
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
File: plApCrx0GfQg5AG7s6RNCBPR8Wk.mft (raw, json)
Hash identifier: 37KZiaf1dSy+wDT7c3q7xeF8zBZjAgAsXimgbfdzDm4=
Subject key identifier: 3A:A4:E1:10:71:96:64:DF:E4:01:61:B5:32:B0:E1:27:D7:B2:D1:50
Authority key identifier: A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69
Certificate issuer: /CN=A9180EB5/serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169
Certificate serial: 04DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
Manifest number: 04DA
Signing time: Sun 01 Mar 2026 00:25:04 +0000
Manifest this update: Sun 01 Mar 2026 00:25:04 +0000
Manifest next update: Sun 08 Mar 2026 00:25:04 +0000
Files and hashes: 1: plApCrx0GfQg5AG7s6RNCBPR8Wk.crl (hash: Bh6lZk1CsYFRD8VjafqLORgndWjx1eXiRd+yOrbd/gk=)
2: C361870855FD11EC938D1744C4F9AE02.roa (hash: l+iEfxqNePPb3XLipxbaNSynFCeXqHnaJClotYQa5vA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl
rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180EB5, serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169
Validity
Not Before: Mar 1 00:25:04 2026 GMT
Not After : Mar 8 00:25:04 2026 GMT
Subject: CN=69a38760-da17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:a0:ea:83:75:32:19:1b:71:4f:62:c8:13:
9e:31:c4:b0:e3:fa:15:37:2d:01:12:f5:eb:a8:65:
ed:38:bf:a1:e5:e2:b9:0e:23:f3:88:66:ad:3a:17:
b7:77:f0:5b:43:bc:c2:cd:86:fa:62:f3:6a:1c:ea:
cb:4a:6d:f3:a3:cf:5b:15:a7:e9:46:bb:da:76:f1:
dc:4c:fd:8b:8f:ab:0f:d8:67:96:74:56:e9:1c:29:
c6:f6:53:3a:c6:ad:9a:f0:13:6d:93:ce:4a:d9:36:
d5:93:20:ff:23:93:04:e2:9b:0b:b7:d2:fd:ad:d9:
56:94:72:0e:40:a5:d8:3a:1e:b5:e6:1d:fe:2f:ac:
4f:c9:df:2f:18:9f:23:1c:32:37:ff:cf:c1:c4:a4:
ec:a8:b2:f4:7b:e2:ae:6e:6e:44:2a:1b:22:2d:a6:
3f:85:84:92:22:76:dd:68:2e:82:f6:d3:d4:6d:39:
12:9d:fe:a5:fa:98:d2:58:02:c9:3c:fa:a4:ff:d5:
e9:89:ce:5d:c8:23:ce:4a:4b:91:ec:28:0e:77:c4:
c6:c9:d1:1d:ad:71:73:40:c3:58:53:07:93:6b:00:
ed:bb:ea:17:f6:ec:03:c5:bd:c0:96:1b:c4:9a:8a:
c4:71:7e:35:11:c7:5e:82:e6:49:b2:ed:4c:03:ce:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:E1:10:71:96:64:DF:E4:01:61:B5:32:B0:E1:27:D7:B2:D1:50
X509v3 Authority Key Identifier:
keyid:A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:78:ac:9c:7c:1b:5f:15:2a:c2:2c:a7:72:57:dd:d8:43:48:
d9:8f:9a:e5:5c:9c:a3:82:52:ab:ad:f3:44:2e:bb:46:52:b1:
f3:f0:e2:b7:cd:d5:a2:20:21:d5:c5:a0:50:28:5b:f0:b1:c4:
70:8d:8a:91:b0:de:d3:90:ee:e6:bb:a4:42:dc:d0:a7:8f:37:
c5:e1:c8:16:fb:99:dc:68:63:17:c0:46:9e:e4:8b:d9:40:ad:
e5:62:76:f0:c2:cb:57:cb:dd:b0:b7:c4:dd:2c:15:16:aa:3d:
04:04:41:95:97:e0:c2:b4:5b:84:07:90:35:8d:31:a4:c1:8e:
db:7a:c6:dc:e5:32:16:28:d6:99:b1:85:b4:b1:76:12:e6:be:
ea:48:fa:6d:74:11:83:3a:36:34:99:92:65:be:02:69:bc:1b:
41:c0:bb:3f:64:2a:66:13:cd:97:d2:3d:d5:6d:e0:62:18:94:
66:ae:7e:92:6d:a1:72:f1:5b:2e:65:c6:59:30:4d:f2:79:85:
31:44:16:f7:ce:c4:c9:7f:58:63:59:3b:55:33:25:0f:a0:16:
44:3f:53:18:37:82:e7:b5:47:53:0a:cf:10:56:84:74:af:1a:
95:a4:fe:b0:ce:a4:f4:41:d4:77:f0:bc:3d:71:49:4d:04:6d:
50:16:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:06 2026 by rpki-client