
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json)
Hash identifier: 6BhgTVPT0muGdFLuIUS2WV4hyHqbVmghJB0oTUwGV6U=
Subject key identifier: 03:4A:4F:3E:64:45:B6:8C:5D:B9:35:5F:ED:4B:6D:C0:59:DC:18:0A
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial: 032C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
Manifest number: 031B
Signing time: Mon 02 Mar 2026 02:08:46 +0000
Manifest this update: Mon 02 Mar 2026 02:08:43 +0000
Manifest next update: Mon 09 Mar 2026 02:08:43 +0000
Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: 55kN8oQyznH1X1OjsngDbEV/eY19mIOry3fBw4J0g8s=)
2: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: ERom4Ei0HIGCTmZt1BesT0wAL5vdqp/U/eF25sHImyc=)
3: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (hash: pI7DQlML4G8nsrMbEd9F1IKO++WC4YpDB08JHhvsskQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Validity
Not Before: Mar 2 02:08:43 2026 GMT
Not After : Mar 9 02:08:43 2026 GMT
Subject: CN=69a4f12e-2f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:f8:ce:25:2c:7a:bd:a3:00:68:13:48:9e:
32:aa:95:76:62:cc:be:a5:44:e8:20:5b:c1:e7:ce:
04:00:c9:f5:08:de:6f:a6:70:d5:83:7e:ae:8a:18:
32:7f:16:bb:3c:33:24:ad:2a:be:e6:5b:a2:73:cf:
a0:20:dd:f7:f6:22:e1:f8:8e:e0:87:46:f3:7f:b2:
7e:9d:c8:fd:a4:e4:62:41:fe:58:a7:72:97:a5:97:
5b:fe:f2:8e:b0:39:c2:c5:d1:9c:d5:fb:14:f3:34:
79:95:fd:af:4e:b0:1b:7d:68:b6:f0:a6:70:bc:97:
6c:37:82:69:3f:78:60:f2:c5:a9:76:08:6b:f3:eb:
50:4c:ee:1c:14:11:86:da:f9:1a:ca:e5:c8:0b:7b:
97:b1:fd:51:92:ec:49:31:03:81:b4:81:e0:60:eb:
a1:94:77:a1:77:4a:49:ac:ae:ac:b6:94:18:f1:13:
c4:6f:4c:a7:68:c1:7e:ed:4f:5c:5c:9f:a2:a1:79:
9d:69:69:5e:b2:d4:42:b6:ad:2a:ac:5d:5f:05:8f:
28:98:c5:b0:b1:8b:28:e3:57:81:e3:d1:68:3a:ef:
14:18:81:1e:d2:6d:3f:6a:57:0e:0f:52:14:db:8e:
63:42:1a:a2:7f:87:7a:03:54:9f:b7:76:d4:30:84:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4A:4F:3E:64:45:B6:8C:5D:B9:35:5F:ED:4B:6D:C0:59:DC:18:0A
X509v3 Authority Key Identifier:
keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:2b:d7:10:02:a6:19:b4:25:ab:65:9e:60:a9:6a:90:66:0c:
7c:47:bc:c0:c9:be:2f:24:27:fb:24:d5:e9:26:6f:f6:47:e3:
45:0d:26:62:af:b8:7a:be:79:1a:fd:dc:8c:fc:87:47:22:1f:
d0:32:1a:69:3e:2f:b2:c5:bc:a7:b1:d0:02:5e:5e:77:d6:ec:
bb:53:ef:27:ce:b9:90:61:5e:98:06:f3:cd:34:4a:d6:50:33:
46:4b:a7:db:8e:d7:27:00:18:7f:d7:86:ba:f0:99:68:4c:d5:
77:13:0e:6b:82:3f:5e:16:24:24:cf:8d:e5:48:df:fb:ae:f9:
83:66:c3:47:6f:da:23:17:44:96:da:64:dc:17:4f:ed:3f:69:
08:c4:47:d4:d0:b0:30:36:06:cf:9c:bc:b8:f4:d2:28:bf:b7:
1e:fd:75:fe:42:8d:97:4f:be:df:8f:e2:ea:de:7f:65:8b:34:
ad:af:b6:37:03:77:fb:eb:7f:82:cc:21:78:12:79:5b:bf:bf:
f2:51:eb:a9:86:3c:8b:f3:c1:c7:a1:f5:83:02:be:72:f7:f5:
c6:9f:dc:d0:e0:df:f9:1b:13:2a:46:6a:5f:14:e6:d6:e7:c7:
d1:bc:03:03:60:ab:78:30:d1:4a:fd:84:d9:a0:16:5a:dc:87:
bb:b0:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:11 2026 by rpki-client