
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier: C/0XW50p886mAg+wTfXJYc55jdfuXVnZKp11/FpUBPw=
Subject key identifier: BC:84:B7:21:D2:2B:05:D2:F8:C3:B1:80:48:1A:3C:7A:A3:A9:B5:49
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial: 04DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number: 04D5
Signing time: Mon 02 Mar 2026 00:15:15 +0000
Manifest this update: Mon 02 Mar 2026 00:15:13 +0000
Manifest next update: Mon 09 Mar 2026 00:15:13 +0000
Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: bDXzMCbMEmofva2W4pp86CRm+RpAFvekOb1ff/G+rnQ=)
2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: zbXMrXwx1yzaHmM3iEw5RvlADnQZubhK6bBZesY2itA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Validity
Not Before: Mar 2 00:15:13 2026 GMT
Not After : Mar 9 00:15:13 2026 GMT
Subject: CN=69a4d692-2b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:6b:40:32:5c:66:6b:e9:1b:7a:92:d7:c1:
e8:9c:74:7e:30:db:22:f8:c6:37:7e:24:ae:21:26:
47:e4:5a:0b:18:60:8f:6f:94:e2:7d:e9:0a:5d:7d:
2f:95:3b:ef:c7:f7:e9:aa:4b:be:42:65:ef:88:be:
11:7e:0c:26:e8:a2:72:f9:4f:b7:e0:08:37:7d:32:
9d:72:6a:ed:c0:d2:ce:0b:ef:a1:9e:f4:6c:31:82:
a5:41:8d:ff:6b:47:67:55:83:a9:27:fd:c9:31:8a:
c1:d5:19:e5:9a:77:1a:23:95:ac:3b:bb:34:93:03:
96:49:93:c7:b0:6d:f9:ea:12:4f:25:1e:29:e5:ba:
57:66:a5:12:30:fb:3c:86:13:8e:39:16:a0:b6:18:
30:a5:9f:c3:81:8f:1d:9c:6b:c2:b4:f4:06:5d:6e:
33:03:5d:38:15:2b:21:1e:f8:60:34:7d:fd:31:b6:
3e:ba:c0:54:d1:f9:25:0f:c4:70:39:4e:b6:0d:ab:
4f:34:5d:fb:11:0f:54:7a:5d:47:c0:95:95:25:ce:
99:31:33:bc:06:e4:f9:95:17:c5:14:c2:2a:a5:6d:
5a:03:04:37:85:46:90:6e:7a:ba:44:b4:a7:c4:17:
8f:bd:cf:d1:44:ab:13:40:4f:88:45:04:62:6f:8c:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:84:B7:21:D2:2B:05:D2:F8:C3:B1:80:48:1A:3C:7A:A3:A9:B5:49
X509v3 Authority Key Identifier:
keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:8e:76:25:5e:bd:6c:d6:9a:53:11:4a:6b:57:b0:e6:ac:3e:
95:e7:ac:b7:57:5b:bd:98:25:94:41:78:2f:22:f7:d3:6f:72:
23:c8:6c:09:5d:cc:29:21:9b:d6:25:7b:a6:68:1a:a2:a2:a4:
6c:eb:93:8b:9f:74:ed:63:06:5d:82:b2:cc:a2:fd:e1:27:4d:
9b:3f:8d:45:c2:da:33:aa:f7:4e:a2:92:0c:b0:8c:5a:5e:68:
eb:84:49:f7:7e:59:e4:58:51:99:4c:db:48:c2:b6:7a:2a:cc:
08:17:93:10:11:0c:96:c9:61:1d:d2:5e:4a:ea:52:a7:16:63:
98:ee:c2:25:55:24:e8:4d:16:c5:2b:31:e2:2b:c5:05:b0:d0:
b2:92:95:30:9e:59:fb:65:90:36:44:47:73:c2:07:c2:a3:29:
11:4a:c1:3b:5c:57:dd:3a:1e:af:4c:00:f6:58:1f:29:b8:6d:
60:98:65:eb:e4:6e:0d:40:3c:3e:c4:70:f4:3c:9c:a6:90:07:
d0:4f:cd:78:50:ca:01:99:2a:cd:e1:37:1c:6b:0e:d0:4b:6d:
47:5b:8a:86:94:7a:90:d8:35:38:9d:a2:aa:6f:14:d5:90:49:
06:be:86:a3:f9:95:6a:7b:e7:52:2f:95:67:46:47:97:e8:ab:
ea:bb:4d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:12 2026 by rpki-client