
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier: Fw9zxFQjDZguxE/+ip2cZwrpsx5nVNmg0sdJs7bFiI4=
Subject key identifier: 98:7C:85:03:D1:C2:15:F8:DA:F4:C8:0F:97:DA:F8:D8:12:B3:58:FD
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number: 01A9
Signing time: Sun 01 Mar 2026 04:50:19 +0000
Manifest this update: Sun 01 Mar 2026 04:50:18 +0000
Manifest next update: Sun 08 Mar 2026 04:50:18 +0000
Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: 4SSVSZcc2tL/aLKQ+3ytu7ZNDRgXUVCrbPvVcup9GAM=)
2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Validity
Not Before: Mar 1 04:50:18 2026 GMT
Not After : Mar 8 04:50:18 2026 GMT
Subject: CN=69a3c58b-248e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:33:e8:d4:d2:63:f6:af:d1:20:ed:1b:37:
86:17:15:c5:62:2e:df:73:f3:44:c8:b9:93:71:c9:
51:f1:82:b9:72:ca:d8:0f:6f:7e:a3:05:57:5d:50:
13:0e:ee:d7:4e:6d:56:43:b7:50:40:ba:eb:d6:ce:
ac:51:aa:a9:a0:7f:d4:3e:62:95:c6:5d:c0:25:7e:
bd:47:90:11:7d:87:84:3f:b7:e6:7f:0c:39:8c:85:
c6:25:20:2f:08:c7:d9:21:4a:9b:90:4c:58:77:70:
48:b6:b0:58:8e:c6:5c:3a:8c:88:4b:43:6a:5d:13:
d8:ad:7a:c9:1a:b0:3c:93:13:57:5c:29:5b:98:1b:
56:e3:79:ca:45:05:ef:71:62:b7:19:68:b9:d8:e3:
d4:76:68:3f:54:8f:03:6f:d5:8f:cb:22:84:b9:9d:
3b:3a:a0:7b:58:81:a9:61:0d:dc:50:f6:9a:ef:bc:
b8:37:f2:62:e0:44:32:18:d3:d8:99:00:d2:a6:d6:
4a:db:9c:41:0b:2d:c5:76:4d:89:c9:eb:ed:e8:58:
10:e0:2d:74:70:be:8a:07:91:86:0e:4a:10:88:13:
d3:ce:9a:9c:d1:22:6d:ec:20:74:54:8b:30:31:31:
bc:45:fe:de:bb:b8:cd:de:c5:40:5b:9b:dd:d8:8e:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:85:03:D1:C2:15:F8:DA:F4:C8:0F:97:DA:F8:D8:12:B3:58:FD
X509v3 Authority Key Identifier:
keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a2:20:e8:93:90:c9:48:12:17:c2:2d:d1:80:42:85:a8:85:
34:4c:e7:4f:1d:1b:b0:48:2c:31:a6:2c:04:ed:df:5d:54:21:
32:fa:14:d2:e3:85:a9:7e:63:c6:16:31:76:1e:2a:e6:39:43:
d4:9b:16:2c:73:52:1b:2f:f1:ac:3f:0e:42:80:92:1f:9f:6a:
91:7f:b6:85:c5:22:07:ec:0d:c5:f9:f5:3d:69:e0:3a:28:21:
f2:df:d4:97:58:84:02:c7:c4:49:f7:3d:fa:b6:b9:17:5a:89:
8e:e8:b7:ea:e1:74:a5:72:ec:93:be:bb:61:56:75:9c:e7:4e:
e3:26:a5:c4:da:3b:12:db:15:21:53:e8:d7:b2:53:44:b6:8e:
b0:ce:71:bd:75:f9:2e:1e:58:60:b1:0e:56:d0:09:2b:65:e4:
95:16:95:63:82:9a:4d:6f:7d:50:4d:89:b7:59:6b:e4:f2:f5:
77:63:04:39:4a:a6:18:df:1d:05:8d:55:3a:8c:ba:20:e8:8b:
2b:4e:83:55:f7:16:7d:d5:dd:67:e6:66:15:9b:42:d3:ec:49:
b3:1d:86:e9:c2:85:36:a4:b0:12:0f:27:b1:a4:ba:aa:26:fa:
6f:37:82:79:42:4a:75:7c:b0:90:c3:3c:3b:70:f3:5d:1d:52:
39:2c:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:51 2026 by rpki-client