
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json)
Hash identifier: DruS9QUEYmouOoffEjqYCeldHvpeu9/OEQGS2bDMED8=
Subject key identifier: 7B:B2:44:EB:E1:6C:81:5A:C3:F5:11:E8:AB:55:5D:65:7C:B7:99:53
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial: 2539
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
Manifest number: 251A
Signing time: Sun 01 Mar 2026 23:56:31 +0000
Manifest this update: Sun 01 Mar 2026 23:56:29 +0000
Manifest next update: Sun 08 Mar 2026 23:56:29 +0000
Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: w4CtW/CvST1iOorxWXeTVduLYHwi90Dp3ln2MZ5oJ7w=)
2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: xKKHcAd3EgZ3AY/vIRBsZ9z+syexMW6jFrkknKhX0G8=)
3: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: xw9T3a2Z489pZsdQ4x8tWBqT2E0wqOqSqnMIFsl4bOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9529 (0x2539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Validity
Not Before: Mar 1 23:56:29 2026 GMT
Not After : Mar 8 23:56:29 2026 GMT
Subject: CN=69a4d22f-01bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:d6:ad:b1:1e:e2:4b:9f:f0:b8:13:a4:48:
6e:a0:20:98:e1:28:76:62:d1:f0:bb:66:45:d1:28:
20:1a:14:b8:2e:78:e3:2c:fd:b2:50:fb:58:f9:95:
6f:88:05:46:5c:f0:29:28:d5:0f:5c:16:26:28:51:
63:2c:eb:f4:82:61:a8:71:ea:a4:4e:80:48:23:24:
9f:1d:93:73:a9:04:3c:83:91:f5:43:49:9d:3f:9f:
5c:8f:2f:f0:9a:ac:4e:e7:c4:d7:cd:2c:44:80:f9:
d2:14:59:2d:e7:3c:54:d0:8c:35:58:ea:21:c7:a0:
47:fb:1d:fd:49:90:c8:18:7b:7f:e7:4b:cf:25:11:
66:82:30:cd:84:3a:86:e9:eb:fb:2b:f4:3b:14:d1:
78:7c:38:4c:49:73:11:ae:78:f7:79:a5:b3:cb:6f:
7d:b9:6f:08:d8:78:e1:09:ef:2b:1e:1c:67:11:c5:
1a:83:45:1d:18:61:59:bf:ec:9b:76:8e:63:ec:0d:
ad:5d:26:ae:20:21:4f:df:68:94:08:ec:ab:62:6f:
73:d0:98:59:da:57:09:c4:28:ac:56:a4:ce:bc:cb:
f0:f8:df:97:34:ca:29:ad:30:69:e1:32:77:8e:8a:
c0:f1:63:d5:a4:b5:8a:2a:1c:b4:9c:c9:3c:5a:30:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:44:EB:E1:6C:81:5A:C3:F5:11:E8:AB:55:5D:65:7C:B7:99:53
X509v3 Authority Key Identifier:
keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:49:fb:c6:aa:63:59:c2:9c:f9:50:3f:b6:fb:dd:ce:4b:13:
68:d5:13:10:b6:d3:88:84:ae:d0:e1:79:3f:d4:d0:9e:18:54:
d8:9d:82:42:65:91:90:de:10:70:2d:41:6b:eb:5b:3b:14:27:
84:eb:07:a2:c2:2b:49:bd:40:a1:00:f4:26:22:b5:15:2c:9f:
0b:7e:af:87:65:4f:4c:63:92:af:a1:64:86:c7:3b:74:08:86:
58:79:a8:8b:4a:93:46:75:56:8f:78:5b:b1:5f:d9:02:18:65:
1c:30:65:63:ff:00:e3:d8:4e:0b:56:4e:00:3e:1f:3b:fa:5a:
83:ff:58:75:11:91:fc:b4:4e:68:4c:32:1d:98:b6:84:bf:fb:
22:e5:1f:2c:78:7b:ba:dc:c4:b6:12:29:49:46:ea:c3:ce:f5:
06:c1:ba:a3:06:06:1a:3d:57:27:47:74:3a:a3:22:e5:3e:98:
e0:7b:ff:f9:83:0f:d6:2d:cb:e6:44:74:17:79:63:49:ff:7a:
10:c2:66:ab:77:c0:fb:6c:0e:41:3d:6f:a9:cd:de:3f:f1:f1:
12:27:10:9f:19:e3:cf:ce:e4:25:1c:0b:b0:d0:98:c6:88:5b:
89:37:f0:87:47:0e:b4:d4:54:7d:c2:24:4f:52:60:a5:c8:0d:
f9:0e:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:31 2026 by rpki-client