
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier: i8q3dk6YApMX4IcdY8kN9hGy9mS+aDujVss5v3ZkFHw=
Subject key identifier: D8:0C:15:0D:BC:CF:49:9E:03:52:6E:46:41:D8:6E:6E:2A:00:E9:98
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial: 04E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number: 04DA
Signing time: Mon 02 Mar 2026 03:13:25 +0000
Manifest this update: Mon 02 Mar 2026 03:13:23 +0000
Manifest next update: Mon 09 Mar 2026 03:13:23 +0000
Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: pLjuclinu17WWk2djdoz7uACZDJ5X6F+xT1E4dXD2Ag=)
2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 9TiMPZCiPjXqHR9KYA2Vwop1NQpu2NZ+fmkYgv1k0eQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Validity
Not Before: Mar 2 03:13:23 2026 GMT
Not After : Mar 9 03:13:23 2026 GMT
Subject: CN=69a50055-6ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:22:9a:d1:3e:e9:48:a9:d9:72:5e:75:d1:
ec:f8:96:fb:de:d9:f8:95:17:ec:f0:0d:cb:2e:5b:
33:4e:08:4f:59:bf:ec:0a:96:d0:33:3c:45:da:26:
af:41:0c:7d:c4:4e:93:f9:55:56:74:02:35:96:6f:
d2:25:ac:30:ba:8a:53:58:b2:3d:e2:84:dc:61:4d:
33:ca:19:00:ec:46:c4:09:55:f5:36:76:68:37:99:
50:d2:d2:67:21:9f:75:99:9a:e0:a1:d0:44:f9:d5:
b9:cd:8a:2a:3a:04:df:18:93:71:f7:e7:55:1d:8c:
5e:cd:b0:24:de:84:01:03:3c:f1:8b:46:a1:c6:07:
15:d5:f5:92:4b:3d:57:1a:18:7e:76:22:b8:f4:b7:
62:0a:fb:87:50:f4:0f:46:bb:ba:d4:cf:fe:d8:f2:
96:e7:f8:27:51:93:0c:9c:e7:06:51:d7:31:21:ba:
ea:f5:24:7e:79:66:2a:1a:dc:55:91:60:1d:bb:48:
47:ea:60:ee:2b:d2:9e:f6:9a:9c:dc:9f:9b:3b:a5:
1b:2f:5e:25:ce:be:f8:d6:61:dd:d6:cd:7b:17:fd:
21:0e:12:8f:43:bd:66:ca:d9:c6:3d:b2:c2:df:b8:
26:30:d4:80:f0:a5:a2:16:cb:55:29:c4:08:34:a5:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0C:15:0D:BC:CF:49:9E:03:52:6E:46:41:D8:6E:6E:2A:00:E9:98
X509v3 Authority Key Identifier:
keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b7:e8:b7:8f:15:8f:1f:22:f2:5a:b1:36:bb:e4:19:c7:cd:
24:41:bd:b8:9e:e8:e5:07:9b:11:6f:c8:be:b9:b2:b7:b3:8c:
ee:59:9f:74:6b:62:96:e8:da:b7:86:95:3f:08:8f:19:3e:ea:
ec:e6:65:88:9e:66:1f:d8:22:6c:89:1b:13:9c:6a:85:52:88:
13:dc:04:03:d1:ff:b6:f4:40:01:1d:ea:5e:c6:d1:08:25:6a:
02:12:98:80:f1:f8:4f:f9:ed:ce:e1:34:f0:a7:f5:50:32:01:
4e:27:b9:8a:ab:d2:16:69:42:14:89:36:f3:0f:2f:e1:22:a6:
19:7f:32:46:8b:f9:3c:ab:62:96:2e:b6:d8:cc:e1:1f:97:9b:
5d:80:f7:20:b7:ea:ff:e6:7a:bd:b2:71:c5:3b:c2:27:c2:80:
62:1a:05:d4:97:d9:ac:e3:67:5d:ef:31:2d:bf:fa:d8:46:b9:
64:a5:07:59:40:e0:26:75:5e:2f:6f:0f:0e:54:d0:60:05:92:
75:5a:38:50:7b:c6:67:93:06:3c:5e:8b:d6:e0:ef:03:55:58:
f2:99:f3:f4:35:ff:d5:fa:7e:7a:47:e6:b2:fb:c6:bb:d9:f5:
e7:4d:d6:ff:11:2a:d0:41:71:9c:cc:2f:5a:b5:ac:72:c6:6f:
ef:ca:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:11 2026 by rpki-client