
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
File: 44SqQCWhBrVHp8CJsd3-7mzLoi8.mft (raw, json)
Hash identifier: Zw4g4Is/ekIY0LmNc0rs76U7CPpSuNC84A96tYDyyyA=
Subject key identifier: 7E:4F:81:93:0B:89:5B:72:D2:C5:5D:90:BE:0F:6C:28:51:FA:B4:DE
Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
Manifest number: 0216
Signing time: Mon 02 Mar 2026 00:54:27 +0000
Manifest this update: Mon 02 Mar 2026 00:54:23 +0000
Manifest next update: Mon 09 Mar 2026 00:54:23 +0000
Files and hashes: 1: 44SqQCWhBrVHp8CJsd3-7mzLoi8.crl (hash: 7tJFhkXLmDHKSUZCQgM+U/vdunwfy2cZibQ8R5zJbII=)
2: 3D940BFAC1A711EFAFD15F46C4F9AE02.roa (hash: BL9qZTPXZmQbBTS7H13H05Yag9DH+3PJ5ndAPjL9cnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl
rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B4C, serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
Validity
Not Before: Mar 2 00:54:23 2026 GMT
Not After : Mar 9 00:54:23 2026 GMT
Subject: CN=69a4dfc2-2daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:43:8e:75:ab:95:13:39:3b:d8:31:99:34:
bb:8d:79:70:4e:22:78:37:fb:ee:0e:f5:3e:23:cc:
b4:ec:58:0b:d1:06:27:02:ca:7a:d3:13:0c:be:83:
25:48:d7:69:07:ed:cc:d6:93:e0:64:37:6a:d6:08:
7b:c1:29:6c:05:00:51:18:9f:74:ba:ea:05:0e:b5:
ce:6a:1f:6f:de:d3:54:64:82:40:84:18:ec:d8:87:
10:c6:12:6c:33:0f:f7:25:96:d6:a6:5f:52:1e:6f:
d5:83:2a:12:9a:30:52:e0:90:a2:c1:0c:71:ab:54:
76:23:a2:a5:2a:d1:4d:65:8e:eb:be:5d:ae:5a:50:
41:21:2d:01:e9:be:ba:e7:d7:2a:2b:3e:6c:10:ee:
40:db:90:97:c8:9b:a1:a3:56:83:27:09:5f:81:ae:
20:40:14:82:9d:7b:5d:1f:15:36:b5:d6:7a:bd:19:
34:0c:7a:10:96:8a:4e:f3:1e:50:ec:af:f8:99:50:
54:01:7e:0c:2c:10:06:fe:ea:1d:b8:b7:34:cf:b7:
a0:13:b1:e6:e0:49:c3:51:bf:4d:e9:f5:13:31:e9:
f3:15:ff:c8:e8:ea:7d:d7:65:de:c3:59:3f:0b:0f:
00:d3:36:72:c9:86:e8:b2:01:a1:09:cd:39:81:0e:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4F:81:93:0B:89:5B:72:D2:C5:5D:90:BE:0F:6C:28:51:FA:B4:DE
X509v3 Authority Key Identifier:
keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:3a:2a:c2:7a:85:9f:ae:4f:8d:29:c8:f5:23:db:48:68:0a:
d9:30:5a:ad:84:c3:b4:4c:1a:8c:9d:94:04:d8:f1:e7:87:d4:
6f:a6:a8:e2:b2:5c:09:dd:ca:46:94:69:d6:ff:23:2d:67:1d:
16:b2:a9:e5:55:e3:f2:93:1c:d3:11:f0:c9:08:15:e9:6b:44:
0b:38:2d:14:88:09:e1:86:47:7a:25:38:73:80:8b:0c:2f:a9:
09:4f:4d:27:ed:91:9b:27:7f:ad:29:41:e5:5c:0c:e2:3a:6f:
c8:5a:57:2d:31:f3:1a:ba:a1:b5:60:df:45:51:fd:a0:7a:2a:
66:6a:36:ca:da:06:af:39:67:90:34:2a:53:e6:f0:84:c3:6a:
60:79:aa:39:05:a6:a1:cb:67:5d:4a:2a:64:de:46:3a:13:ee:
f5:b3:92:8c:f3:94:e4:13:aa:e8:4f:37:85:5c:2e:ac:1f:73:
93:cb:42:ce:f5:e8:0b:2e:99:d4:d4:5a:92:e9:65:71:71:6f:
9b:65:c1:25:98:d3:b1:c2:e6:ed:2a:73:b7:a9:52:ed:a0:f2:
9f:42:7f:4b:c8:86:aa:54:b1:16:14:9c:82:39:df:4c:8d:cc:
03:ce:e3:32:a7:1a:a4:6e:2e:02:dc:69:a1:d9:d8:7f:47:da:
ff:c7:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:16:31 2026 by rpki-client