
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
File: sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json)
Hash identifier: Ohkc26Msak7qz0qBd9DNB5cze+k7N3XeMEcA5iLYeIE=
Subject key identifier: 21:EE:7F:2A:42:24:3C:AF:AB:55:CC:E6:48:B6:F1:83:AD:34:FA:D6
Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
Certificate issuer: /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
Manifest number: B4
Signing time: Sun 01 Mar 2026 08:21:59 +0000
Manifest this update: Sun 01 Mar 2026 08:21:59 +0000
Manifest next update: Sun 08 Mar 2026 08:21:59 +0000
Files and hashes: 1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: Dn4Zby13C7oJaG4BHU0Xe5rhJP/OfhHVmILFlSE/vZY=)
2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: OEoPCQ7v8dhaZUZAQWtAZvLcy6AT9dOCnH1/iJjA3qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Validity
Not Before: Mar 1 08:21:59 2026 GMT
Not After : Mar 8 08:21:59 2026 GMT
Subject: CN=69a3f727-445b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:2c:e6:57:57:cd:89:59:9d:06:a6:79:8b:
94:2f:cc:61:ec:3b:ea:6e:e6:3a:40:c9:ef:fe:e4:
c3:54:43:2c:e3:7c:4d:ee:d3:de:0d:dd:57:0a:3e:
db:01:4f:70:a1:ba:1c:d8:3b:cf:fc:ef:a7:18:2c:
cb:52:01:9f:83:bb:04:5c:38:b4:a5:49:61:68:ea:
84:73:f5:99:ea:12:b0:66:f4:f7:8b:18:91:63:aa:
d1:56:b8:43:ee:c2:d6:90:80:79:5b:17:17:40:85:
92:75:ad:61:cd:0d:83:34:3d:ab:16:01:de:e6:85:
04:0d:f8:29:1d:2d:b4:f8:bb:e8:08:af:ed:9f:43:
c3:cf:1d:b0:44:eb:53:cb:89:ac:61:56:7e:4f:86:
6d:26:c3:f5:13:ee:1b:eb:34:8f:23:bf:4d:bf:a0:
6f:82:13:a2:38:b1:5f:5c:25:d7:2d:1f:e9:c7:66:
dc:50:ca:2d:09:58:e4:9d:f4:e4:4b:e8:3e:05:e4:
04:47:b3:5e:06:39:92:0e:8d:ff:42:4a:37:60:3a:
cf:52:ce:2e:b4:f8:82:9b:db:b9:a2:5f:7f:cd:26:
ce:29:dc:a0:09:29:69:65:b9:d1:ea:20:22:d8:af:
d0:c6:53:19:61:a9:34:c4:32:05:3b:26:1a:a3:f2:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:7F:2A:42:24:3C:AF:AB:55:CC:E6:48:B6:F1:83:AD:34:FA:D6
X509v3 Authority Key Identifier:
keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:f3:58:e9:b2:cb:a3:df:3c:49:d5:e6:86:f3:13:15:06:26:
ff:b7:bb:e4:c8:27:64:a3:7c:a6:ec:c7:45:a2:0b:d7:3d:16:
2e:12:a8:b8:e5:83:36:09:53:e9:26:68:a7:ca:12:08:fe:40:
df:e4:59:63:7d:09:e1:f0:1e:ed:6d:a9:58:8f:7e:14:4a:33:
80:25:86:71:30:0e:1e:f1:89:41:b0:c2:61:70:e4:42:1f:3e:
0c:72:01:02:07:74:46:f7:99:e6:0a:3d:61:0c:a7:ac:42:a1:
89:1a:25:cf:66:a1:85:c5:7c:51:ec:db:87:59:6f:61:23:94:
30:2d:8a:f2:a6:06:f9:b8:cd:cf:15:f3:5a:e6:5a:0d:a1:1f:
85:a9:4b:f8:96:1b:7a:61:43:4f:e9:e0:92:e4:09:21:85:d5:
6f:13:af:15:77:66:f1:24:89:b4:6d:fa:44:00:81:5b:6c:da:
e3:f3:03:d1:81:88:52:e6:02:92:91:ed:89:a3:fc:f3:39:5e:
f9:90:3f:9b:77:89:c6:bb:1b:23:71:bc:e4:f8:95:93:f6:3e:
25:04:5d:be:23:18:f2:a4:b3:b6:80:40:1e:09:6c:f4:75:e7:
f8:26:75:f8:b9:48:46:67:02:cc:84:7c:14:b4:c4:da:aa:6e:
f8:6c:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:43 2026 by rpki-client