
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json)
Hash identifier: ijQIl+DaXRHE0fyTnDR5mkKFbO/hFR6co9DE+TBcQ28=
Subject key identifier: BB:4F:18:59:EF:B2:D8:D9:57:23:48:F3:7D:34:05:8E:1C:3C:47:D1
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
Manifest number: 026E
Signing time: Sun 01 Mar 2026 02:57:13 +0000
Manifest this update: Sun 01 Mar 2026 02:57:13 +0000
Manifest next update: Sun 08 Mar 2026 02:57:13 +0000
Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: EPUZuf0idVzfgRrfhwPe5CfYDfqzd7uhgjVatD0F+W8=)
2: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: 5ODXSfuDcr0ntELONOM2ScwA1KV08hdRI4YUBR7Ihhw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Validity
Not Before: Mar 1 02:57:13 2026 GMT
Not After : Mar 8 02:57:13 2026 GMT
Subject: CN=69a3ab09-8866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:ac:51:71:a9:b1:b9:d1:67:77:ae:de:d4:
6f:a3:cf:1d:69:ab:d2:be:cc:2f:e9:39:c8:a4:12:
8c:2f:cf:a7:1c:1f:3c:0f:a3:eb:85:f8:4d:0b:b8:
4c:92:84:bf:5e:4b:95:91:cc:50:d3:ca:f0:22:bf:
ad:2d:27:c5:53:8b:23:f5:5f:c3:6b:1b:dd:b2:a2:
71:a9:68:22:23:11:b3:89:99:5e:3a:fe:c4:de:68:
c2:12:6f:bb:83:da:d1:64:c7:b9:e5:25:34:05:a1:
9c:81:7b:72:77:8a:8b:e4:a5:a4:a8:88:f7:27:d8:
11:e0:c2:8c:44:18:a8:76:d5:19:c1:8a:b3:81:90:
d7:33:3d:a8:64:34:ae:69:26:7d:5b:d7:4f:d7:76:
66:58:25:25:c9:c8:f1:81:dc:98:19:ca:ce:5c:62:
72:d1:c4:7b:50:d3:c2:3b:55:66:f0:62:5a:93:0b:
6b:c8:72:98:1d:ce:f4:27:47:a8:d8:7a:f3:2b:c4:
cb:fc:e9:fe:28:e3:f6:aa:05:6f:2b:ff:23:03:1f:
08:53:2c:f6:f2:a5:12:a1:4a:9f:49:3c:13:bf:04:
fd:9b:48:5c:5f:de:07:f7:61:7b:e2:a5:80:a5:90:
bf:57:30:df:90:f5:81:32:00:5b:02:10:7b:44:eb:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4F:18:59:EF:B2:D8:D9:57:23:48:F3:7D:34:05:8E:1C:3C:47:D1
X509v3 Authority Key Identifier:
keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:a7:25:ae:c9:23:f0:89:cb:99:68:83:0e:dc:8e:d0:f1:84:
c6:69:61:79:5e:8b:61:1f:b3:28:f2:29:d9:7f:87:98:2e:39:
28:30:b5:9a:a0:61:39:de:92:c8:8e:7c:e2:28:2c:af:27:62:
2e:cc:ea:b4:c2:7c:c5:95:4f:43:3f:e5:d6:14:0e:d3:b3:a3:
53:7c:18:89:e8:16:0d:8b:04:7e:65:30:8d:62:44:63:ff:2f:
77:77:53:5d:a1:b4:7d:86:39:a6:8d:d7:11:e1:9a:eb:60:3b:
d9:e0:c6:bd:7f:96:d7:ca:1e:9a:e2:91:5c:68:ba:9d:92:23:
e2:66:2c:6a:b7:b1:e5:f5:20:52:4e:37:b1:2b:fb:fc:16:fa:
e5:ff:8f:ee:c8:87:e9:a4:88:1f:e7:b7:fb:76:ad:eb:9e:f3:
66:32:46:64:b0:52:d9:0c:f6:10:3f:50:84:00:27:cd:12:c6:
2b:5d:d6:d1:a3:83:ef:2e:88:c8:dd:3e:d0:66:6a:ab:1d:74:
46:97:d9:80:a4:0c:bb:56:63:fe:7d:fd:dc:a2:21:d8:ed:61:
38:b0:58:a8:4a:7c:5c:d8:12:f2:e6:65:e3:b6:ec:94:85:d0:
c8:e8:83:ee:9f:36:37:c2:32:e2:78:d2:90:a8:0b:4c:9f:3d:
68:d2:55:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG
NDdBQzA2M0QwHhcNMjYwMzAxMDI1NzEzWhcNMjYwMzA4MDI1NzEzWjAYMRYwFAYD
VQQDDA02OWEzYWIwOS04ODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzuSsUXGpsbnRZ3eu3tRvo88daavSvswv6TnIpBKML8+nHB88D6PrhfhNC7hM
koS/XkuVkcxQ08rwIr+tLSfFU4sj9V/DaxvdsqJxqWgiIxGziZleOv7E3mjCEm+7
g9rRZMe55SU0BaGcgXtyd4qL5KWkqIj3J9gR4MKMRBiodtUZwYqzgZDXMz2oZDSu
aSZ9W9dP13ZmWCUlycjxgdyYGcrOXGJy0cR7UNPCO1Vm8GJakwtryHKYHc70J0eo
2HrzK8TL/On+KOP2qgVvK/8jAx8IUyz28qUSoUqfSTwTvwT9m0hcX94H92F74qWA
pZC/VzDfkPWBMgBbAhB7ROtykQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLtPGFnv
stjZVyNI8300BY4cPEfRMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2
QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz
WGhaSnVpVVBhWF8wZXNCajAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl6clrskj8InLmWiDDtyO0PGExmlheV6LYR+zKPIp2X+HmC45KDC1mqBhOd6S
yI584igsrydiLszqtMJ8xZVPQz/l1hQO07OjU3wYiegWDYsEfmUwjWJEY/8vd3dT
XaG0fYY5po3XEeGa62A72eDGvX+W18oemuKRXGi6nZIj4mYsarex5fUgUk43sSv7
/Bb65f+P7siH6aSIH+e3+3at657zZjJGZLBS2Qz2ED9QhAAnzRLGK13W0aOD7y6I
yN0+0GZqqx10RpfZgKQMu1Zj/n393KIh2O1hOLBYqEp8XNgS8uZl47bslIXQyOiD
7p82N8Iy4njSkKgLTJ89aNJVyg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:26 2026 by rpki-client