
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json)
Hash identifier: GHB5EyYQ1P/JHfKxAggquAIKMDYeRvORUVgPQfzOeBk=
Subject key identifier: 4E:4E:74:1B:92:86:A8:A8:75:39:4B:17:5E:CD:9D:72:4E:9A:1A:0A
Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82
Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
Manifest number: 010A
Signing time: Sun 01 Mar 2026 07:03:03 +0000
Manifest this update: Sun 01 Mar 2026 07:03:03 +0000
Manifest next update: Sun 08 Mar 2026 07:03:03 +0000
Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: jxKGXrcU83ORONycysIxni1SGaOC9WPez+au2ML+a9E=)
2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: IEy/mcw6ZfhnJTDcRN6QvxlK83XiVeJvCwnKCavlXNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl
rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282
Validity
Not Before: Mar 1 07:03:03 2026 GMT
Not After : Mar 8 07:03:03 2026 GMT
Subject: CN=69a3e4a7-15e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:18:6b:05:1c:aa:36:55:a2:e8:35:71:06:2d:
f5:db:92:17:2a:45:6a:ab:b6:c7:55:ab:de:bf:4f:
08:66:69:d3:0a:74:dc:2d:da:4f:64:6a:cc:23:76:
56:80:d1:69:37:6e:b8:8b:05:10:da:cd:92:eb:9d:
53:d9:4a:12:64:d1:9b:05:c0:d1:62:3c:87:24:d1:
ff:56:df:7b:83:1f:b7:a0:17:73:72:66:32:49:2f:
1c:db:a0:2b:4f:fa:3b:aa:c7:60:3b:07:39:86:75:
89:50:61:04:64:99:ca:41:ea:d5:93:94:de:e8:81:
65:2d:bb:d1:c7:06:c4:05:f1:d4:1a:a9:6d:6e:a6:
d9:cd:c3:01:74:60:74:b1:ff:8c:8c:bf:93:ba:f7:
89:73:68:01:42:27:da:44:80:21:2b:65:11:50:59:
0a:2b:e3:64:1b:d0:3a:70:7a:b7:6e:f1:aa:8d:0e:
c0:9b:a6:a4:2f:d2:ba:bc:ee:1f:93:4f:b6:6e:5f:
5a:45:0d:42:e9:33:23:ed:3e:bb:ea:18:d2:26:86:
12:05:ac:89:af:74:40:32:cc:04:66:5c:5a:6f:7b:
f6:3f:0d:bd:b6:dd:df:12:0b:56:3e:b1:89:e4:38:
31:e8:cb:92:2b:25:b4:28:8b:44:33:fe:0d:80:9e:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4E:74:1B:92:86:A8:A8:75:39:4B:17:5E:CD:9D:72:4E:9A:1A:0A
X509v3 Authority Key Identifier:
keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:c9:fe:f4:16:00:5f:d2:44:c4:27:9c:f0:cb:2a:cf:08:a4:
34:4d:28:14:7a:ab:7a:1f:53:65:e4:48:7d:4d:a4:eb:49:1c:
0e:ab:81:32:cc:8e:a3:58:cc:72:6a:65:5d:1f:4e:2b:46:38:
e8:55:9a:53:0a:11:29:5b:02:4e:fb:ca:6d:fe:66:7e:79:f1:
74:b1:12:5a:a9:ab:df:65:cc:79:c4:ed:1b:72:80:ca:a7:7f:
95:aa:82:39:be:91:6b:54:56:ef:b0:c6:f3:8a:7b:e6:c8:cf:
e5:91:70:6d:0b:07:6d:0a:fb:be:64:75:fb:c0:33:a0:b6:d7:
d1:15:b5:22:b8:a6:60:b5:e6:10:f2:b3:81:47:45:bb:07:99:
a7:a8:5c:09:4d:0e:d5:bd:ed:5e:7f:63:65:cb:69:9e:71:88:
ff:5c:a0:0c:54:bf:d1:89:bb:01:6b:e7:f7:24:dc:b3:76:d1:
96:71:96:98:4f:07:8f:f1:99:9b:4b:8b:81:45:f5:3f:ad:ce:
98:74:8f:e4:73:40:bb:fb:d4:22:a7:b7:e2:33:e7:cb:07:f9:
2f:0b:1b:9a:7b:ae:21:ac:9d:e0:9a:c1:86:02:13:55:83:59:
db:43:99:dd:9b:98:91:ce:7e:9c:67:45:f9:03:32:ea:c8:1a:
a0:c8:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:32 2026 by rpki-client