
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
File: taoJHUe5b__ilkNNAcZFS04cnhk.mft (raw, json)
Hash identifier: 1JfDIXyTCXn3mhmGjBsK35TUnYgy/0P18qlSRxklKY0=
Subject key identifier: B0:B9:4B:08:69:E1:1A:A9:59:F8:E5:88:F6:70:85:8A:21:3B:14:5C
Authority key identifier: B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19
Certificate issuer: /CN=A9188AB8/serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
Manifest number: 48
Signing time: Sun 01 Mar 2026 09:44:37 +0000
Manifest this update: Sun 01 Mar 2026 09:44:36 +0000
Manifest next update: Sun 08 Mar 2026 09:44:36 +0000
Files and hashes: 1: taoJHUe5b__ilkNNAcZFS04cnhk.crl (hash: R6hu5XVP+XZETW9/ua2kbSqWCSX9erl6pGmFpX+Vr+I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl
rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188AB8, serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19
Validity
Not Before: Mar 1 09:44:36 2026 GMT
Not After : Mar 8 09:44:36 2026 GMT
Subject: CN=69a40a85-ea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:5e:20:c3:b9:18:ae:8e:23:60:65:bd:5e:
30:93:a3:d3:05:22:de:e8:5e:11:f2:69:56:54:f9:
09:f4:22:b2:26:14:46:11:c5:bb:17:06:19:0d:f8:
1b:41:a9:82:62:11:3f:ae:71:7b:fe:f6:be:cf:a2:
56:3e:46:fb:26:ae:37:d3:19:fe:f3:be:1e:44:37:
d5:c5:d0:86:1d:ab:c7:7f:fb:4c:c1:14:aa:29:3c:
2e:ee:92:ad:71:30:4c:82:63:8c:0f:f4:20:c1:42:
f4:b1:40:95:48:43:c7:1d:4c:0c:f5:94:82:b1:ed:
17:38:11:46:c1:2b:9c:20:67:d5:6e:b1:46:eb:d5:
21:d5:bf:b7:12:e1:4d:5b:e7:b2:fa:20:76:e7:23:
c7:de:8b:c7:4b:e8:82:c7:f4:35:4e:27:16:53:ca:
22:37:63:da:84:2b:f5:83:e4:f3:31:27:d0:4e:af:
c6:31:f7:62:38:8c:f0:63:52:73:4a:d6:94:ad:23:
39:60:cd:bc:89:b2:b2:f3:5d:f0:6a:59:dd:ad:e7:
6d:25:29:80:94:58:30:2f:86:74:5c:cb:70:3d:79:
cc:e1:3c:41:7b:ec:a7:f8:47:e9:c4:fc:2f:87:38:
1a:16:b6:40:b4:64:71:19:ff:a4:85:b4:2d:79:0e:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B9:4B:08:69:E1:1A:A9:59:F8:E5:88:F6:70:85:8A:21:3B:14:5C
X509v3 Authority Key Identifier:
keyid:B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b4:42:6b:e0:5d:29:7a:2e:f4:a1:41:ca:cc:96:db:4b:7e:
27:4f:1f:2c:2b:65:9d:17:53:0f:a9:96:c1:69:bd:e6:e3:33:
5a:2d:2c:f5:3e:e4:a7:47:44:ab:47:4a:a5:96:d3:21:39:52:
d3:6c:4f:e8:19:6a:a1:53:9f:dd:82:6a:c6:50:54:92:d2:a8:
27:ea:d6:a8:47:7b:c6:6c:8e:6f:88:7c:3b:52:03:af:e5:ce:
14:41:d3:0e:6c:56:95:b1:3a:57:cb:1a:fd:62:47:c3:13:f7:
c8:41:37:14:19:f4:fe:01:91:cf:bf:36:5a:8c:2f:48:57:bf:
35:a1:d2:89:31:0e:c1:a4:e9:21:a8:4a:89:5c:a1:2b:2e:35:
ee:85:76:e6:0f:b2:92:8e:f6:0c:ea:18:27:f3:d2:8b:ce:08:
83:b1:de:89:ea:3f:af:87:8c:d6:bf:24:ed:76:29:24:54:97:
af:3f:e0:34:74:e5:0e:4f:a6:0d:e1:44:33:e6:30:ea:91:a7:
37:2e:1f:49:bd:cf:34:fb:c7:c4:51:8e:05:28:ec:e9:67:cc:
83:2d:72:15:ae:31:4b:cf:2d:38:d4:36:9b:19:96:a1:4b:23:
fe:02:b6:7c:6f:12:40:b3:29:56:e6:2a:e3:ba:18:4a:74:58:
26:6f:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:15 2026 by rpki-client