
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json)
Hash identifier: hPGaxDjQnTZFwXntQmFbGrJgRns9FbzOqc4bRWrabbE=
Subject key identifier: E8:BC:D8:79:B4:81:32:D5:FA:6D:60:67:D2:33:92:FB:97:B2:5C:60
Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Certificate serial: 04DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
Manifest number: 04D8
Signing time: Mon 02 Mar 2026 02:49:12 +0000
Manifest this update: Mon 02 Mar 2026 02:49:11 +0000
Manifest next update: Mon 09 Mar 2026 02:49:11 +0000
Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: x45L6CiTgLOcxT4aQkb/a2W/4BUtsNMCiE0gfoy2RQo=)
2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: wBrg9EM4NwDkdFMcEqz/Qv1QuFLGEbWiLtavdDRu3+I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Validity
Not Before: Mar 2 02:49:11 2026 GMT
Not After : Mar 9 02:49:11 2026 GMT
Subject: CN=69a4faa8-a177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:ad:fe:bb:1a:af:05:43:59:40:3d:c5:bd:
e1:1f:97:77:9c:f8:07:85:13:03:f2:12:23:eb:5e:
87:40:45:c9:f7:79:c9:61:21:7e:8b:94:d4:4a:6a:
65:af:9f:ae:71:30:2f:f0:e6:56:53:1d:76:cb:cf:
88:d6:bd:55:e1:48:b9:cc:51:23:14:0f:b0:0c:88:
83:90:ed:e6:60:d3:96:bd:f5:a2:00:a8:05:24:30:
80:06:41:f7:cc:0d:1f:ec:67:8c:be:6f:5d:7d:2c:
c2:df:cd:74:e2:f6:42:bd:d4:0c:1a:c5:db:ed:2b:
49:ee:a1:67:d1:35:29:ef:56:37:b3:44:e0:da:ff:
6a:77:9b:47:a8:27:dd:4a:ea:66:cc:57:3a:a6:e3:
c6:9f:b2:5a:ac:c5:27:5e:4f:bf:1a:9b:1f:84:73:
0f:6d:d2:fe:f6:31:80:23:ff:81:a8:59:47:27:74:
64:c0:e6:11:11:94:80:4e:ef:94:d1:df:91:02:c2:
82:bb:05:c4:38:80:f1:86:1a:2f:4f:08:a8:52:9f:
4f:7c:43:54:36:9a:ae:0a:ad:0d:c2:7a:b3:d5:79:
d6:64:90:88:a9:9f:03:f4:b2:0c:23:31:8a:9f:1b:
40:9a:21:f1:4d:75:38:76:81:45:ad:a3:75:0d:4c:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:D8:79:B4:81:32:D5:FA:6D:60:67:D2:33:92:FB:97:B2:5C:60
X509v3 Authority Key Identifier:
keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:21:47:b5:57:e6:72:e8:e8:af:d8:2d:a9:48:27:a4:18:3a:
70:89:13:06:8b:05:a0:ab:b5:fb:fe:49:2f:19:3d:e5:ea:ac:
1a:95:a2:c6:f1:fa:6f:3e:75:3a:a2:9e:37:c5:8a:47:f0:33:
dd:0c:d3:21:f9:98:92:43:b9:f7:df:0c:9f:2e:53:0d:b2:4c:
58:6b:1b:da:8c:99:81:c1:45:d0:ed:72:e1:0a:a8:71:65:10:
88:e1:65:51:2a:07:5a:34:e7:f5:2a:2d:85:e2:f1:81:98:c2:
09:1d:e3:b9:9d:08:f2:06:cb:72:6b:56:86:32:df:f8:b4:47:
ac:26:e6:74:86:e9:48:fb:e7:cc:68:0d:07:0b:78:c4:56:ad:
3e:42:71:25:df:fe:28:fb:cc:44:97:d0:b9:76:78:06:92:1a:
33:8e:30:87:98:53:c0:b6:96:a2:6d:b6:55:84:d4:e7:4c:17:
c9:11:86:fb:64:43:37:cd:24:29:7d:72:01:52:ca:46:81:08:
a7:5e:d8:db:e0:8e:10:c9:8a:d3:31:bb:e1:a7:b1:f9:10:86:
a7:ee:ff:f4:29:bc:e3:1b:43:e1:f5:37:ca:85:9b:6c:69:1f:
88:4f:f5:ff:ef:32:c1:ff:bf:08:ef:69:e5:bc:77:a7:03:3f:
3e:54:df:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:57 2026 by rpki-client