
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft
File: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft (raw, json)
Hash identifier: TfCuS8gZaUKFAQZALsv6a8czqWnegz9U2XpqwVxAnCQ=
Subject key identifier: 29:28:2E:60:70:AC:12:9C:A2:8A:96:35:80:5E:BD:6F:F3:07:9F:56
Authority key identifier: 45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6
Certificate issuer: /CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6
Certificate serial: 06C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft
Manifest number: 06BE
Signing time: Mon 02 Mar 2026 01:19:06 +0000
Manifest this update: Mon 02 Mar 2026 01:19:05 +0000
Manifest next update: Mon 09 Mar 2026 01:19:05 +0000
Files and hashes: 1: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl (hash: CYcMtpmEdRHdfHNuOby4wninup+InDhWDBYUYTv/FBA=)
2: EA266BB0965911EB9A717E21C4F9AE02.roa (hash: Yy0YfiEKkdfp5Y6+q5Ug2GVnHiig9LTVQkTI/iR0z+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl
rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178580, serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6
Validity
Not Before: Mar 2 01:19:05 2026 GMT
Not After : Mar 9 01:19:05 2026 GMT
Subject: CN=69a4e58a-a5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:75:cf:e3:07:ba:15:dc:50:47:f0:04:56:
f5:3f:28:95:61:ac:de:4c:6e:e2:53:3a:07:fc:57:
4b:a2:a4:95:a7:21:2b:68:2b:2d:cf:51:14:17:59:
29:40:4e:d8:6c:53:1e:fe:37:ca:4a:6e:02:ee:08:
8d:d4:7e:30:e7:83:c0:e4:30:4c:75:fd:f2:6d:2c:
fc:51:f2:85:27:43:e5:79:ef:7c:48:26:42:4c:03:
49:d4:c0:db:45:69:63:bd:47:9c:e7:de:61:3e:54:
44:8f:e8:4a:56:81:44:a4:1c:aa:77:4f:b8:6a:bc:
5e:00:8e:82:73:d5:f9:8b:74:f3:68:85:3a:ff:ef:
32:6d:6b:cc:97:33:23:e2:d7:f5:2a:19:ed:ef:8e:
1e:cf:ce:16:92:2f:02:ba:fb:08:ba:bc:2f:c3:3e:
b2:44:0d:4d:d5:0f:b8:93:44:dc:8b:cf:7a:61:16:
43:98:d7:ed:a1:d1:dd:5d:b0:6c:1b:27:04:bb:f7:
d9:e1:b9:37:86:74:0a:b0:04:48:0d:26:05:56:ca:
39:45:f9:c4:b6:3b:06:7c:c7:66:9b:11:dc:19:3c:
cb:fc:94:bd:25:7c:3b:2a:59:11:12:b3:0c:68:2e:
3f:71:ba:10:e5:13:6f:1a:5c:eb:49:47:c9:b4:dc:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:2E:60:70:AC:12:9C:A2:8A:96:35:80:5E:BD:6F:F3:07:9F:56
X509v3 Authority Key Identifier:
keyid:45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:dd:4b:81:38:e2:48:c4:01:e8:62:8f:90:7a:48:90:83:ee:
98:2c:88:13:44:b3:0e:e2:10:e5:10:4f:2a:15:5f:ea:dc:c8:
5b:8b:7e:84:a1:e1:a8:0a:60:df:70:92:a2:39:bd:53:88:43:
0b:d7:65:6b:2e:73:ef:e5:2d:f8:5f:9f:95:42:35:c7:7f:ad:
59:77:77:e5:9a:5b:41:c0:c7:21:16:19:93:24:3b:89:34:92:
92:48:29:d2:b8:4f:2d:16:7e:17:cd:89:11:fa:7b:24:41:31:
29:70:09:18:97:17:94:70:34:25:c2:ad:74:95:4a:ab:bb:a3:
6e:26:30:98:b6:9c:3c:0c:84:21:90:e3:83:61:29:90:da:1e:
7c:1f:e6:03:7e:49:b9:12:80:3a:a5:0f:0a:b8:4e:04:60:ba:
ba:2b:95:00:79:63:88:32:b8:46:26:31:be:10:ec:c7:99:3f:
44:42:67:35:26:bd:9e:94:8b:0f:89:fe:30:b3:cc:58:5b:41:
db:fa:2e:89:38:21:83:a6:ed:66:fb:bc:51:6a:56:c4:7a:e3:
4e:c1:7f:51:aa:46:86:07:90:be:73:80:35:d4:0c:e5:51:f7:
4b:8c:65:bb:db:9f:59:ec:9b:c3:71:52:4e:7a:f3:dc:e4:d4:
d9:ac:ab:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:36 2026 by rpki-client