
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json)
Hash identifier: SoI1DFJpK13IFjZXtbToiom2jKF8RKDUW/Vri+3jziE=
Subject key identifier: CE:9C:51:38:73:2E:1E:CD:1B:AA:A9:FC:04:B5:F0:DF:93:A2:9E:97
Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
Manifest number: 01D9
Signing time: Sun 01 Mar 2026 23:44:22 +0000
Manifest this update: Sun 01 Mar 2026 23:44:19 +0000
Manifest next update: Sun 08 Mar 2026 23:44:19 +0000
Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: f1GQ8ao3JEbLOKRM/IcBQZ6SQG/bl+49iaFnVvWgK6g=)
2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: z/CeXg1zE451kjdiV+L83Kbr1l7Vh3IeBEWeCzKi+60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Validity
Not Before: Mar 1 23:44:19 2026 GMT
Not After : Mar 8 23:44:19 2026 GMT
Subject: CN=69a4cf56-8da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:76:3c:56:a3:66:12:46:30:a3:1b:ac:e5:
a2:09:2c:be:1d:8e:7e:a4:96:43:30:db:77:da:5f:
1d:f3:b9:52:c2:16:bc:46:3d:48:53:af:fb:fb:ec:
91:4b:b4:59:91:37:9c:0d:36:ad:ec:f9:a3:7d:05:
d2:f2:91:46:49:4d:29:0b:44:66:89:d1:c0:ac:45:
9d:13:6b:e0:0b:6d:91:10:30:af:8a:11:61:18:78:
e9:6d:68:1c:e8:85:fd:cc:1e:ac:ab:62:ec:dd:1e:
fd:2a:c4:c2:68:a0:d1:7a:f0:fe:ea:3a:79:ce:c7:
7b:ad:7d:40:91:72:49:b0:91:a3:8c:28:3d:2f:8f:
18:14:ff:79:2f:83:16:56:7d:fd:c0:7c:0f:57:f2:
15:e9:72:15:55:f3:9a:80:d5:2a:dd:ef:ff:d1:cc:
8b:91:e6:7e:d6:c9:3f:6c:cc:3e:5b:95:2c:4b:b3:
92:a3:87:6d:8d:50:ba:40:19:64:a3:3c:4c:b4:25:
d9:12:ec:06:02:10:60:06:61:36:ae:0d:78:97:b8:
9b:93:4a:f7:59:9d:14:b3:c3:3b:6a:7c:50:23:48:
9e:2a:79:c8:d2:2a:85:41:bf:ca:d3:9a:4e:73:9e:
31:8c:8e:ed:cc:3f:5f:27:e4:ea:3e:ee:fa:cb:6f:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:51:38:73:2E:1E:CD:1B:AA:A9:FC:04:B5:F0:DF:93:A2:9E:97
X509v3 Authority Key Identifier:
keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:3c:f1:60:b7:05:7b:a4:e7:57:22:be:47:44:87:bd:0d:75:
54:4a:d6:ef:0e:8c:dd:c0:d9:5c:43:a0:c8:96:70:60:43:c7:
c5:0e:40:2f:6f:3c:7b:22:34:53:89:fe:07:a8:21:99:3d:e4:
1a:b7:76:ef:ea:3b:b2:99:90:50:a6:4d:f4:30:08:c0:e9:04:
56:70:c2:25:bb:6d:c7:4c:06:24:e4:8b:cc:0b:69:43:96:e7:
b3:37:51:fd:60:5c:03:db:34:f8:f1:64:5b:1b:ae:d3:0b:0f:
95:6c:1d:a5:9d:23:d2:75:7a:fd:8d:9a:ce:5d:56:db:a6:cc:
6e:ad:f2:51:a2:b6:2f:8a:17:e5:ad:6b:26:09:24:e4:66:9c:
99:b9:26:90:3c:e5:c3:0f:63:b8:6e:9e:e2:99:ce:e9:ad:1b:
0a:cd:eb:5f:15:3f:df:c3:12:33:b2:b5:91:e2:df:b1:cf:be:
b6:be:0a:d7:f6:c5:f0:ad:fe:5a:ec:93:0a:ad:4e:29:80:16:
73:18:9b:9e:11:d7:2c:f7:4b:83:4a:4b:71:f9:ec:2b:c6:b7:
ee:e2:c7:e5:05:f1:b9:b4:ea:a6:e9:0f:a7:7f:11:f5:c6:1f:
1b:01:7a:da:e8:4d:ab:43:b0:ef:68:2f:25:cb:1c:5c:b5:0f:
26:d3:56:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:50 2026 by rpki-client