
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json)
Hash identifier: Fv0g+lzin98hqfi7UKfE/0zUlgQUTEI674nnOZiwh+Q=
Subject key identifier: 50:59:5E:E7:2D:0A:D1:20:C3:F2:CF:AF:3B:FA:F5:B2:6D:EB:E0:38
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
Manifest number: C8
Signing time: Sun 01 Mar 2026 08:25:26 +0000
Manifest this update: Sun 01 Mar 2026 08:25:26 +0000
Manifest next update: Sun 08 Mar 2026 08:25:26 +0000
Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: Grzw1xfReH3EEr0hVj2oLPKzzY/YElCTqKHWa+o+k/Y=)
2: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: H74KRi+80F2/6qajXnbyfTp0GrCgl3B0cjrXkUooHhw=)
3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: pCCnAwXaRpN9Dg/rXaYJXlHCmwbtRDgBNlWvYE6Wu1c=)
4: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: BtUlZajv1HPk/12NoFUKXFx9NvRZRnRBIwMfTSx7yeg=)
5: D87376860A1511F09D97420DC4F9AE02.roa (hash: Ub9C5wsl142P8R6BoMmyHFy+cj1b1wk885fNQRr/IyE=)
6: C8171E8EC04D11F081466417C4F9AE02.roa (hash: oZVY5zrE/d6nR+CvPyMMYsC75V/hbG5bXJraocO+NlA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Validity
Not Before: Mar 1 08:25:26 2026 GMT
Not After : Mar 8 08:25:26 2026 GMT
Subject: CN=69a3f7f6-8b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:fd:83:a5:75:05:03:08:7d:7d:c2:18:89:
f4:b6:e7:55:38:2c:80:3f:d3:89:6c:ee:58:7c:b6:
ef:ba:19:fe:9a:9f:d3:ae:e3:4e:30:70:f1:70:0f:
91:af:73:d8:de:5d:73:9a:03:8f:83:39:fe:18:ae:
41:d4:a9:07:2b:f8:d4:7f:42:fa:bb:59:f9:9f:93:
91:f5:c4:b2:d3:e4:14:ab:e8:d9:18:6e:82:e1:9d:
4e:fc:74:6f:73:70:dc:e4:3d:5c:10:6f:36:d4:b1:
da:81:8a:06:4f:ba:53:c5:e5:8e:fc:35:b5:31:9f:
63:38:d2:f0:81:8c:64:00:b1:74:3c:35:9a:0f:3f:
4c:69:33:12:0c:70:75:6d:3f:bf:2a:89:f9:7a:aa:
0f:a4:18:9d:61:4e:d9:6a:8e:94:59:9f:63:39:88:
81:6f:42:e4:06:bf:69:dc:3d:e4:b0:60:13:a4:3a:
71:65:41:f0:5b:6a:5a:4b:28:e3:46:6a:e8:e2:05:
4b:03:09:98:b0:e4:8d:eb:ee:22:4e:27:62:69:74:
93:54:99:b1:05:59:0e:e9:08:f7:5e:e0:77:34:55:
f2:b3:ba:84:b2:cf:3b:b0:d8:1f:a6:d2:37:3c:35:
4f:62:f8:01:3c:45:2f:9f:a6:15:2c:ca:f7:98:99:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:59:5E:E7:2D:0A:D1:20:C3:F2:CF:AF:3B:FA:F5:B2:6D:EB:E0:38
X509v3 Authority Key Identifier:
keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4e:b4:ad:a5:82:ad:6c:05:ca:bf:d2:c3:88:55:f6:e3:c9:
8c:a2:e0:86:c1:74:44:0d:29:4a:bb:41:23:f2:17:6c:e6:c3:
81:56:38:6c:56:c1:fb:e4:d7:a8:63:b5:97:81:43:70:51:29:
96:07:2b:80:5f:42:af:c6:71:1b:3b:3e:c1:e3:6e:d4:a6:e3:
c9:90:01:f7:f4:42:18:4d:ad:ac:4b:a0:64:ef:c2:f5:b5:e0:
fc:87:b2:0a:af:83:58:c6:5d:b3:50:26:de:b4:8c:7e:87:1b:
ba:35:6e:08:c8:6b:5d:33:8e:f2:6a:a5:5c:9c:40:72:49:3a:
7a:ab:ad:86:9b:49:37:17:96:b1:9d:fb:bd:d0:af:9f:cf:cd:
6b:e2:d5:9b:cf:fb:b6:75:e6:ba:72:d2:fc:f3:cf:4d:d5:9b:
4c:fc:18:55:c9:50:6d:c1:3f:e5:35:42:b4:01:21:7d:92:e8:
64:48:b7:89:3e:da:5a:03:b6:7c:ce:dc:bb:87:27:2d:42:54:
04:1c:d1:f9:71:d9:3a:b1:2e:4a:8e:b8:4b:5c:da:ef:3d:39:
e0:0a:85:e4:59:ed:c4:fb:0d:e4:3d:38:45:b0:9c:d7:df:f7:
b4:21:2e:55:78:49:ba:2e:26:e9:fc:6a:27:18:7b:8b:32:6c:
dc:58:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:22:12 2026 by rpki-client