
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File: rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier: DXOahfjjlbAjQf2fajfxnnCSRZOgW5B8DYxMQwYv218=
Subject key identifier: 68:29:57:8B:35:CF:19:20:E4:FF:0C:A7:1F:95:00:E7:B8:B7:0F:4C
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer: /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number: 01EA
Signing time: Sun 01 Mar 2026 04:10:15 +0000
Manifest this update: Sun 01 Mar 2026 04:10:14 +0000
Manifest next update: Sun 08 Mar 2026 04:10:14 +0000
Files and hashes: 1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: oF/gLQ3o4Nt0FFfD/gSQfWZZ53FzdJaO0u6DdBvIp0Y=)
2: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: wg6PkX5FTKBuzoU2wH2B403iAUUBx7n4KiMD6J5IWOE=)
3: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: QDeaqdoBnFXV+JmRiyCNSIMZmZka/hyC5/9UzKXY3ZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Validity
Not Before: Mar 1 04:10:14 2026 GMT
Not After : Mar 8 04:10:14 2026 GMT
Subject: CN=69a3bc27-466a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:50:a5:17:7a:68:f2:35:4a:1a:cd:2a:e8:
d9:d9:5b:d1:d8:b0:17:34:0c:f2:82:1a:43:bb:b7:
d2:7e:37:c9:88:6e:3e:82:55:9a:59:3d:9e:50:ef:
7e:2e:a4:cc:d0:83:8a:9e:b5:80:a0:52:21:06:b3:
c5:bf:62:a6:e9:bd:24:0f:0d:76:9c:fb:9e:4e:30:
1d:b7:ea:f3:9f:8f:24:ca:64:eb:6f:fc:f4:a0:9e:
92:4d:52:af:d7:1e:db:01:22:6c:09:b0:7b:cd:89:
a6:c8:38:55:b6:e2:a1:e5:ee:ac:85:33:e8:cc:87:
44:9d:ff:75:d2:cb:8c:50:d1:2e:be:30:65:cb:3e:
cc:85:5b:59:8b:8c:ed:9e:3c:78:64:a4:08:6b:9c:
7f:c4:8f:2c:04:2b:e6:3b:af:82:ce:d3:1a:5d:06:
53:ca:d7:d4:39:b7:b0:54:43:11:e8:ac:e6:5d:5b:
cd:d7:94:fd:df:5d:18:22:e5:91:49:1d:c4:67:2e:
17:f6:a0:65:6e:a0:56:c5:f3:67:fc:06:58:ec:1a:
72:6a:68:c3:16:43:a0:ce:89:d3:e8:96:ab:a5:aa:
39:73:dd:96:26:e3:39:e0:07:9f:1b:90:47:f8:6b:
28:a5:75:d6:f3:60:12:44:e6:26:10:cd:24:3c:2c:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:29:57:8B:35:CF:19:20:E4:FF:0C:A7:1F:95:00:E7:B8:B7:0F:4C
X509v3 Authority Key Identifier:
keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:de:aa:f9:c8:ab:ca:35:f3:79:9a:a9:c3:4f:2f:27:12:22:
5d:12:60:64:70:47:6d:6c:06:07:e0:e7:8b:10:57:29:79:3b:
fe:60:7d:0a:3d:df:ef:17:48:ba:be:b3:c6:c2:ca:d1:0c:d1:
18:35:85:b5:fb:0e:ff:37:ec:ca:f3:a9:ba:7a:4f:1c:00:ab:
de:07:dd:3d:b7:3c:73:47:66:bc:a9:2c:41:25:89:c2:91:3c:
56:f5:05:a6:0c:7b:b4:57:b7:91:20:ce:c0:b2:e5:d4:cb:74:
97:10:6f:2c:b4:bd:3b:4c:21:33:c5:e2:b5:8f:8e:56:1f:dd:
ba:6e:46:49:0d:4a:12:22:3e:0e:c7:04:4c:d9:91:a8:27:9b:
50:6a:1b:7a:1d:b6:c4:21:d0:2f:d6:df:48:2a:62:e1:9f:cd:
5a:77:89:e7:cd:8f:63:e8:63:0f:b3:e0:21:f2:07:84:b8:d9:
ca:bd:5e:c1:fb:5c:6d:8e:e6:cc:4d:ae:8b:b3:4e:61:37:06:
e7:eb:f2:40:3b:89:a3:f3:6d:36:bf:19:6c:93:7d:08:fc:67:
0b:91:79:bb:8a:2e:c1:16:8a:b3:54:d7:da:c0:55:c9:8d:90:
84:c9:9a:36:4a:cf:e7:9a:34:5b:f5:0c:41:e2:59:5c:b8:30:
45:c4:c6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:35 2026 by rpki-client