
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json)
Hash identifier: q8nPL5ooS0VLwwzVDLaziND4i6WieGJNWvs/t1rKXrw=
Subject key identifier: C1:A4:14:91:4F:A0:AE:F6:AB:F7:57:94:3D:68:65:E0:0D:B2:48:AC
Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
Manifest number: E0
Signing time: Sun 01 Mar 2026 07:52:05 +0000
Manifest this update: Sun 01 Mar 2026 07:52:04 +0000
Manifest next update: Sun 08 Mar 2026 07:52:04 +0000
Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: PMlKxpx8oUcp1+2opeuim42IcqbQq4Zm/dOkwHCBGB8=)
2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: G7Rh/kD9ovidahZtN/DccolLPZ5w6zif+prC8czAfkA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Validity
Not Before: Mar 1 07:52:04 2026 GMT
Not After : Mar 8 07:52:04 2026 GMT
Subject: CN=69a3f025-475d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:4f:56:98:2e:3d:04:b6:61:1c:6d:eb:19:
5c:dc:27:22:e6:3f:f4:8b:4a:c1:c7:08:1d:97:7c:
8d:37:07:f7:f5:bb:f7:dd:f5:3c:dc:c8:4a:f3:94:
d4:14:12:a0:2d:6a:28:13:4d:4e:81:71:db:a7:a3:
34:09:e6:29:53:f7:5c:16:00:91:43:d9:a8:da:ce:
67:d4:0b:33:62:63:eb:6d:0c:5d:eb:db:2c:bd:43:
dc:4c:15:d9:53:21:8c:2f:4e:96:42:dd:ed:32:24:
c1:34:e3:1e:23:53:56:9c:f8:9a:d4:9f:ed:da:79:
db:f7:b3:d2:58:51:ac:cf:d0:92:f0:dc:55:fc:b6:
80:7e:83:2b:cf:fb:a7:50:dc:32:1f:81:a9:7f:73:
86:e1:e1:30:b8:d5:87:6b:9a:e3:1b:d5:00:7a:92:
ad:d2:d8:01:e8:21:4a:4e:9c:6f:16:07:54:86:07:
28:84:08:b1:79:5f:5b:f7:54:e8:80:d6:62:9d:01:
31:7b:4d:68:73:32:87:bb:05:17:0a:ea:7b:20:46:
91:7e:b6:fe:bc:d9:87:1e:ea:40:66:a4:44:71:9e:
4a:55:df:61:f4:71:e9:78:ea:ff:77:01:01:39:d2:
4a:be:2b:2e:b7:4a:0c:02:ca:15:78:62:91:bb:ca:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A4:14:91:4F:A0:AE:F6:AB:F7:57:94:3D:68:65:E0:0D:B2:48:AC
X509v3 Authority Key Identifier:
keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b6:0d:ce:4d:85:93:42:24:71:cf:5a:70:24:bd:01:e2:9f:
64:2e:95:b6:b4:2e:bd:b2:a3:94:66:a5:b9:ad:de:f9:02:a8:
ac:06:26:eb:a8:cc:e7:4b:68:46:8b:91:8c:dd:c9:1f:8e:7d:
25:a1:df:2e:9c:31:56:5b:20:be:a6:48:b8:3d:9c:d9:ec:95:
d6:be:de:22:26:fe:87:7e:2f:f5:d9:50:cd:0c:7a:6f:56:19:
f4:ff:8d:2d:52:60:dc:d4:47:d6:fc:a2:5f:af:9f:79:0c:75:
ca:a7:ce:f5:22:9d:3f:a4:b8:ee:4e:23:55:db:f0:60:53:37:
9e:fe:53:50:a7:6b:01:ef:b2:2b:63:1b:c5:44:ae:84:c0:40:
85:e5:1c:cd:d3:c8:66:9d:58:fd:b7:50:2a:5a:98:d9:0c:c3:
1c:74:69:d8:19:4a:87:bc:79:61:f8:08:ac:3e:d3:bf:fe:f4:
79:84:40:f4:48:ef:66:a9:30:96:d0:76:95:06:91:1d:d2:bd:
4e:2d:0d:60:4b:a2:e5:9c:a4:c7:8c:39:a0:e9:b9:29:5d:24:
25:af:23:13:10:e3:37:2e:ef:0f:41:1b:88:c5:56:28:bb:53:
26:d3:1d:ee:5a:0f:e5:d5:f7:4d:2e:19:cc:72:e1:f3:1c:26:
96:fa:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:50 2026 by rpki-client