
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier: jbHVqgQzkSY5H2tq19b8udxQfWVrd/q9/vOlz5NKLEg=
Subject key identifier: 84:A8:87:FC:7E:AF:68:31:EB:CF:F6:9F:EE:FD:BA:9A:42:64:6F:43
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer: /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number: 35
Signing time: Sun 01 Mar 2026 09:59:23 +0000
Manifest this update: Sun 01 Mar 2026 09:59:22 +0000
Manifest next update: Sun 08 Mar 2026 09:59:22 +0000
Files and hashes: 1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: ecsGDJLOtdx12VSq9Y1KSs166v+R96OJ+1mwEVP6ZOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Validity
Not Before: Mar 1 09:59:22 2026 GMT
Not After : Mar 8 09:59:22 2026 GMT
Subject: CN=69a40dfa-4de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:fe:a8:6f:5e:41:25:0c:10:66:9e:3e:36:
1a:eb:5e:4a:d0:07:07:c2:90:67:dd:7e:9a:77:12:
b7:95:5d:f0:6e:20:1b:2f:bc:e7:bb:2d:95:25:3e:
e5:ab:d0:8c:ce:ff:53:e5:cd:cb:bc:41:51:e7:30:
b0:74:df:a0:ee:e6:c6:6f:a6:29:38:d9:fc:bf:0c:
18:9c:73:80:61:12:59:9f:ab:c2:04:19:96:75:9d:
9f:35:1e:1d:d0:c8:db:74:da:fb:28:6a:0d:b9:c5:
e9:b7:6a:0d:d7:73:4e:72:df:ac:6b:1f:3a:27:38:
64:c6:f8:9b:61:06:4c:19:2f:b7:a5:44:09:bd:fd:
cf:d6:e7:df:13:f4:fe:f6:d9:aa:90:b9:98:9a:bc:
db:8f:52:db:eb:6e:7f:52:7d:28:2e:49:2e:2e:4a:
1c:5c:8e:06:26:e0:bb:73:31:92:ae:9b:42:90:69:
64:1e:e5:9b:95:95:54:bc:d4:be:91:c4:df:85:ec:
a4:46:e1:c0:74:c4:b9:d3:14:9d:bb:10:53:ce:ec:
88:af:e1:e9:c3:c1:f2:2b:62:b8:fb:10:bb:d7:5e:
ab:9d:64:10:dc:df:c6:fc:70:b5:d7:b2:e6:de:98:
f1:bb:0f:ee:35:bb:34:18:51:b4:82:6a:28:d4:f5:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A8:87:FC:7E:AF:68:31:EB:CF:F6:9F:EE:FD:BA:9A:42:64:6F:43
X509v3 Authority Key Identifier:
keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:eb:27:95:19:e1:36:1e:a8:19:a8:90:47:c1:7e:15:24:8e:
38:85:97:7b:95:9b:5b:5e:78:9d:2c:c3:0f:35:6a:94:89:2f:
6b:f7:47:b2:48:36:4f:21:7f:a5:83:c8:d9:1d:cc:93:8f:65:
5f:18:ff:3b:f9:c0:2c:5e:ea:99:80:9a:b2:ef:8b:70:71:ef:
49:fb:60:5c:98:1d:a7:13:5b:36:5e:49:77:8a:1c:ad:98:aa:
d6:f4:13:57:04:62:df:55:06:a4:21:b9:dd:45:32:f2:c7:83:
40:c6:f8:c4:cb:30:2e:2c:c8:c5:06:ec:56:fb:ab:c4:57:54:
39:94:fd:58:4f:65:cd:ec:8f:a1:a5:62:08:24:b6:be:74:e5:
fc:32:1b:16:a4:fb:61:54:b1:e5:d3:f2:5b:16:f1:85:c8:45:
ea:63:2d:19:05:dd:ba:42:f0:38:60:7c:6b:69:7a:11:5e:57:
c1:e2:30:55:bd:79:3a:c4:03:6f:86:0f:4f:df:61:09:15:c1:
11:97:11:aa:a3:21:e1:3c:7f:04:9f:2a:cf:fb:4a:01:93:d9:
90:57:fd:5d:96:eb:b7:29:16:4f:b7:68:ca:9d:ce:e4:d0:9e:
9a:78:9e:dc:9d:86:5f:36:a5:0c:91:7e:10:71:82:34:86:29:
03:99:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:17 2026 by rpki-client