
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
File: 1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json)
Hash identifier: 6sPUeSeInBtWzC4LwgkiX0qtxPEjJ6E2MdmCeMGMLig=
Subject key identifier: 0F:D3:56:EB:7D:80:5F:7C:60:D6:53:4B:0C:CD:BA:E8:0D:68:5D:97
Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D
Certificate issuer: /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
Certificate serial: 0CD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
Manifest number: 0CC6
Signing time: Mon 02 Mar 2026 02:10:27 +0000
Manifest this update: Mon 02 Mar 2026 02:10:26 +0000
Manifest next update: Mon 09 Mar 2026 02:10:26 +0000
Files and hashes: 1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: mTQVIMIFpUimpKQa5HhP9r5rXLY2Pr3c/WHlNmvoKrI=)
2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: MsSst93R2N7mg9PwvaaO00iOqWPQd/MBvSgtfftl+bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl
rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3281 (0xcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123180, serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
Validity
Not Before: Mar 2 02:10:26 2026 GMT
Not After : Mar 9 02:10:26 2026 GMT
Subject: CN=69a4f193-cde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:2c:1d:5e:49:03:89:39:94:7a:f8:16:01:
ba:37:15:40:0b:df:40:fc:93:ec:16:22:7d:95:f6:
72:39:56:79:f2:f7:89:60:4c:cd:f0:32:11:70:d8:
a7:92:87:eb:14:6b:fc:df:6f:8c:03:42:fd:21:96:
f2:e2:9f:51:90:7e:f7:0d:5e:d7:87:de:ca:ac:18:
f7:ee:e6:c1:a2:b3:cc:94:20:49:41:4e:cb:3d:33:
a6:af:e6:48:e3:62:1b:de:63:9f:3d:71:63:c6:73:
ea:c2:ac:45:b8:0e:10:88:43:5b:db:66:81:ef:b7:
6e:58:a8:6e:9e:48:65:48:a4:51:d5:32:22:1b:95:
5f:a2:db:ed:32:68:cf:a7:cc:79:6d:cc:fe:fb:87:
ad:3a:17:f9:45:bc:41:a5:ce:8a:d4:5f:fb:72:f6:
c3:e5:46:0e:b4:98:e0:63:68:f3:ed:a1:97:6e:31:
8f:d2:c7:7d:32:9f:bc:1a:62:31:58:0e:0c:60:d8:
8d:8e:8c:d6:72:d5:7e:08:27:4f:75:a1:7a:a0:88:
d1:c3:60:e8:9a:b2:80:89:a1:74:86:22:ba:38:c0:
7f:6b:13:6b:0e:f0:fb:3b:a6:71:db:b6:5c:75:98:
e6:78:13:c1:da:17:ce:d1:71:af:c8:76:29:9b:39:
de:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D3:56:EB:7D:80:5F:7C:60:D6:53:4B:0C:CD:BA:E8:0D:68:5D:97
X509v3 Authority Key Identifier:
keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:04:66:5d:ea:f1:43:7a:d6:78:27:a4:20:31:08:3c:39:94:
4d:d7:b5:b5:52:3d:e8:ba:71:e3:2d:67:4f:03:4f:ff:48:10:
ad:6b:21:a3:7e:d1:b0:00:e5:93:88:b6:75:cb:87:c8:d9:d6:
79:c7:c0:79:2e:0e:d5:5d:b0:06:f6:a1:39:b3:c1:10:38:3f:
77:61:bd:4c:65:3b:28:ab:1a:48:42:29:f8:ed:67:26:5f:86:
54:eb:4c:ed:e7:4e:e7:7a:0e:f7:c7:77:04:22:98:42:d3:b1:
03:0f:f5:85:1c:89:17:fa:23:d7:75:01:49:4e:c8:c1:bd:73:
12:46:bb:6a:31:b9:68:3a:89:37:07:61:b7:01:07:9f:c5:68:
f3:95:1d:5d:05:70:3b:5b:59:50:7e:97:be:d0:bf:bc:cc:e6:
90:6e:8c:9a:1c:69:25:d4:7d:79:61:55:85:ed:59:ab:62:f2:
c4:f8:b6:a4:a1:1b:a1:ca:fd:c4:24:81:9a:21:9c:16:f4:6d:
66:74:c5:f0:e8:ae:b2:31:1e:8f:a5:56:a0:17:66:cc:6f:90:
54:bb:24:64:ce:89:02:2b:86:78:65:2c:66:1d:ac:27:63:ec:
85:1c:f9:4e:d8:eb:1f:55:99:cd:d9:f6:dc:95:01:01:68:4b:
a5:c1:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:41 2026 by rpki-client