
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json)
Hash identifier: B++lurYiBHh8AbNzzu09b/lKX0OgN2OaKsiB8LmjU+0=
Subject key identifier: 70:A0:1D:F6:F4:FB:6E:9F:A0:B1:C9:18:01:81:C5:5A:90:75:89:84
Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
Manifest number: 017C
Signing time: Sun 01 Mar 2026 05:35:10 +0000
Manifest this update: Sun 01 Mar 2026 05:35:10 +0000
Manifest next update: Sun 08 Mar 2026 05:35:10 +0000
Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: 8Iinku+QZBAmj03W2TsPTJGE/CjgqZBknuP6VUbWcRY=)
2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: YjW6NRyoT2Yd6bOqBMqlNLXFCINZXzceER+JobJKz/s=)
3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: yJ7MqVkk1tgytYWvBl1+oFmFkyxkl54djaWZOByH5xI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Validity
Not Before: Mar 1 05:35:10 2026 GMT
Not After : Mar 8 05:35:10 2026 GMT
Subject: CN=69a3d00e-3f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:8d:98:a3:98:57:19:6d:c4:7b:08:46:9d:
f7:82:f6:ee:b7:48:6a:6a:ee:49:f5:47:d4:51:4c:
18:bd:a4:59:ff:4b:cd:30:26:41:cc:38:a4:b7:28:
e5:cf:21:10:95:8f:ea:e3:82:92:9b:fc:54:7e:7b:
9d:fd:f6:cf:9d:f2:5e:c2:98:9d:99:f8:a9:c8:60:
08:75:89:55:13:b3:80:05:90:b7:32:5f:3d:ce:30:
24:12:ca:b1:0c:5f:d7:9d:8e:05:04:b3:1d:71:c5:
50:4e:c6:99:d0:2e:3f:57:44:ca:f8:f3:40:46:46:
d3:cc:f3:60:b9:11:09:3c:d1:7a:16:a1:03:a9:2c:
41:90:c0:3f:6f:39:57:f0:a6:38:5a:10:90:72:3f:
84:3a:0c:7b:56:c0:4a:6b:fd:f7:bf:f3:5e:3c:df:
f2:18:a9:b7:e9:1a:99:ff:65:bb:18:1e:44:84:e1:
56:46:80:8c:c8:dc:2d:24:15:41:a3:50:14:35:2d:
19:72:d6:c9:c2:14:9c:3e:48:86:f2:3d:a9:0a:d7:
51:15:f2:57:55:ed:14:5d:e9:7a:2e:a7:45:9b:09:
4f:8e:ff:03:62:42:f4:27:f4:72:fe:88:74:f4:8e:
19:bc:48:07:29:da:d7:f0:ad:6b:f8:9c:29:08:d8:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A0:1D:F6:F4:FB:6E:9F:A0:B1:C9:18:01:81:C5:5A:90:75:89:84
X509v3 Authority Key Identifier:
keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:b0:72:f6:86:fc:f6:10:30:b3:3c:9b:02:83:71:2e:10:af:
18:75:bd:72:b9:6e:fb:83:8b:63:61:9a:65:13:ad:9c:9c:3d:
1c:0e:42:dc:26:a7:db:f3:a0:7b:4c:1a:15:3a:b0:0f:b3:a8:
59:46:23:6a:49:e2:04:7e:bd:b7:9c:e8:17:4c:95:83:c7:15:
ab:09:eb:6c:f3:8b:83:ee:a8:d5:dc:03:ea:5b:3c:66:aa:6e:
7b:16:3a:be:3a:a9:dd:54:64:73:3a:4c:43:6d:06:84:11:4a:
94:3d:33:91:f4:41:78:1c:5f:ac:c4:c4:6e:32:a9:6e:c5:a3:
be:be:ff:c4:70:e9:77:f8:ef:9f:52:ca:82:8c:a9:1f:fa:cf:
8a:91:99:11:99:16:ab:d7:dc:12:4a:db:46:f2:7f:6a:e3:2f:
62:6c:f8:a7:fa:19:39:a8:91:a3:04:51:77:1b:d3:67:45:64:
d3:bb:59:1c:8f:85:bb:b8:6e:4b:78:27:39:6c:6e:6d:37:09:
fb:93:7b:b3:50:1e:01:30:52:e3:b3:67:1d:d3:99:ea:bf:78:
cc:9d:1c:3d:07:cd:f3:c2:51:3e:4a:ea:df:ba:9e:dc:2f:d9:
32:82:c0:d3:75:82:f8:fa:41:eb:23:48:8e:60:9c:85:0f:f5:
3b:d4:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:51 2026 by rpki-client