
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json)
Hash identifier: vM2hYqFA95DUZmQdszR1N7YuZViHCoTgQ1eb/m4Eakk=
Subject key identifier: 70:9D:D9:45:E0:64:3A:0B:88:52:42:6C:D1:6B:DC:AC:1A:6A:32:AC
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial: 02C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
Manifest number: 02BF
Signing time: Sun 01 Mar 2026 02:17:48 +0000
Manifest this update: Sun 01 Mar 2026 02:17:47 +0000
Manifest next update: Sun 08 Mar 2026 02:17:47 +0000
Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: DFfFyoIcdvESf8MFRdn+b9H1hpgqydtU6u+4+2h5jZg=)
2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: Hlir8kdh5R9yAKCOaYnCPJ/+dfwSE3UvINdXqQSP2fI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707 (0x2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Validity
Not Before: Mar 1 02:17:47 2026 GMT
Not After : Mar 8 02:17:47 2026 GMT
Subject: CN=69a3a1cc-42b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c9:cd:6e:7a:ff:da:b1:c1:85:dd:b7:32:ce:
24:57:b2:64:40:eb:ac:ee:1c:5c:36:a4:ea:06:64:
62:e7:ba:1b:42:04:06:8a:f4:2c:9b:63:34:e4:14:
95:43:3d:c7:1d:0c:43:18:9c:8e:4e:45:1b:f6:be:
c5:3c:df:fe:d2:ae:7d:53:7d:b2:37:8d:38:1c:47:
f9:9d:71:e3:20:1b:99:49:d4:17:4d:6b:5d:dc:a0:
6e:91:b0:8c:16:1b:6a:7e:70:18:45:aa:e3:ef:7d:
a1:8a:ac:c5:93:c5:bb:8c:d9:d3:93:cb:c0:99:8f:
a0:57:d4:a0:59:47:65:80:1f:85:1d:75:f6:4a:7e:
a6:9d:51:30:ad:d7:d6:f7:42:db:4b:2a:45:e2:df:
ff:56:24:fb:d4:52:d1:b5:a8:43:81:66:fc:ca:8f:
50:8a:ba:92:6c:c7:f1:00:1a:f0:8a:48:2c:27:6e:
c9:f6:dc:ef:a0:ee:da:03:23:22:ab:da:39:a6:60:
7f:ed:78:d4:3d:4c:94:fc:54:93:2d:43:b2:ae:15:
6d:54:52:34:b3:c4:fa:69:fa:56:84:72:25:25:61:
70:64:89:49:fb:1c:df:8a:79:4e:74:ae:5c:85:6e:
e4:9c:e9:6d:ad:c6:f1:1f:24:29:5b:27:8a:0b:e4:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:D9:45:E0:64:3A:0B:88:52:42:6C:D1:6B:DC:AC:1A:6A:32:AC
X509v3 Authority Key Identifier:
keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:17:27:2a:84:7a:f1:6b:11:71:f6:61:f1:96:62:3d:62:e3:
08:9b:ef:67:42:ec:88:e4:7d:8a:6d:53:64:e3:0a:ff:ff:70:
29:7d:b9:32:61:a8:50:f4:55:fa:b9:24:d9:a7:55:3b:71:ea:
e0:97:2c:71:0c:cc:5c:0f:a2:39:d4:75:c6:6f:65:8d:27:0c:
3f:37:50:b8:43:3b:1e:1b:d3:50:f9:5e:fc:47:23:20:3e:43:
ce:f3:ed:74:39:c4:50:67:3e:39:5e:b1:85:34:30:82:17:1e:
f2:d5:65:73:4f:35:f2:1e:ed:5c:11:d4:b7:b9:77:0a:6b:9f:
18:5a:71:fa:72:9f:d3:c0:6d:f2:50:2d:77:92:c9:5c:61:c1:
6a:08:69:a1:36:01:73:ec:a8:a4:c1:20:56:c0:05:90:87:f3:
2a:d3:df:35:a2:41:23:1c:ed:c6:1c:26:75:3c:5e:29:77:a2:
c6:92:6d:9c:a7:47:19:ae:8a:83:80:62:08:cd:82:1c:06:3b:
b5:ca:da:f1:58:36:4a:45:08:78:6a:82:a1:b7:d2:11:9b:b1:
1a:79:71:ad:45:d0:99:83:c9:ca:61:d0:f7:47:c3:c9:77:47:
11:5d:6f:91:22:da:63:8e:cc:e6:a4:50:47:dd:27:e7:6c:bc:
79:09:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:35 2026 by rpki-client