
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json)
Hash identifier: 9o3HFYOUq6MdaEMpmK2yTKOwSSj4xVV8slwvURF2Tt4=
Subject key identifier: 88:CE:52:84:38:68:9E:00:9A:F8:02:D2:32:75:2C:C9:1C:66:BB:47
Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6
Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6
Certificate serial: 0C3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
Manifest number: 0C2F
Signing time: Mon 02 Mar 2026 18:42:12 +0000
Manifest this update: Mon 02 Mar 2026 18:42:12 +0000
Manifest next update: Mon 09 Mar 2026 18:42:12 +0000
Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: N91NccvwolbD+bB8ZPVlH4PiCbseObPJvkAfjzmP9Ho=)
2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: XVQ4vbjL6icjdKZX/LPthrQnXfbccFG9ShLv4t7665I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl
rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6
Validity
Not Before: Mar 2 18:42:12 2026 GMT
Not After : Mar 9 18:42:12 2026 GMT
Subject: CN=69a5da04-736d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:e3:37:f4:a6:b1:16:bf:9f:5e:b4:80:42:
48:f2:01:15:e6:dd:3a:59:2f:3f:dc:b2:1a:5d:45:
1d:3a:8b:d5:b0:05:3a:4c:30:57:3b:77:85:b2:4f:
98:d9:1d:93:a0:a0:86:77:a2:5a:36:25:1a:a8:1a:
30:55:05:62:62:07:87:24:70:05:61:93:c6:2b:c2:
06:60:36:62:7a:5a:80:5c:be:6c:34:8f:e0:22:de:
61:76:c1:97:54:cb:8a:00:54:39:43:7e:70:1c:53:
a3:14:fb:ea:62:a1:d5:56:74:ed:52:b2:e5:e9:fa:
d3:93:37:58:3a:10:d2:d2:65:96:38:58:5c:0e:63:
b9:f9:0d:0f:eb:6c:a3:95:e6:98:47:6a:8d:c0:a3:
4a:93:47:60:1d:2c:92:06:ca:58:30:b6:f7:be:00:
e9:ce:da:88:8c:4d:18:f8:ea:b5:eb:7f:61:3a:77:
5a:d3:50:81:ba:0c:5c:ea:74:15:45:2e:aa:87:d7:
62:9e:d7:1f:3e:cf:be:41:84:08:e5:c9:2c:f0:ef:
69:e4:eb:64:ca:e6:f1:28:a8:89:69:0a:02:22:40:
b6:ab:2a:a3:42:74:00:fa:a4:63:15:44:0e:8b:92:
90:2c:0e:51:7c:43:01:df:d2:fe:f0:37:70:19:cf:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CE:52:84:38:68:9E:00:9A:F8:02:D2:32:75:2C:C9:1C:66:BB:47
X509v3 Authority Key Identifier:
keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:17:08:a9:5e:c1:39:30:58:60:26:c1:e3:9b:3f:61:fb:8f:
5b:b0:d0:68:af:33:be:4c:fe:31:1f:04:f6:6a:54:bd:9d:de:
7e:c8:99:83:e1:61:d3:c9:a3:fb:57:51:b6:6f:ee:01:af:11:
54:37:33:61:30:a2:11:c9:de:d4:cc:43:bf:c7:d6:bc:7e:04:
7f:f7:ca:ec:82:13:d6:cf:86:e0:af:4f:ef:d5:02:22:a5:7d:
17:06:77:06:a9:a4:c6:8a:f0:69:5a:d5:79:81:dd:a6:57:2a:
5f:f5:e6:2f:14:2f:4b:d1:8d:e5:ab:94:32:c9:ec:c9:b9:f9:
85:ed:dc:e9:67:b8:33:49:f8:fb:c3:43:f0:ff:b4:d4:59:b3:
7a:8a:5d:d0:6d:55:ed:5a:23:06:f5:11:17:fa:49:3b:82:05:
9e:12:59:05:b2:7e:ba:07:27:e2:a2:85:76:fe:79:c2:4b:a8:
74:22:a7:2e:88:6d:30:47:29:9a:be:99:49:92:d1:f1:c9:e8:
9e:fc:c1:fd:63:1f:eb:23:38:2f:e7:1c:69:d6:a1:d8:41:46:
13:17:58:7c:9a:ef:70:66:56:10:2f:ad:a0:88:f5:7c:e2:61:
9b:f7:63:16:a4:56:4d:2b:60:ba:ae:a4:c0:7a:45:58:2c:f0:
e5:67:c8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:35 2026 by rpki-client