
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier: 18eMPjMcFM5Uu4mkCkckWp8lV6XfMkiCuNqeNJzwV78=
Subject key identifier: B9:8C:EF:78:C8:BB:CB:98:3E:30:F8:30:59:5C:81:42:23:93:3A:5A
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number: 01BB
Signing time: Sun 01 Mar 2026 23:55:29 +0000
Manifest this update: Sun 01 Mar 2026 23:55:27 +0000
Manifest next update: Sun 08 Mar 2026 23:55:27 +0000
Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: Xc784LDJfyfgo0FLcrih33aEMD54f8TYK1WWEqaAHDY=)
2: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: ZHYQ3wHDGWknZGEZPQElBL1vATEt+W0eJbB64xYMxf8=)
3: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: jCjk18NlTAO280vVwUPsYgJU42p5ZyEQ+Q3/KbnN9I8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Validity
Not Before: Mar 1 23:55:27 2026 GMT
Not After : Mar 8 23:55:27 2026 GMT
Subject: CN=69a4d1f0-3fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:af:27:fd:ed:2b:ac:58:69:69:cd:f3:c8:
65:04:89:ae:5b:39:d6:c2:dc:56:8c:00:38:e4:a6:
c7:82:61:2e:06:2b:e1:05:45:b2:76:e7:9f:c6:92:
5d:3f:98:07:7e:11:6b:3b:3d:09:2a:00:6b:4f:89:
aa:a0:1d:37:7b:84:91:8f:dc:94:3f:6f:a4:b2:5e:
07:3f:21:e0:c1:ff:a8:c3:1b:6b:4b:97:3c:99:14:
be:f3:07:8c:ef:7c:0c:05:ce:4f:74:73:0f:c5:eb:
e6:1f:20:19:76:06:af:fc:82:e9:d1:10:57:19:1b:
dd:ad:92:e7:9b:99:00:c9:d3:b2:83:06:20:d3:d1:
93:37:a6:19:ae:48:51:fd:00:2e:0a:f0:6e:97:e2:
4d:cf:19:7c:68:12:e3:be:a3:6e:4b:ff:61:ad:61:
16:3c:20:ae:4f:87:2d:7b:d4:3d:9d:32:dd:e8:c2:
ae:7f:64:60:ea:1d:bf:c4:21:0c:ec:c4:10:cc:9c:
c3:df:e0:c0:61:a4:2f:ff:9f:e7:08:ab:af:5c:db:
3d:f0:62:e1:dc:4d:b0:95:8a:86:41:f8:0b:83:1f:
ad:34:f7:ea:0e:a0:2f:42:ea:05:c5:92:42:45:82:
3f:4c:1d:db:c7:b9:cb:e9:0a:08:8c:4b:fd:78:b2:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8C:EF:78:C8:BB:CB:98:3E:30:F8:30:59:5C:81:42:23:93:3A:5A
X509v3 Authority Key Identifier:
keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e4:d3:a3:13:6c:d5:35:e6:15:ee:77:8f:9b:73:7b:b6:45:
39:95:62:d0:f7:4b:1b:b2:ce:f2:c5:22:f7:4f:55:84:c2:39:
dc:0d:cf:73:c8:0b:2b:eb:a9:02:f2:ea:d2:f8:9c:d6:e2:2c:
96:cd:74:48:f3:e4:42:47:d6:b9:88:78:7c:69:b3:8f:27:dd:
cf:42:91:e8:2b:63:f0:cf:63:81:77:25:b9:43:35:d6:5b:e8:
56:74:a0:28:53:87:65:17:b5:3e:73:b7:7f:4c:ce:3d:0f:63:
5e:ab:18:24:ad:10:86:ed:c9:ef:42:94:e3:93:bd:13:35:fc:
c8:97:eb:49:ec:47:26:bd:17:b2:ee:24:c7:30:ce:b4:53:61:
fb:cd:a3:f0:a4:1b:20:e7:0c:c1:83:a9:1a:d2:e4:27:06:56:
c4:f3:15:f8:71:58:1c:c5:e3:87:f8:18:cb:54:90:d1:32:79:
b9:20:67:9b:d4:63:90:61:1e:dc:c3:b8:2b:a6:23:bd:a2:ea:
c4:e5:4a:b0:74:c2:8f:c8:84:be:4b:93:ce:b4:27:aa:16:78:
39:1a:f9:59:7e:da:b1:f5:92:8c:b3:35:ea:0a:03:f0:27:0e:
45:5f:2c:7d:14:46:d3:6b:77:a1:90:51:06:00:42:9b:d3:09:
8c:55:80:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:39 2026 by rpki-client