
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier: +lr3sADA2aoQbcx0+2EwybtQ92Nhf3GpmKGyxK2p7iM=
Subject key identifier: 55:58:00:C5:F3:9F:67:BF:2B:51:44:16:39:0A:6E:34:37:E3:3F:73
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial: 35A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number: 355B
Signing time: Sun 01 Mar 2026 23:06:26 +0000
Manifest this update: Sun 01 Mar 2026 23:06:25 +0000
Manifest next update: Sun 08 Mar 2026 23:06:25 +0000
Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: p41HxfVo+lsafmPOEv55XcN+MYjnR9uLVVnM+KAkAhY=)
2: 31745126CD1811EC917CB819C4F9AE02.roa (hash: G8AuTu7DkmkKWVjhwU/vCSBI+wvMCkDDSTrsyLfGoH0=)
3: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: GHAiy1U9rxwuTHVrOO4W5yr6dZrHk1J4DMJnsgMqY/I=)
4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: Pbz8SUu4Fa6QitdUmbJG9+WkFTgMMNMW+GHyYn+iC2M=)
5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: yTJcTl5edJ4kNv98CPAK/m1H2g/dq/a73IywMpJw5X0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13733 (0x35a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Validity
Not Before: Mar 1 23:06:25 2026 GMT
Not After : Mar 8 23:06:25 2026 GMT
Subject: CN=69a4c672-622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:e2:4b:96:62:22:60:41:60:5b:bc:99:36:
2a:3c:00:1f:fa:66:30:d7:69:eb:f2:e9:24:86:79:
b7:91:fd:cc:c3:a7:bc:cd:8b:ef:88:b0:dc:93:55:
51:6d:d5:d6:1a:0d:17:5a:29:38:b0:25:bc:08:ee:
02:81:5e:15:de:f8:f6:f2:61:7d:02:b2:a7:3b:82:
7e:e8:34:a3:63:10:ea:de:29:60:83:fa:88:0d:e0:
bb:9a:03:09:d2:f8:82:04:2e:0f:b7:f2:92:55:55:
75:86:f5:a5:2b:80:5d:36:45:b1:52:8e:fd:81:98:
b9:c4:d9:ea:66:31:04:56:fb:6e:61:67:8d:3d:62:
76:d1:79:67:4c:dd:0e:59:74:59:4a:2e:b7:56:27:
ab:21:4e:be:5d:24:f0:1c:95:b9:a9:fe:70:e4:62:
3b:cb:62:31:6f:f1:86:62:d1:89:53:cf:8a:10:ae:
93:43:0e:68:ea:0c:55:50:0b:2c:5a:6a:7a:6b:67:
5c:53:78:ab:6b:7d:2b:e5:23:87:d3:81:1c:3a:ea:
8f:f7:42:61:16:a7:3b:b4:c5:31:de:04:84:98:e0:
bc:7a:0f:56:d4:5e:a3:e4:d8:61:5e:a2:7b:50:5a:
d0:c3:3b:5c:af:a6:64:76:e9:94:1f:e3:b8:00:e2:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:00:C5:F3:9F:67:BF:2B:51:44:16:39:0A:6E:34:37:E3:3F:73
X509v3 Authority Key Identifier:
keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:58:a3:3a:7d:0f:c8:d8:03:7b:f4:2d:da:58:30:8a:dd:8d:
4d:2f:55:a6:5c:0b:b1:c0:e0:78:bf:03:ae:2f:94:81:78:b0:
c0:00:25:ab:6a:69:d6:75:97:b1:86:b4:a0:6b:89:16:1f:2a:
34:fc:8f:f7:ab:20:60:1d:3b:00:c5:45:84:c2:d3:f4:f9:13:
7e:e8:5e:c7:da:91:a1:4d:68:36:cb:f9:b8:18:ca:4d:ad:ec:
fd:e8:7b:b4:c9:c9:ea:e6:da:ec:fa:c3:2a:f5:c2:c0:2f:70:
af:09:a8:e3:b9:41:46:36:f6:20:be:05:5b:8d:8d:2f:17:23:
eb:e5:ae:80:55:78:7b:b1:64:45:82:f8:08:e7:a0:a4:bb:ec:
41:62:f6:56:fe:b2:5c:6a:cd:b2:23:d3:44:7e:c8:43:50:a4:
50:14:89:cd:3a:25:9c:6e:2b:5a:36:c7:92:7b:65:d2:f2:20:
27:55:ec:46:c5:7d:86:fc:ea:ed:e8:3e:5f:79:1e:ca:bf:d1:
71:71:e4:51:6c:92:4d:e6:cd:40:69:2c:cd:e3:99:86:37:56:
35:28:e2:40:57:20:d2:41:7b:61:d9:27:b3:4b:fe:4e:ac:20:
b0:72:c1:6b:85:76:14:95:47:0d:31:80:18:80:73:db:a2:a6:
c5:af:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:27:11 2026 by rpki-client