:a5:5a:be:7d:07:9a:a9:af:8a:50:c3:7e:28:f5:94:
87:3e:9a:b0:18:ed:24:a0:ce:eb:22:f6:fc:ab:8a:cf:6a:d9:
9e:2d:f3:26:e4:2c:72:23:27:8b:25:b3:9e:aa:37:af:08:f6:
1c:cd:8f:97:55:2d:67:1d:d7:8e:4b:23:ec:9c:e0:77:2c:5b:
b4:ce:b3:c5:76:0c:a4:dc:b7:d8:14:8e:35:c1:49:a8:62:c4:
c3:e3:c4:b0:a4:c3:8c:21:d8:ed:d7:4a:12:54:ee:3e:c1:2b:
99:fb:42:6c:09:ba:f0:f3:39:f8:dc:24:69:3f:ea:19:4b:09:
f0:15:89:d4:25:bd:bc:9d:13:22:d9:fa:ce:7d:f1:ab:36:23:
b1:df:83:9f:60:b0:d8:68:4f:38:0b:59:7c:22:01:6a:02:24:
25:90:16:64:72:79:a2:d9:0b:df:80:a4:90:7a:4b:15:26:47:
f3:a9:28:2a:08:46:4b:47:6b:aa:7d:d9:12:ae:2e:cc:f6:57:
42:6d:df:50:1a:b8:da:e4:ba:ef:69:7c:d4:54:ca:17:2a:57:
33:d4:12:6c:b6:3b:e5:83:7d:fb:af:93:58:a0:18:ef:48:60:
76:a2:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:58 2026 by rpki-client