
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json)
Hash identifier: v1xCOINZZ0W3KxK5cvPoJpWTx6zt89XCpo0Yt/hPkHo=
Subject key identifier: 26:60:14:C2:C2:46:4D:F1:B0:80:CC:94:D9:2A:17:3A:38:C7:B4:AA
Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A
Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
Manifest number: 01D9
Signing time: Mon 02 Mar 2026 01:20:27 +0000
Manifest this update: Mon 02 Mar 2026 01:20:26 +0000
Manifest next update: Mon 09 Mar 2026 01:20:26 +0000
Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: s3R23b0VphNJODHszIUjOpfnb3ApKvLoDA0hvGGDEEo=)
2: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: opDVDCbsBQzHpTdEZkXg8pK+yXFCw2wR9EtK3a8UOv0=)
3: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: AF0W4FDa8CoBiD6z3FUESJd4F8PISKrGbqKu0L1rR38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl
rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A
Validity
Not Before: Mar 2 01:20:26 2026 GMT
Not After : Mar 9 01:20:26 2026 GMT
Subject: CN=69a4e5db-523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:22:19:c9:e7:dd:61:73:84:94:c2:0b:de:
83:f5:90:16:38:20:34:b1:9d:d1:f2:58:b7:cc:2d:
0b:fc:e8:74:ab:d3:6e:6a:d9:02:11:0e:95:13:02:
e7:9e:9f:76:b5:5e:60:6d:31:33:f4:90:ef:ed:b2:
ca:b7:e0:ed:7d:4a:67:a5:02:e2:1b:16:68:e8:76:
af:25:e2:a4:1e:54:fd:05:e2:f3:65:92:10:ed:46:
6c:e4:c4:b0:36:a2:bc:0c:24:57:24:e8:47:aa:70:
20:3c:2c:66:5c:d0:46:67:22:b6:35:46:c4:58:8a:
34:59:d4:80:e6:92:f9:d5:81:61:a7:95:59:cc:53:
b4:f3:d3:5f:7a:fd:38:c7:39:28:59:6e:38:88:59:
45:c4:27:35:76:26:a3:71:5a:d1:e9:54:17:9c:b6:
47:38:b3:17:e2:d6:e2:ad:bb:5c:5d:a2:ac:cc:ba:
0e:67:ac:0a:25:f5:7d:9f:bc:fd:1b:40:c4:f1:0e:
ac:1d:2b:de:b3:06:a5:a0:f1:ce:d1:b0:4a:1f:b9:
33:df:1a:0e:ff:14:cb:8e:88:b6:82:22:d5:89:1b:
7f:ee:83:c7:26:30:db:74:40:aa:5b:18:80:ae:45:
6c:c4:6e:81:9d:8e:2d:e4:d0:a0:00:80:e2:90:89:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:60:14:C2:C2:46:4D:F1:B0:80:CC:94:D9:2A:17:3A:38:C7:B4:AA
X509v3 Authority Key Identifier:
keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:27:51:e3:be:a9:ca:7d:5c:1d:ea:99:a8:8f:db:7d:28:0d:
db:0f:7d:d8:1a:fe:64:b1:34:92:04:ff:49:33:a4:f4:5d:93:
d5:71:e8:3a:24:5b:79:3f:b1:ac:56:1e:8a:17:9e:6f:3a:86:
40:2c:2e:c8:a1:81:d4:10:59:c4:3a:7b:14:1c:2c:44:69:96:
74:b6:ef:78:ff:2c:6d:6a:e4:4d:53:02:34:2f:d6:81:56:7b:
87:c1:c9:0e:15:26:dc:c3:97:b7:c6:e3:fd:d9:91:6d:cc:3e:
07:62:1c:04:67:5d:39:08:e9:ab:4b:3a:78:fb:8a:6f:66:c1:
f9:33:8a:d2:95:1d:14:d8:af:f2:0e:9a:64:c2:13:0b:97:94:
dc:bf:23:82:6e:7f:d3:2b:3a:36:cf:e3:ba:48:23:a3:7f:3b:
a4:b7:6d:bf:dd:b7:f5:eb:d7:c1:3b:6a:d5:70:61:5b:c6:d9:
65:26:c4:b1:4e:c6:0b:e4:57:d8:cf:dc:4d:32:1e:5f:85:a8:
12:d6:71:c6:41:c5:9c:75:6c:f6:f1:d6:91:f0:0e:b3:ab:4c:
05:79:af:6a:9c:67:89:24:f2:df:1b:80:1e:1f:65:81:12:b8:
82:f5:66:94:c8:f2:84:c0:4f:57:6d:4b:85:81:e9:10:d2:9e:
db:ee:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:26 2026 by rpki-client