
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json)
Hash identifier: TNwjlMEwNOjkVtkqurphPvRUBstyX/uE4mqXSJGETck=
Subject key identifier: AC:E3:DC:CA:D3:40:B5:63:18:FC:B5:C6:0D:54:1D:79:D0:9F:02:40
Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A
Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
Certificate serial: 123A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
Manifest number: 122F
Signing time: Mon 02 Mar 2026 00:51:59 +0000
Manifest this update: Mon 02 Mar 2026 00:51:57 +0000
Manifest next update: Mon 09 Mar 2026 00:51:57 +0000
Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: PymfMLWcJU+2ObA9LKpcNbA6CrCQWO2v5kljEd7Gbis=)
2: DB056F0C688011F09D2C9A15C4F9AE02.roa (hash: 1FdqXdOFWWUo+KdLUHGDbep6dZHGEbAaO0icxl7Y07Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl
rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4666 (0x123a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
Validity
Not Before: Mar 2 00:51:57 2026 GMT
Not After : Mar 9 00:51:57 2026 GMT
Subject: CN=69a4df2f-901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:b7:71:cb:8c:16:8d:88:0f:ff:31:27:1e:
5c:ca:d4:27:52:79:4b:2f:36:31:d9:fb:54:84:03:
87:c3:95:c0:19:12:7a:2c:3c:c3:9c:19:00:59:bd:
db:de:f2:f9:9a:a0:ad:44:27:63:fa:61:ab:d3:2a:
61:e0:3d:ce:57:70:74:02:79:e3:25:06:e4:8f:f9:
0c:b8:bf:65:f9:0f:1d:fa:37:61:8f:65:83:26:59:
a9:ec:4d:79:8b:c4:3c:06:b8:ed:f5:ea:a2:47:f6:
74:69:a4:9d:6a:9f:e3:e1:fe:49:14:9a:81:ee:68:
d3:f1:a2:3e:ca:9d:5f:ae:9e:b2:43:92:24:82:91:
2b:40:9a:2f:c9:9d:7a:ec:9c:32:41:ca:9c:7a:69:
ef:39:09:ee:98:b5:f6:fd:41:cd:5d:9b:fe:1f:e0:
fb:93:a2:c0:79:66:f9:e4:14:7c:6d:ac:e2:b3:5e:
72:d8:84:69:3d:67:8d:89:f7:9a:f5:61:a6:1f:1c:
61:fc:6a:d8:8e:82:fd:ef:cc:d1:b7:48:51:36:0a:
6e:bd:51:57:f9:3f:38:8b:68:83:c9:8b:7e:df:18:
8a:c0:5d:1c:01:9f:51:f5:79:b1:00:11:6c:f2:d5:
d6:5b:1f:43:72:4b:1b:88:40:c2:63:52:7e:37:43:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:DC:CA:D3:40:B5:63:18:FC:B5:C6:0D:54:1D:79:D0:9F:02:40
X509v3 Authority Key Identifier:
keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:00:32:09:a4:4b:ea:be:f5:b5:ba:36:72:63:0e:ea:81:6b:
86:52:c6:2c:f3:69:f2:b6:42:84:21:03:a5:ea:cf:88:1a:f0:
ed:05:91:69:7c:14:eb:fe:b1:2a:47:4f:da:7a:ee:54:d1:87:
f2:80:2b:7b:1d:e4:b3:08:67:29:74:a8:93:ef:bd:24:49:58:
e6:a5:6a:77:73:a0:76:8d:bb:38:0b:cc:15:2d:ab:22:07:6a:
76:89:4f:89:00:96:00:72:cd:0d:59:4a:45:b3:99:25:92:b9:
00:09:29:9d:a9:60:4e:01:e4:f8:f8:e6:53:fc:4f:3e:b8:3f:
90:51:db:55:4f:71:b2:9d:e2:b0:d9:ee:a3:3a:6b:bb:ca:bd:
7f:36:e2:fb:7f:64:22:46:7d:8b:59:2a:19:f5:fb:11:55:79:
1e:e4:76:30:5a:2b:8f:8e:44:00:88:67:92:2e:be:a9:e7:6a:
3f:fe:50:71:25:7f:1d:a6:ca:59:ad:5d:f8:fc:f7:53:72:a6:
1e:42:37:44:1f:aa:ca:d9:16:6a:e7:1f:5b:e6:28:67:d3:3b:
3b:1d:af:91:fa:47:4c:e2:a4:8a:5e:55:50:9a:c7:b9:3f:a3:
12:a6:7b:98:3b:70:16:e5:8f:77:0e:5a:a8:9a:2a:cd:0f:c6:
99:69:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:08 2026 by rpki-client