
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
File: adcLNjVnbk9zG47xxYVbXi8n84g.mft (raw, json)
Hash identifier: xn7W87Yjb/DR/O/cMWpQwDKc5zg98FxRTTUZN5P1H5Q=
Subject key identifier: A5:47:5F:75:91:4F:36:7F:3A:FA:D8:56:44:1E:BA:5A:2A:2F:85:6A
Authority key identifier: 69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88
Certificate issuer: /CN=A9174B04/serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
Manifest number: 024A
Signing time: Mon 02 Mar 2026 00:35:01 +0000
Manifest this update: Mon 02 Mar 2026 00:34:59 +0000
Manifest next update: Mon 09 Mar 2026 00:34:59 +0000
Files and hashes: 1: adcLNjVnbk9zG47xxYVbXi8n84g.crl (hash: jrOEXDE+E4uGQKI8emHuJoQVnX9OJW5Nz9O7pGJf2zw=)
2: 576B4A9298AB11EDBC12AA81C4F9AE02.roa (hash: ImiMkEE2J+XdZByQIat0mMFwYTcecNiTjW/OPxuOTXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl
rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174B04, serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388
Validity
Not Before: Mar 2 00:34:59 2026 GMT
Not After : Mar 9 00:34:59 2026 GMT
Subject: CN=69a4db34-cb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:ce:d5:22:d4:ef:8a:ef:0d:14:c1:56:3d:
29:d7:e5:02:dc:83:67:0b:1b:ce:2a:3f:8c:47:49:
4d:82:ef:d7:2f:30:f5:4d:83:98:a2:b4:6a:4a:23:
c4:30:ab:1e:96:c8:03:0d:72:08:0f:bf:96:35:d7:
68:ff:82:27:e2:99:66:2b:9a:59:46:3f:96:18:9e:
aa:33:80:37:d4:2d:dd:25:52:f6:8f:5c:05:a2:ae:
ba:a6:0a:0d:67:46:ab:f3:13:b6:1c:ff:35:57:4a:
cd:da:aa:d9:60:25:5d:1a:6b:2e:5f:64:d2:38:16:
bd:92:a0:a7:1a:d7:be:08:44:16:34:c9:46:61:03:
83:59:90:c9:59:92:96:7b:36:ac:21:a4:13:94:51:
7e:5d:fc:f2:38:1a:d7:da:5a:03:71:bf:70:07:d6:
35:1a:a8:44:38:3a:41:17:89:d8:bb:82:41:b3:a0:
25:29:da:38:49:b5:48:e8:c2:15:7b:6c:0d:08:ef:
bf:32:b2:06:6e:6c:56:06:e1:86:31:46:bd:e8:00:
0f:be:63:d2:f0:a1:d6:27:48:01:0c:fb:29:ef:cc:
a7:de:41:e2:29:2e:e0:4e:de:41:0e:6f:ab:6a:eb:
81:eb:93:a2:a2:c3:e7:f3:20:4a:92:01:a0:30:e0:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:5F:75:91:4F:36:7F:3A:FA:D8:56:44:1E:BA:5A:2A:2F:85:6A
X509v3 Authority Key Identifier:
keyid:69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:f2:63:d7:63:10:64:51:c0:5b:0f:cb:0b:57:39:a7:8b:e3:
9b:7a:c1:f2:57:93:18:aa:67:9b:7f:8a:cd:35:5b:b8:ce:43:
aa:0c:45:e6:11:cf:50:e7:26:3d:c2:1a:44:10:b7:80:d3:1b:
de:af:2c:81:dc:3b:d5:11:d3:18:6c:ef:da:f0:a8:c5:0d:cc:
f6:44:3f:ce:fd:2e:a6:63:93:60:29:33:b4:11:e6:06:36:01:
5d:04:fe:72:69:c4:d4:50:28:75:5a:fe:74:94:f6:af:d6:34:
28:1d:bb:cc:58:0b:49:78:67:99:16:5b:06:a0:d9:d9:2d:52:
39:78:0b:1f:2e:7d:d8:09:43:b3:a5:e6:72:72:0a:62:0a:44:
11:e1:b9:16:5a:8f:3a:8b:48:78:cf:2a:8f:74:b5:50:da:05:
44:a6:81:b4:36:9e:8a:e0:ae:7f:ea:07:1a:0a:2f:7e:fc:14:
3b:b7:bd:76:85:2f:e3:b1:51:3d:01:b2:ae:99:64:7a:86:04:
b1:a7:02:a7:1f:98:18:48:56:bb:d4:7a:6e:9e:a6:04:86:cd:
47:a5:42:78:47:3e:6e:ab:f7:ae:cd:39:2c:9e:ea:a7:db:de:
9b:e6:2e:c2:fd:34:3a:f7:1c:46:aa:da:30:8f:c4:a8:5f:3e:
30:1e:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:41 2026 by rpki-client