
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json)
Hash identifier: qljZ87MheeDOdKqVS459AU7L1m8uD7XItp/YgPCDEGw=
Subject key identifier: A6:E0:F4:26:2C:3B:33:36:EA:EE:E4:C2:F9:96:50:32:6F:B1:23:CA
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial: 06B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
Manifest number: 069F
Signing time: Mon 02 Mar 2026 01:17:43 +0000
Manifest this update: Mon 02 Mar 2026 01:17:41 +0000
Manifest next update: Mon 09 Mar 2026 01:17:41 +0000
Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: SJ69Q2STgH0ncXY+RdDIYz2wx3/t5hWS9bS4+/u+l2Y=)
2: 93E364468FC111EFA7695485C4F9AE02.roa (hash: odXs70QtmjQH39+qx/iFdYWwlstVgEGIxhy6jVeMzv4=)
3: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: yoloep24o1atFGZiIYVLvf8FRxTCxFgmWJlp5tBVJqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Validity
Not Before: Mar 2 01:17:41 2026 GMT
Not After : Mar 9 01:17:41 2026 GMT
Subject: CN=69a4e537-94bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:a3:31:c4:22:04:41:fa:2c:89:3b:63:a5:
46:e3:1b:0f:76:38:16:62:5a:72:01:57:bd:c2:a8:
08:e7:83:78:f6:0b:5b:a1:d2:c4:f2:fb:67:9b:ef:
e9:d3:69:f8:8c:50:17:c2:c1:71:f8:57:fc:82:6b:
f0:94:64:25:09:3a:a3:a2:3c:40:1d:4d:2c:6d:50:
80:97:ec:f9:fc:c2:45:ff:25:47:73:12:ec:6b:97:
a1:79:cf:39:7c:82:59:49:9a:2b:5a:b4:13:04:6b:
96:0a:6a:69:cf:aa:fa:df:be:c7:33:06:e7:67:30:
7b:ec:15:b9:4b:ac:b0:96:4c:f2:24:2f:a3:78:2b:
7e:43:50:a2:3e:ed:aa:b6:a6:32:b7:99:4e:9e:c9:
d3:b2:a5:f2:50:e6:a6:c0:92:91:7a:86:63:ca:3f:
c1:5a:ac:f4:18:95:6a:68:50:57:f3:a3:79:bb:b0:
21:44:06:d9:59:cf:de:52:0f:ab:df:f3:a8:76:40:
37:55:cc:82:33:2c:bb:14:c8:55:7d:cc:da:c3:aa:
cc:90:c9:44:97:28:50:f2:ad:e4:1a:78:7f:3f:05:
f8:24:c7:a9:36:15:40:a0:7c:b7:a1:d2:bc:33:9c:
fc:24:cf:9d:3e:9c:97:43:ce:86:14:78:c2:d3:20:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E0:F4:26:2C:3B:33:36:EA:EE:E4:C2:F9:96:50:32:6F:B1:23:CA
X509v3 Authority Key Identifier:
keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:ee:e9:2f:6d:91:61:e5:ac:3f:b7:c4:00:02:61:c7:bb:58:
12:ef:0c:33:c0:05:d9:71:58:83:8e:11:16:dd:0e:4c:d0:44:
ea:04:e9:da:33:4d:0c:b4:c1:76:fa:07:19:3f:5b:c9:88:9b:
5c:ee:f3:fd:fd:13:cd:25:f3:21:29:9f:57:13:18:44:de:1a:
bf:37:4b:b7:f9:5b:42:fb:d4:53:b6:08:c1:86:7f:65:e4:3f:
c7:05:bd:a5:ef:c6:b0:92:67:38:7c:80:31:78:db:76:30:6c:
9e:37:88:70:0b:7e:81:07:ec:2d:89:9e:18:46:de:6d:03:78:
9e:5c:9b:bf:5b:31:6e:0a:e3:8c:99:2b:bf:62:11:55:63:74:
b6:77:79:23:38:3b:83:c8:df:31:49:88:58:0f:11:4b:67:e4:
94:8d:86:13:28:b2:18:63:43:66:f6:20:2c:dd:91:b8:07:be:
19:44:22:66:55:03:4c:be:2b:7d:9e:e2:86:8a:24:25:20:52:
14:6f:8f:fd:c8:32:ae:74:0c:b4:28:25:fe:d7:48:2e:9a:6d:
a0:d5:aa:dc:fb:47:98:3a:3b:b6:74:a3:de:e8:87:07:49:f4:
58:f7:81:f8:2c:1a:06:7e:89:9b:7d:de:fc:1d:dc:43:05:08:
09:09:6a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:43 2026 by rpki-client