
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
File: rIf9aQzGskx4_D9x0y3eDbookNs.mft (raw, json)
Hash identifier: ziIq3UoOLSuMSr/IYHxTXOsyjGCMMEEjJu6W983yROQ=
Subject key identifier: 4C:11:B0:F1:36:9F:D4:48:49:27:46:A3:1F:DC:4F:36:1A:DD:67:82
Authority key identifier: AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
Certificate issuer: /CN=A917C156/serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
Manifest number: A6
Signing time: Sun 01 Mar 2026 08:33:40 +0000
Manifest this update: Sun 01 Mar 2026 08:33:40 +0000
Manifest next update: Sun 08 Mar 2026 08:33:40 +0000
Files and hashes: 1: rIf9aQzGskx4_D9x0y3eDbookNs.crl (hash: MzJ8lD0kcE+oVmlExeXPU/tF2FDzE6Z4uWFktqOZNMc=)
2: 82B7AD281C2811F0AF6EDC47C4F9AE02.roa (hash: //fCANZMUH8xgoi27pDocS10NmhDbhWBB2uRGDJADwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C156, serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Validity
Not Before: Mar 1 08:33:40 2026 GMT
Not After : Mar 8 08:33:40 2026 GMT
Subject: CN=69a3f9e4-9a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:a2:88:22:6b:24:77:7b:1d:fa:47:24:4e:
c1:78:f0:84:2f:c2:38:0c:41:1d:20:4f:29:bb:ac:
43:52:5e:83:7c:d8:f9:2f:a1:0c:65:77:70:1e:31:
1b:c3:70:ad:f1:c4:f7:d6:db:ef:e1:28:c7:75:c9:
0c:53:fe:9e:20:58:0f:9a:55:d2:69:ba:74:e6:46:
e5:b7:d4:89:77:ba:47:a7:00:9e:71:25:39:c2:3a:
94:8a:e4:bf:03:9f:8b:2b:8f:ce:93:96:8e:04:72:
58:15:ee:c7:3b:b7:b0:71:52:c3:36:41:ba:0c:0c:
88:fe:03:23:70:6b:fe:fc:0f:ec:15:e2:f8:57:34:
ed:51:65:1c:97:b0:ce:63:e3:52:fe:fa:e3:e5:bb:
31:63:c1:80:5e:04:e6:5b:fb:67:03:4f:64:1a:e1:
7b:35:a0:aa:38:d9:53:1d:a1:5f:f2:06:77:ac:9c:
a8:b7:96:63:b1:bc:01:36:b4:94:fa:36:c8:d9:b0:
0c:d7:9c:6a:85:0d:d5:ad:a0:79:17:c7:b7:92:48:
5c:fe:ac:3d:a1:f4:3a:3a:73:75:ee:4c:64:97:25:
bf:0b:2f:30:76:f7:ca:3b:7f:c6:ac:8b:8d:f4:a4:
52:23:7d:f0:fd:71:5b:74:af:25:d0:03:01:6e:1c:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:B0:F1:36:9F:D4:48:49:27:46:A3:1F:DC:4F:36:1A:DD:67:82
X509v3 Authority Key Identifier:
keyid:AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:72:7e:4a:eb:e8:26:f9:e7:4a:aa:a7:b9:72:85:b2:01:73:
5d:13:e1:22:5e:6c:4d:8f:8d:ec:92:ae:02:65:a7:81:b6:ba:
3a:dc:24:e7:0e:8a:a9:3b:a6:0d:8d:56:ad:66:45:cd:78:b5:
8e:16:20:0c:45:bb:a8:60:8b:ac:6e:4e:63:a1:35:30:17:6a:
7e:5c:49:30:0a:72:bd:c6:ac:c8:a2:1a:77:80:26:eb:3a:60:
9d:82:75:d8:9e:37:07:b8:85:59:f5:eb:fe:f8:7d:77:44:17:
af:07:8b:b7:81:3c:de:c7:b5:1d:1c:c4:ac:08:4e:f4:89:8d:
67:cc:b1:f6:c8:8d:25:54:bd:84:df:c3:f1:82:95:d8:ed:81:
e7:70:66:9c:44:ad:d0:42:bb:5b:f6:39:4e:6f:cc:ed:90:65:
79:97:d4:37:da:2a:82:8c:16:16:fb:a8:f7:09:73:89:2c:6e:
74:0f:de:fb:ba:43:ec:b2:6d:38:64:d0:fc:68:61:1c:c7:8e:
d4:92:d6:9e:62:41:6a:90:95:27:da:2b:4e:e6:de:c7:76:84:
b4:d8:48:f3:15:21:0b:04:e7:ac:1c:77:06:16:a4:20:4c:e8:
12:6d:a0:9b:00:5b:57:10:20:26:c1:74:68:fd:20:24:99:1d:
e2:63:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:27 2026 by rpki-client