
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
File: sc2DuJnOYCmsikIu278VgzU5HQg.mft (raw, json)
Hash identifier: z1magdTuLOnhDT+UvpNNmCtusCuXHWXm5DpAml254Sc=
Subject key identifier: 9C:34:1A:11:52:F9:F5:73:AE:71:5A:F3:2F:92:F6:AA:81:BD:6A:A7
Authority key identifier: B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08
Certificate issuer: /CN=A9168497/serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
Manifest number: 34
Signing time: Fri 17 Apr 2026 08:20:01 +0000
Manifest this update: Fri 17 Apr 2026 08:20:01 +0000
Manifest next update: Fri 24 Apr 2026 08:20:01 +0000
Files and hashes: 1: sc2DuJnOYCmsikIu278VgzU5HQg.crl (hash: XZhZLMZM0ks1/vJAAvhuEBXdt23k+il5jR5ErC2GhMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl
rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168497, serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
Validity
Not Before: Apr 17 08:20:01 2026 GMT
Not After : Apr 24 08:20:01 2026 GMT
Subject: CN=69e1ed31-9692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:c0:66:7e:39:83:17:b8:01:5d:c8:26:be:
56:e2:63:09:82:fb:ca:2e:13:62:92:aa:71:c3:22:
e4:d0:8c:e4:85:19:7f:9b:b0:ef:ac:d4:87:aa:81:
cc:f7:44:97:94:39:6a:da:2f:27:30:15:ba:91:16:
76:6e:c8:3c:72:86:51:92:32:9e:a5:c9:6f:47:90:
5f:ac:f9:d6:e4:9b:a3:22:2b:d3:b0:cf:94:aa:1d:
55:15:63:5b:35:d3:2b:87:ff:d3:3c:32:dd:87:b0:
31:ce:a7:97:95:85:6e:7a:f7:0a:07:b1:20:f8:91:
96:f5:d7:5d:2a:c5:a4:67:58:5c:1e:36:f9:70:e5:
34:ab:17:7c:4e:98:5c:7e:d4:11:fd:20:c3:86:41:
ed:c7:ba:76:bb:30:3c:9d:f9:ff:24:dc:29:69:df:
23:5a:d0:84:90:da:11:5a:21:99:20:fc:c1:26:0c:
3e:58:ea:07:f6:7d:58:06:b7:20:b2:71:e4:e0:82:
bf:1f:d4:b4:4a:4a:38:92:0b:79:2b:4b:ee:18:56:
2f:ed:cf:d5:d2:3b:3d:11:87:df:b2:c8:6a:50:04:
b0:7b:c4:ad:ec:94:0c:48:39:30:36:87:e2:80:c0:
3d:0d:9c:17:0c:36:d3:83:d6:16:46:5c:2b:52:ea:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:34:1A:11:52:F9:F5:73:AE:71:5A:F3:2F:92:F6:AA:81:BD:6A:A7
X509v3 Authority Key Identifier:
keyid:B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:11:71:e8:8d:73:e5:de:f0:5a:bf:3c:18:86:80:0e:19:74:
bc:3d:63:cf:54:91:d5:0c:d6:6e:69:ac:ff:c8:71:26:68:f7:
b6:ba:65:9b:05:e8:31:3e:b1:c1:11:c6:67:f3:c9:29:5d:4d:
02:8a:82:f4:06:71:b3:d0:0c:c2:7e:01:0d:3b:55:f4:10:54:
2f:47:44:a5:e7:70:13:d7:46:52:fc:95:bf:7a:38:59:f4:e8:
43:3d:71:c0:4f:67:c3:55:c8:a9:88:4a:a5:02:cc:64:8d:72:
36:36:f2:02:1d:df:24:f0:4e:3e:6f:4d:72:df:29:fc:e9:00:
8d:b1:38:ee:33:4b:d5:f1:ef:cf:20:0d:7c:a1:4d:22:35:7e:
95:33:57:aa:13:5d:63:98:c7:5c:64:56:91:7f:c7:41:87:cc:
4c:28:91:68:2d:7c:24:be:2a:da:a8:fb:25:2f:9d:40:eb:23:
5f:a6:cc:57:a1:ab:ff:dd:ac:04:9e:95:0d:f5:9c:36:49:8c:
eb:fb:ba:a4:f7:48:78:8d:24:53:c3:4f:7b:41:82:bd:04:21:
6e:6e:d5:d2:e5:97:ad:d9:9a:d2:f9:25:20:28:ba:5b:b8:76:
2d:cc:5c:8b:34:82:65:f3:f1:f5:78:6b:29:32:c5:28:85:34:
36:6c:ba:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:36 2026 by rpki-client