
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json)
Hash identifier: f4cr9H7O+Ml9a2WGrOlyzHTWvBX6xvSRw4wfSOmFXpA=
Subject key identifier: C6:46:18:C9:D3:D1:F0:CC:B1:46:29:58:98:D9:AE:61:EF:F4:52:EA
Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Certificate serial: 0340
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
Manifest number: 033C
Signing time: Sun 01 Mar 2026 01:50:33 +0000
Manifest this update: Sun 01 Mar 2026 01:50:32 +0000
Manifest next update: Sun 08 Mar 2026 01:50:32 +0000
Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: OGP0651dIORoeFjI7sBMqiU3Xs4Hp5PtxnONTG/FemY=)
2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: t6gPHMURjmA0yTxJeNB9SOwe/egrKymREeoN93WnBuU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Validity
Not Before: Mar 1 01:50:32 2026 GMT
Not After : Mar 8 01:50:32 2026 GMT
Subject: CN=69a39b68-ff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:50:02:ed:7f:7d:fb:09:72:cd:3e:9d:1f:
83:8a:f9:7d:08:95:bd:94:c2:be:34:fc:f7:75:69:
dd:be:6a:7b:df:55:26:cf:32:3c:17:72:b8:99:db:
91:66:5c:d5:7e:b4:ab:25:68:fe:71:a9:05:8c:e0:
92:2c:7b:40:21:c8:93:af:15:ca:dc:cb:07:4d:0c:
37:08:f6:36:90:ff:17:68:fc:27:6f:7c:81:6b:83:
37:45:9a:e2:c3:2e:31:8e:ab:c4:91:78:c7:c5:df:
9f:1b:71:7b:5d:8d:ba:62:d8:00:4b:ea:2e:f6:6a:
e7:d8:bc:85:ef:bf:ef:aa:7e:2b:e5:3b:0b:c0:08:
2e:e4:4c:41:1f:07:ff:99:7b:25:83:59:64:dd:5b:
c1:65:a0:a5:07:2b:c8:f3:17:23:ba:be:be:03:0f:
66:3e:23:cf:4f:39:0b:e3:36:92:ad:84:d3:3e:e7:
f2:2a:7d:6d:3a:4f:bd:b4:f6:51:fd:dc:4c:5d:48:
05:6d:b0:ba:8f:cb:e2:45:56:54:39:46:92:13:0a:
a2:12:b9:0c:57:41:65:06:02:35:50:56:23:9a:68:
12:1b:af:de:80:c0:36:9e:d7:02:19:70:1b:21:06:
da:55:42:87:ef:60:20:24:3e:53:7f:86:c7:7a:e9:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:46:18:C9:D3:D1:F0:CC:B1:46:29:58:98:D9:AE:61:EF:F4:52:EA
X509v3 Authority Key Identifier:
keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:19:86:60:50:0c:85:5b:0c:a7:aa:fb:75:db:ea:15:3f:f3:
4a:61:ba:61:19:a0:25:4b:24:72:33:5e:6c:d4:4a:90:b1:77:
71:0d:2c:e4:66:d7:66:30:c4:bd:6d:77:24:21:67:f0:a7:63:
6f:57:4c:eb:b9:1b:41:69:e2:fb:c9:fc:26:98:42:df:b5:99:
ff:52:f0:e8:b6:42:24:24:f3:ca:3b:32:10:6e:3e:61:f9:04:
ae:8c:d2:8b:24:53:7e:c0:d3:29:7a:6f:8d:8a:26:92:00:29:
68:41:ff:2c:56:15:dd:65:06:74:22:0c:52:89:a9:48:32:2d:
5b:e6:b8:5c:a3:27:e9:5b:81:dd:22:22:d9:61:2a:97:30:6a:
07:6c:0c:9f:4d:ad:10:f0:1f:c2:3c:79:6f:b6:dc:83:77:88:
d8:c0:3d:61:e7:40:ce:32:51:d4:17:20:d6:7b:2e:fc:23:a9:
9f:4b:84:8d:30:ba:b8:4a:92:9b:8d:07:91:ca:5c:13:1f:00:
3b:f8:59:a9:4b:c3:24:eb:72:e4:b4:89:4f:8f:e8:05:d2:84:
75:5e:7b:47:22:4c:aa:34:87:f4:8b:30:b8:6e:39:34:cf:2c:
7a:04:42:6a:64:18:fc:20:43:76:96:05:69:09:41:09:40:e2:
93:34:59:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:38 2026 by rpki-client