
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json)
Hash identifier: Veup60Cm13DTrH1rPAu9w88bbU5HNBXI2x3F/M6pnBQ=
Subject key identifier: FA:A6:CA:D7:BF:4A:18:F2:0B:F7:C4:AB:78:60:EF:14:1D:2B:13:CC
Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
Manifest number: 0180
Signing time: Sun 01 Mar 2026 05:34:02 +0000
Manifest this update: Sun 01 Mar 2026 05:34:01 +0000
Manifest next update: Sun 08 Mar 2026 05:34:01 +0000
Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: S4YEUpv6jpuh19JMbKcpFBTz7ScAmxu1f2S9ZzK/epY=)
2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: 78U/w57PvT+FVEdRzkbgRL49bNVYISozUZOyQlDFcE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Validity
Not Before: Mar 1 05:34:01 2026 GMT
Not After : Mar 8 05:34:01 2026 GMT
Subject: CN=69a3cfca-24e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ae:2b:8f:32:2f:85:37:e8:e4:f8:04:a1:1d:
aa:39:f7:3f:26:46:46:01:ca:a1:30:70:63:0c:b5:
c2:58:64:44:e1:7e:fc:fe:e7:5c:a6:c5:23:52:32:
06:d8:41:6f:d4:69:2f:a3:e4:97:30:45:fc:af:8e:
fb:38:e9:fc:ba:85:19:05:a4:fd:aa:d5:11:27:69:
36:2b:b2:0d:da:ff:e1:df:3c:50:af:7c:2e:b4:82:
8d:c1:48:88:8e:4c:f8:f3:8d:50:22:ef:02:13:0f:
d6:a6:ce:34:52:23:53:4c:7f:a8:0e:d7:5e:a7:f5:
30:54:06:34:c5:89:65:83:b3:8a:d3:ac:61:ba:69:
6d:95:89:f0:fc:fe:93:1c:ca:7b:ce:71:e1:75:42:
30:34:6a:5f:d6:fb:72:81:90:23:fc:1d:17:9f:e2:
fa:33:da:95:3b:c1:49:f5:a8:da:f9:b6:3b:ef:2a:
d8:85:cb:42:cf:8b:00:00:e8:17:dc:78:f7:d5:ed:
88:9f:c6:b1:ae:4f:f7:7b:46:36:23:3f:a0:6e:09:
ac:11:59:f2:c8:93:4e:02:95:12:a1:66:89:f9:90:
7e:0a:2f:07:0c:1f:b8:0c:7d:8b:e6:f8:86:35:98:
a8:7c:8d:d6:f0:44:73:6a:7b:99:74:20:d1:a6:fc:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A6:CA:D7:BF:4A:18:F2:0B:F7:C4:AB:78:60:EF:14:1D:2B:13:CC
X509v3 Authority Key Identifier:
keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:8c:53:49:3b:69:b1:8b:d5:bd:e0:b3:03:6b:19:a7:56:f9:
e1:89:5e:21:f5:e4:f3:90:21:44:be:96:7a:61:b7:67:71:c4:
cb:d1:f9:8b:1a:67:ed:aa:4f:6d:8c:b1:1b:e6:df:38:56:a9:
86:91:0c:f1:fe:ea:99:9e:6a:6e:a7:62:84:a8:cb:88:15:fa:
49:ef:ba:e2:15:b0:79:8e:57:31:e7:77:d0:30:3b:d3:d0:a5:
6f:03:f2:87:79:4e:97:14:c9:73:c4:d5:d7:c6:d9:b7:1d:ef:
78:09:84:44:44:c5:e3:32:67:73:7a:c6:f8:9b:c9:1d:f2:8f:
3a:88:40:b7:95:49:39:b0:bf:17:ba:bb:72:35:67:cd:0e:d9:
06:83:9b:d9:e0:0f:ab:60:72:ad:7a:c0:58:66:cb:66:73:77:
6a:3d:f6:81:b0:3f:6b:9c:20:9f:43:b6:b9:01:d8:ec:5f:45:
33:10:12:5b:5a:a0:39:da:0e:e5:a2:14:cc:1b:01:59:4c:7e:
8a:7d:f6:7e:3e:c2:14:a5:3a:b7:57:f5:27:78:db:b4:7c:96:
c5:fc:02:be:71:19:6b:cf:cb:95:18:b1:c5:8c:bc:22:ed:1e:
93:2e:f2:71:d7:04:a4:1a:96:fc:2b:87:95:b6:e5:7b:a7:01:
61:43:09:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:12 2026 by rpki-client