
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json)
Hash identifier: aoHwNI+5xBCxcJz87fCtoF07QPm/rFCZwX9XBhs9fzw=
Subject key identifier: 0B:EC:B0:C6:9E:D7:7C:A4:FD:06:7B:99:34:7F:97:50:ED:E5:4F:19
Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
Manifest number: 9A
Signing time: Mon 02 Mar 2026 02:28:28 +0000
Manifest this update: Mon 02 Mar 2026 02:28:26 +0000
Manifest next update: Mon 09 Mar 2026 02:28:26 +0000
Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: S/2zsn30izcPhSWjZJgbqCB9A66hqjKJ7Zaseiv/EIE=)
2: F563CE94E3DB11F0B70B396D576F56BC.roa (hash: 3H3far6TRs8sjzmCOZTOxwcy+RqKtlZ38lP4KPbvvIg=)
3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: srVyU53/knaGoLFgZUhr91Ugz+ECo7CZ9ZHflYwFi94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Validity
Not Before: Mar 2 02:28:26 2026 GMT
Not After : Mar 9 02:28:26 2026 GMT
Subject: CN=69a4f5cb-fbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:a8:c0:ea:16:f6:8e:dd:45:7b:fc:cc:5a:
9e:97:ae:d9:8d:ae:39:46:de:3e:7c:08:a9:d1:5b:
c7:85:c7:80:70:47:80:de:90:5a:23:17:21:f7:12:
5f:f9:33:29:1e:8e:0e:67:83:bb:3f:25:18:b5:a9:
83:e8:0e:fd:6a:d3:4d:3b:f3:cf:7f:62:bd:7e:a3:
14:65:63:68:6f:dd:19:90:63:25:06:51:79:b9:73:
2f:66:d7:40:e3:73:83:6c:21:a2:4e:1d:0b:c9:1a:
e0:e8:d2:a4:67:22:36:b9:2a:7e:21:76:0d:3a:a3:
04:49:2a:dd:17:80:ba:8f:50:e4:d4:f8:89:6a:6a:
de:56:4b:35:23:ac:c4:b8:db:7b:97:10:43:48:64:
19:e5:49:7f:a3:30:5c:56:0d:07:34:e0:59:5a:b3:
82:a2:af:1d:90:ae:d7:eb:b3:b2:82:51:3b:1c:1a:
a0:68:5e:1e:de:32:fc:f5:a7:c8:90:bb:76:e7:c0:
3d:ba:41:2a:b1:71:9b:7a:8f:72:9d:13:43:40:05:
5f:96:20:73:af:7e:8e:56:14:60:f9:42:2b:8f:24:
52:2e:8e:8e:81:c3:f2:1a:fd:bd:1b:e5:b4:6b:09:
1c:45:6b:07:3d:ca:45:12:19:14:84:7f:91:4a:35:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:B0:C6:9E:D7:7C:A4:FD:06:7B:99:34:7F:97:50:ED:E5:4F:19
X509v3 Authority Key Identifier:
keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:c5:83:58:df:59:8e:ef:66:db:2f:b5:10:1c:90:d0:52:
50:3e:6c:ca:ba:5b:13:1b:5a:85:9a:ab:e9:6f:47:39:32:29:
9d:fb:88:bf:0a:4c:43:20:10:b9:d9:58:df:18:50:7a:67:cb:
17:5a:d4:d7:9a:e2:12:d0:04:8b:a7:3f:6d:6b:84:cf:b1:e1:
f6:7c:21:21:5c:48:1b:8c:c8:35:47:fe:3c:1a:39:f1:3a:30:
96:6e:86:28:5e:f6:2f:2b:b2:82:3b:ed:d0:0a:2f:79:a3:f0:
65:75:3b:75:35:ac:d2:a1:b6:59:26:23:b2:98:0a:f4:2e:7d:
2a:b8:26:43:b0:de:1d:35:2e:18:cf:67:9d:fe:44:dc:49:ab:
9d:be:c6:5e:47:76:88:58:7d:24:10:7f:ad:83:43:48:69:e0:
38:6f:4c:df:ff:d0:ca:b8:02:a0:66:cd:64:37:15:64:09:2a:
61:f0:45:ca:09:cd:cc:2c:ee:84:87:4a:2a:d2:92:df:6c:f3:
e0:57:82:f9:10:ac:16:46:f6:49:47:88:02:80:b6:7a:a0:42:
3a:02:8d:33:1c:3e:37:f9:88:94:0c:40:bb:04:e3:0e:c9:f3:
de:d5:cf:92:81:d9:fd:ed:6a:82:cf:15:3d:72:e8:f4:d2:ee:
b3:c5:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:35 2026 by rpki-client