
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json)
Hash identifier: EL+DggoZ4begzC4i5Oww9nZpZc8LvfGYohvbS7RRKVo=
Subject key identifier: DA:16:F1:51:A5:90:BC:BC:84:56:60:3E:A9:16:73:6B:1B:08:10:DE
Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Certificate serial: 0659
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
Manifest number: 0652
Signing time: Mon 02 Mar 2026 00:38:10 +0000
Manifest this update: Mon 02 Mar 2026 00:38:08 +0000
Manifest next update: Mon 09 Mar 2026 00:38:08 +0000
Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: +QmNE58EUDoXj4dII/aIo9iExsZTBRQE4Xh3bC+Kris=)
2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: TOu4rTok/YTcP4XYz+qFAKVXMljHMOdt2vuAWSKuetQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1625 (0x659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Validity
Not Before: Mar 2 00:38:08 2026 GMT
Not After : Mar 9 00:38:08 2026 GMT
Subject: CN=69a4dbf1-7ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:49:e7:3e:d2:16:0c:c7:cb:72:ef:4e:57:
a4:9f:c6:6d:cc:54:ab:2c:62:bc:67:e0:9a:94:02:
86:57:80:7b:a5:24:1d:bb:8a:d9:ef:cb:a4:a2:76:
61:83:12:4a:f6:93:2a:2e:2a:a3:8e:4c:92:ba:d5:
24:99:5a:ff:2c:29:7e:b3:d0:49:6a:81:d4:27:2d:
59:78:8f:a3:c8:0d:c5:92:f3:c7:5f:ca:d9:36:33:
08:d1:5b:e7:3b:0b:d0:c0:b9:ed:12:4c:97:dd:40:
a5:d0:91:08:b0:33:bc:51:3e:b4:42:e9:0a:2c:ca:
7e:5d:89:c9:fc:bd:3a:07:6a:b4:5e:a1:67:ce:ef:
ef:cf:9d:dc:13:e0:70:b1:fa:23:0f:d4:65:2b:94:
00:19:db:0d:a0:6f:71:8b:66:0d:9e:0e:fe:1f:a8:
ee:50:0c:21:c2:e0:6f:7c:64:98:32:ea:05:c4:f2:
01:82:16:6d:bf:40:11:2e:00:c0:7e:83:50:53:79:
cb:7e:25:7a:28:7d:c5:bc:c9:38:9a:82:4e:01:be:
dd:a5:0e:66:26:57:c3:5e:b4:70:a6:ee:c1:ee:47:
48:93:f7:b6:a7:98:0a:8c:eb:0f:22:4b:5c:f8:71:
aa:c2:15:57:2d:ee:64:53:5f:4a:41:dc:b9:19:1e:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:16:F1:51:A5:90:BC:BC:84:56:60:3E:A9:16:73:6B:1B:08:10:DE
X509v3 Authority Key Identifier:
keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:0d:72:69:7c:94:89:4b:18:15:c4:2e:95:f2:d0:5f:71:
ad:79:53:53:bb:6c:07:dc:aa:bf:ff:95:c0:76:3b:7b:9d:4e:
a2:ba:8e:03:e5:58:25:1a:7c:3a:b4:9b:b8:16:47:3e:06:39:
a1:95:22:7d:4e:6b:c0:60:2c:b8:54:53:00:ed:8e:af:38:f9:
44:a7:95:11:70:83:c4:c0:23:b8:d6:e4:cf:2e:55:23:d4:f3:
20:9f:3d:34:bb:48:80:da:e9:fa:9d:bf:ea:90:85:9f:fb:5e:
70:c0:91:99:45:e0:71:ca:02:5f:8c:38:76:c8:c2:75:b0:eb:
95:37:d2:e9:94:c5:02:e5:00:e4:ba:b0:ba:4e:0c:52:d0:62:
12:c7:f5:43:6b:f6:f2:76:db:42:ff:47:58:b2:cc:bf:22:12:
1d:e3:03:1c:11:4e:81:e4:76:cf:6b:54:1a:88:2b:a5:f7:58:
94:d9:07:44:c4:f8:fa:4f:7a:d5:75:fc:e2:e2:d4:97:ca:af:
64:7f:fc:e6:ca:f4:20:84:99:c5:35:af:ad:6a:95:c1:c3:0c:
8b:7a:81:d4:29:80:85:44:b7:7c:f9:f3:ab:8d:a4:8f:7c:ec:
c4:5c:23:da:02:22:0b:d1:5e:a4:03:28:c2:66:25:13:48:b2:
70:1a:3f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:31 2026 by rpki-client