
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
File: rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft (raw, json)
Hash identifier: SISqjrNhCZ0YZ8d2xwXunWRkKvR71EjZ2E0GrbPIvV0=
Subject key identifier: 03:B3:57:64:82:FF:6A:BF:AD:5A:22:1B:C6:2A:3C:FB:F2:3B:41:43
Authority key identifier: AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7
Certificate issuer: /CN=A9171155/serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
Manifest number: 59
Signing time: Sun 01 Mar 2026 09:33:58 +0000
Manifest this update: Sun 01 Mar 2026 09:33:57 +0000
Manifest next update: Sun 08 Mar 2026 09:33:57 +0000
Files and hashes: 1: rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl (hash: kMy4SiE+Y0yfQ7BDGluBz3T+30NX/ikjvsIWJVd4lj8=)
2: 134623AC931511F092E28818C4F9AE02.roa (hash: iyYZOLCHI+6eiOwfh/n6f5Arvc+24pHjjpC5RazXrAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl
rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171155, serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7
Validity
Not Before: Mar 1 09:33:57 2026 GMT
Not After : Mar 8 09:33:57 2026 GMT
Subject: CN=69a40806-9dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:bf:1d:ff:e2:57:b1:5f:fb:03:44:6a:d3:
0f:37:0b:fa:df:0a:b4:c4:c5:36:b4:da:da:f1:d1:
6f:e5:7f:88:4e:6e:67:73:33:6f:85:f0:e2:8f:06:
ba:c4:b4:6a:e5:4b:19:dd:87:c9:90:fe:59:74:52:
d7:c0:c3:19:16:7f:c7:fb:35:fd:46:6a:18:e3:ea:
d3:f6:f6:37:58:3d:21:70:90:3e:79:77:5f:bb:9a:
43:30:4b:74:c7:8b:41:64:7a:5f:45:3d:9b:41:eb:
16:60:7f:73:b4:ca:89:25:d7:67:25:1d:23:a7:de:
9a:17:6c:d9:7b:b0:ce:bf:46:f5:1d:71:74:00:2c:
47:32:cb:68:fe:7d:93:47:9f:5e:93:ab:8b:af:ea:
d1:e9:73:92:da:bf:c7:f1:1c:45:b2:a7:be:6d:c7:
23:38:1a:07:7d:0d:11:3e:85:c4:73:9f:21:dc:9e:
de:42:df:ad:e2:6d:58:e9:b1:fd:6b:29:e9:b5:65:
c7:31:ea:e4:6b:1a:e8:d0:6d:13:90:de:4f:df:94:
86:b5:e9:27:2f:04:f1:e6:88:df:3c:08:94:3b:b7:
a5:6f:4e:de:00:3d:0e:95:f4:11:78:e1:52:9a:4b:
71:e5:ca:85:92:05:80:1c:7f:2a:88:14:13:d6:21:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B3:57:64:82:FF:6A:BF:AD:5A:22:1B:C6:2A:3C:FB:F2:3B:41:43
X509v3 Authority Key Identifier:
keyid:AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:64:44:3f:39:c3:0d:4e:e9:49:28:3c:f9:d3:45:38:26:ad:
67:ec:9d:0c:5d:95:3a:7d:e3:d1:4a:19:1b:49:70:83:4d:3f:
1f:6b:61:cc:1e:1f:b3:c9:72:f0:88:01:2e:e0:84:48:09:3b:
40:c3:41:c6:c1:16:0c:b5:bf:13:5b:f8:07:8d:cd:fe:83:46:
63:b8:f6:fb:be:9d:82:c8:f1:cc:88:f1:2e:9c:75:51:93:93:
3f:7a:80:e8:7b:0c:d3:4d:a4:b5:5f:53:f7:77:2e:c4:e9:7e:
ba:d9:14:7b:be:6c:9e:24:43:67:73:95:39:e5:54:b5:db:90:
db:e6:27:c0:9b:00:d6:a0:93:9d:11:e5:e3:dd:86:c5:c8:fa:
7b:05:72:fa:cd:ab:6f:f1:2a:b6:f9:0d:db:9b:01:26:81:c3:
44:1f:72:c6:93:76:e7:0c:81:06:82:9e:c8:c8:90:a5:62:75:
75:34:50:ff:7a:82:32:68:ae:d1:f6:57:93:f7:39:0c:fa:47:
d5:0e:75:d1:66:df:d8:bb:c3:f6:c4:e7:77:c2:43:b8:8b:60:
32:89:61:cc:ac:25:cd:b5:e3:eb:e3:16:68:9e:b9:2a:91:f9:
4c:5a:21:6e:a8:29:5b:ee:e9:de:9e:0c:53:57:e7:4e:09:60:
4b:d4:e3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:51 2026 by rpki-client