
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json)
Hash identifier: W6Fcii5maRWTtoGB8MAN6dmscahkZYolwHrperkC1O4=
Subject key identifier: ED:9F:CD:DA:9F:1E:3F:76:C6:7E:33:E3:BE:26:5D:31:47:92:95:26
Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
Manifest number: AE
Signing time: Sun 01 Mar 2026 08:27:55 +0000
Manifest this update: Sun 01 Mar 2026 08:27:54 +0000
Manifest next update: Sun 08 Mar 2026 08:27:54 +0000
Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: LUJj/BHHRx//B31HXzDlKELeVsN1MC/MlTgIZWPE5+c=)
2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: S0xpbapYuUp7EVUcnIqHkGByKZFeAz8MROSbzxDfhw4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Validity
Not Before: Mar 1 08:27:54 2026 GMT
Not After : Mar 8 08:27:54 2026 GMT
Subject: CN=69a3f88b-c96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:a3:35:b5:25:62:3f:d7:90:8a:70:a7:3f:
f4:ce:21:9e:c6:64:15:1b:ba:48:b6:03:18:ee:9e:
b9:30:63:0d:b0:54:0d:a9:13:30:93:5f:eb:7f:68:
64:24:46:18:9a:d5:30:f8:ae:ef:1a:53:0c:55:af:
e7:8e:59:04:05:8b:02:9a:bd:eb:89:41:c7:95:d9:
70:1b:40:6a:d3:f5:e3:45:13:68:dd:45:08:e2:04:
19:87:13:a8:d5:63:f0:15:4f:03:2b:40:b8:67:e4:
5f:95:57:b4:55:0e:8e:50:79:10:6d:2e:03:01:b1:
f9:5f:eb:95:d6:4a:5f:5e:87:ef:eb:8b:41:07:f0:
45:f4:86:ac:56:77:97:bc:af:f8:27:7c:5a:30:e4:
29:e6:7a:ac:f1:f8:66:07:6d:e8:54:6c:e1:65:39:
3a:35:33:66:ba:6d:28:d5:ca:e7:8a:38:c2:19:ef:
90:46:12:e2:5e:a0:8a:d6:39:17:29:f7:c2:16:f8:
9a:33:30:44:fd:7a:a6:27:f5:72:09:12:8b:80:93:
b1:fc:46:1a:88:27:d8:9f:a8:da:f4:ad:a2:d7:ce:
6d:97:6d:3e:04:ac:63:36:6b:91:f7:5c:c7:3a:c5:
7b:01:2e:72:73:a6:cb:c8:ba:5f:e0:c0:e9:9a:16:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9F:CD:DA:9F:1E:3F:76:C6:7E:33:E3:BE:26:5D:31:47:92:95:26
X509v3 Authority Key Identifier:
keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f7:d8:70:a6:95:c5:1d:a3:42:95:83:cd:7c:85:f4:4c:4f:
0d:e7:22:44:ad:6b:dd:f4:a1:f7:fe:c3:87:5b:c1:40:66:7b:
ce:2a:23:66:d8:20:d8:44:cd:bd:59:af:7f:df:be:6d:86:15:
cb:59:4f:62:26:2a:76:f5:2a:72:88:b4:fa:55:bc:18:d1:39:
41:33:8b:94:14:f6:3b:e7:6a:38:76:0a:12:7c:ea:92:55:ca:
ba:90:ba:06:cf:85:22:ef:76:28:33:01:c2:8e:6a:94:1f:88:
68:2e:ab:9a:a5:6a:57:83:34:1b:e5:ad:85:07:14:11:98:bb:
57:f9:b4:7a:73:c9:0b:d5:89:58:80:a8:fd:b9:43:85:96:ec:
f8:24:c2:c4:14:df:18:4c:6d:51:85:7a:51:37:88:ca:77:5f:
2c:cb:41:cd:f3:d0:ef:e5:40:48:c8:c2:7f:bf:98:eb:d3:3a:
83:82:ac:13:35:2e:21:d9:cb:bb:cc:0e:d1:1d:e3:67:47:d5:
de:43:b8:21:69:a2:67:79:0d:06:57:35:e4:7b:5b:c8:e4:e7:
8d:9d:c0:cf:97:46:66:69:19:1d:b7:5c:6b:cb:4d:68:a6:7d:
d1:53:3e:52:98:e8:58:ae:3e:e0:02:75:3d:8e:a0:3d:42:a1:
ee:c2:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:01 2026 by rpki-client