
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File: D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier: d2NFleBllAZNEh/UYbXnTHvLj9Jzj24WB+xLL7Jzh9g=
Subject key identifier: A3:74:39:07:4C:6D:A7:47:00:FC:57:54:7A:3A:40:2B:E6:FA:1F:53
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer: /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial: 0CBA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number: 0CA1
Signing time: Sat 28 Feb 2026 18:42:44 +0000
Manifest this update: Sat 28 Feb 2026 18:42:43 +0000
Manifest next update: Sat 07 Mar 2026 18:42:43 +0000
Files and hashes: 1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: 23As6icx+9OxJbVE1T+UIwGMQHDeo0Ld/sDfvr6+iAI=)
2: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: z1N4ZBbmDA74CeApYZJ0hayWkNkXn88p5+Sn2lK0fBs=)
3: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: ENBlU08ik+Qfp6syg0uFnHZazCJHhmbXL8w+7drsKnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3258 (0xcba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Validity
Not Before: Feb 28 18:42:43 2026 GMT
Not After : Mar 7 18:42:43 2026 GMT
Subject: CN=69a33724-e168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:29:74:22:98:db:a1:0a:1e:51:43:7d:7a:
03:29:7f:1e:b5:bb:94:d9:0b:80:90:ca:75:d3:6d:
85:41:3f:0b:94:b1:4f:20:cc:d2:d2:b0:af:31:9c:
1c:a2:14:38:ac:ef:f0:9c:b6:90:de:36:ba:2a:17:
f5:78:af:e8:25:20:99:eb:58:a1:53:0a:74:ab:a0:
3b:3e:23:59:c7:c8:b7:ad:a5:f0:dd:7d:0f:7e:96:
46:c7:c8:eb:39:2a:d7:05:35:a7:d6:21:8f:17:a4:
e4:7f:d7:72:cf:62:01:63:9d:31:5e:24:ec:5a:09:
8d:5f:04:7f:9c:b3:18:80:43:95:76:97:cb:74:b4:
c3:1f:68:50:c8:93:a2:d0:90:56:42:11:fb:de:5a:
e6:2e:1f:ff:e6:f3:33:21:b4:32:5d:c1:12:1f:b9:
8c:7d:9b:66:15:c4:ad:02:78:a7:ce:32:30:92:33:
06:f4:4e:e0:eb:16:42:29:3a:cb:72:81:15:73:4d:
98:72:21:4c:aa:2f:67:97:06:96:dc:9b:50:48:cd:
bb:bf:45:b4:f8:9b:64:f7:bf:1b:5b:92:7c:f7:5c:
6b:85:4d:13:68:2b:8b:84:e2:97:59:ed:ef:d4:8e:
55:db:8b:9e:c8:af:d3:5b:cb:ed:00:85:7d:96:2a:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:74:39:07:4C:6D:A7:47:00:FC:57:54:7A:3A:40:2B:E6:FA:1F:53
X509v3 Authority Key Identifier:
keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:97:24:c3:e0:b9:8e:3a:3a:80:4c:55:89:d6:a3:77:60:55:
cd:d1:f3:98:9e:04:c1:27:33:6a:c4:f8:c2:b8:e3:71:2d:40:
bd:64:eb:d8:2e:0c:a7:d5:cd:2c:22:df:50:fa:da:8c:5e:e0:
ff:6e:99:1c:41:ee:6d:6d:61:ff:c4:d9:42:4d:80:2c:23:3e:
b2:ad:30:25:36:50:5f:79:13:64:d6:44:d2:23:4e:73:6a:67:
b4:c4:71:1b:58:ce:0e:f2:26:30:e1:0c:dc:53:31:41:bf:26:
50:71:9e:2a:7f:62:84:dc:66:82:f9:02:a5:4c:db:c0:8e:9a:
c2:38:d9:9b:24:50:d7:28:d4:c0:c2:63:0b:d4:b8:a2:1a:0b:
0b:ba:5b:e5:25:31:df:b6:15:89:b3:ef:f1:f1:06:b2:da:2f:
f2:5f:9d:09:89:53:b1:18:6f:3c:8e:d7:5b:12:d1:03:14:61:
bf:56:42:db:bd:99:d3:91:c2:3d:61:21:85:f4:f2:f4:ec:88:
9d:ce:6b:60:c4:bf:d4:4b:7a:59:4e:71:9b:cb:6c:86:8d:6d:
3b:f1:0f:c0:02:b1:2e:45:9a:4f:b4:77:fb:65:50:3c:b4:d3:
e7:6b:8a:8e:76:8e:50:88:86:47:44:e1:4f:7e:78:aa:af:f3:
15:6c:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:08 2026 by rpki-client