
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
File: rLhNci0lVbSDPOQGgw_b_pgrfGY.mft (raw, json)
Hash identifier: rwbj16g0z++Dklb3CEc2DHZ7ffcRhjk8QInE77Vf5aY=
Subject key identifier: 23:23:69:A6:16:EB:CB:B5:D2:01:DD:D9:7D:69:F1:15:2F:FE:F9:25
Authority key identifier: AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66
Certificate issuer: /CN=A9180669/serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
Manifest number: 9C
Signing time: Sun 01 Mar 2026 08:37:05 +0000
Manifest this update: Sun 01 Mar 2026 08:37:04 +0000
Manifest next update: Sun 08 Mar 2026 08:37:04 +0000
Files and hashes: 1: rLhNci0lVbSDPOQGgw_b_pgrfGY.crl (hash: CfqTRHbVLVizlQH59geeCswE+Ikgd+u60frJcCvl6i8=)
2: 7D1BFC5E24B411F08834DE10C4F9AE02.roa (hash: VUJM2ojAhkllD4gh361hqeaKIphDeFpY6K+WKL7Se80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl
rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180669, serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
Validity
Not Before: Mar 1 08:37:04 2026 GMT
Not After : Mar 8 08:37:04 2026 GMT
Subject: CN=69a3fab1-200f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:13:98:77:ff:a7:aa:99:6c:de:30:7e:b6:
36:7e:21:1d:21:e1:27:45:5b:fa:06:40:47:fb:df:
b8:c0:fe:4c:a9:13:f2:9c:fc:ea:05:cb:50:06:2c:
50:5f:b5:52:8e:ff:86:47:d7:9d:83:41:67:2b:44:
da:7b:0d:46:5c:23:e0:9f:5c:ab:1b:b7:64:8e:34:
3b:6d:85:a5:22:39:c7:40:89:b1:2b:cb:d9:e0:d0:
61:5b:4a:55:af:8a:c9:a1:4f:c4:fb:9f:96:12:ee:
e4:50:c3:82:84:1a:9d:87:fc:33:15:5a:94:4f:34:
b4:17:b5:fd:65:d5:be:58:6c:96:15:05:7c:5c:a2:
ad:ec:79:e3:1b:b3:b4:70:dd:18:fd:69:4b:53:d6:
d1:18:9b:b8:95:d5:06:7f:f5:f8:30:bf:64:98:ab:
61:8a:0c:95:c9:18:fe:09:15:03:91:1f:80:7a:6f:
2b:a3:0f:87:ae:ee:f3:6d:8f:c9:28:95:75:53:e5:
15:4f:5f:45:28:31:77:9f:f0:8e:45:3c:cd:b1:3a:
7d:a7:d7:af:14:6d:cc:75:38:a4:52:de:f3:c2:43:
f9:89:c1:26:bf:a4:98:b8:90:7d:c2:7c:8d:46:58:
f6:b2:69:42:d0:f5:0c:fb:33:81:b2:c5:b3:a3:43:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:69:A6:16:EB:CB:B5:D2:01:DD:D9:7D:69:F1:15:2F:FE:F9:25
X509v3 Authority Key Identifier:
keyid:AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2c:1c:38:c4:3c:91:9e:c2:c3:5d:9a:c6:ac:96:a9:bb:52:
ef:be:9a:69:3d:76:72:f2:2c:a0:a8:49:cf:cc:b5:24:e6:06:
0f:2c:67:1c:f8:a9:66:5a:14:6c:5f:90:73:67:fe:d2:47:2c:
7d:d3:20:24:7e:3e:97:05:50:5b:29:3a:09:da:60:02:99:fc:
19:00:8e:03:12:83:42:a8:c1:df:2e:0f:f9:9a:c4:d3:99:33:
42:65:1f:af:cf:87:c5:ae:fd:e5:de:37:65:ea:7d:33:b9:ec:
ed:3a:b5:12:57:09:5d:23:fb:30:ab:70:b8:59:62:12:d6:d0:
75:98:fc:cb:6a:41:c1:99:e1:fb:e9:81:58:da:b8:68:c7:fd:
0e:12:88:b1:14:93:bc:8b:37:72:63:0b:22:ad:36:64:dc:be:
01:b2:ae:24:40:4e:90:d2:55:7d:9d:03:7a:9b:9e:2c:20:ec:
1e:19:ed:39:69:0c:ff:fa:1b:f4:a5:b6:ed:66:e5:e5:55:0f:
05:e8:11:4a:b8:49:ba:3a:93:4a:5d:1e:1f:f5:c1:37:f3:3a:
3a:37:91:68:95:35:47:87:b6:65:ac:af:a1:a5:14:8c:03:49:
ab:df:01:ff:53:88:8d:93:8f:a4:85:0c:d2:63:c8:87:64:b8:
8c:18:53:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA2NjkxMTAvBgNVBAUTKEFDQjg0RDcyMkQyNTU1QjQ4MzNDRTQwNjgzMEZEQkZF
OTgyQjdDNjYwHhcNMjYwMzAxMDgzNzA0WhcNMjYwMzA4MDgzNzA0WjAYMRYwFAYD
VQQDEw02OWEzZmFiMS0yMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJgTmHf/p6qZbN4wfrY2fiEdIeEnRVv6BkBH+9+4wP5MqRPynPzqBctQBixQ
X7VSjv+GR9edg0FnK0Taew1GXCPgn1yrG7dkjjQ7bYWlIjnHQImxK8vZ4NBhW0pV
r4rJoU/E+5+WEu7kUMOChBqdh/wzFVqUTzS0F7X9ZdW+WGyWFQV8XKKt7HnjG7O0
cN0Y/WlLU9bRGJu4ldUGf/X4ML9kmKthigyVyRj+CRUDkR+Aem8row+Hru7zbY/J
KJV1U+UVT19FKDF3n/CORTzNsTp9p9evFG3MdTikUt7zwkP5icEmv6SYuJB9wnyN
Rlj2smlC0PUM+zOBssWzo0PckQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMjaaYW
68u10gHd2X1p8RUv/vklMB8GA1UdIwQYMBaAFKy4TXItJVW0gzzkBoMP2/6YK3xm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDY2OS83N0U5MDRDODI0
QjExMUYwQTA1QjAwNjRDNEY5QUUwMi9yTGhOY2kwbFZiU0RQT1FHZ3dfYl9wZ3Jm
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JMaE5jaTBsVmJTRFBPUUdnd19iX3BncmZHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDY2OS83N0U5MDRDODI0QjExMUYwQTA1QjAwNjRDNEY5QUUwMi9yTGhOY2kwbFZi
U0RQT1FHZ3dfYl9wZ3JmR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqCwcOMQ8kZ7Cw12axqyWqbtS776aaT12cvIsoKhJz8y1JOYGDyxnHPipZloU
bF+Qc2f+0kcsfdMgJH4+lwVQWyk6CdpgApn8GQCOAxKDQqjB3y4P+ZrE05kzQmUf
r8+Hxa795d43Zep9M7ns7Tq1ElcJXSP7MKtwuFliEtbQdZj8y2pBwZnh++mBWNq4
aMf9DhKIsRSTvIs3cmMLIq02ZNy+AbKuJEBOkNJVfZ0DepueLCDsHhntOWkM//ob
9KW27Wbl5VUPBegRSrhJujqTSl0eH/XBN/M6OjeRaJU1R4e2ZayvoaUUjANJq98B
/1OIjZOPpIUM0mPIh2S4jBhT5Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:40:00 2026 by rpki-client