
$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json)
Hash identifier: s6Fqi9lWKrTzA08BRSnbQIOJ75CdB4Nd3esTUWCigC4=
Subject key identifier: B4:07:0C:06:91:B3:0F:29:D6:D3:DF:A0:1D:D8:46:84:C3:C8:CF:D6
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial: 036D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
Manifest number: 0362
Signing time: Sun 01 Mar 2026 01:47:28 +0000
Manifest this update: Sun 01 Mar 2026 01:47:28 +0000
Manifest next update: Sun 08 Mar 2026 01:47:28 +0000
Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: Pde0vBLyCGo71Uwk2T9zMuu8JITViB1QAM+4ybmxOXA=)
2: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: PB7QOYlvRwfsWOXpc6d0385exuRFXi8mvCHTNI8vfms=)
3: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: FUZ5azqpAEZ0qmf1CYejZILVHYibj+rRrJRKN/AtVm0=)
4: 7E8E2302014811F1B68E82C6516F56BC.roa (hash: PpTz7PT3/8BC6vIB93OQFUoqFNDqC+yYt08VYo4Fd6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Validity
Not Before: Mar 1 01:47:28 2026 GMT
Not After : Mar 8 01:47:28 2026 GMT
Subject: CN=69a39ab0-bffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:ab:17:15:ad:57:06:25:11:44:b5:d2:c6:
4f:7a:1e:96:13:68:dd:36:54:8d:19:b5:b4:c8:f0:
07:3b:59:2b:79:db:6f:9b:2b:c6:cd:b2:f4:10:58:
d3:bc:8f:c0:6b:39:59:08:67:2b:d3:44:13:23:15:
a8:ed:55:f1:09:c3:28:de:ec:7a:8e:1e:d3:7e:e5:
ab:21:bf:78:1e:0a:19:b9:41:7d:43:ee:ab:2c:72:
d2:e2:c1:0a:70:b0:64:e5:cc:79:05:cd:45:53:7c:
fc:3b:ec:b0:45:60:3c:76:a1:98:52:ea:26:81:f6:
3c:a3:58:c2:03:12:5e:49:14:0f:eb:c0:ab:7c:b8:
da:33:f1:74:f9:34:b8:bd:95:b1:c3:c2:44:62:0c:
50:2b:cf:f9:bb:4b:9c:3e:42:59:eb:d9:1e:40:92:
aa:c4:f0:82:11:7d:56:58:1f:e1:9c:e6:e8:5d:05:
44:ea:ce:be:14:2b:1e:9e:09:7c:b7:db:43:59:ab:
b4:14:2b:84:7d:fe:e7:6b:b7:9b:69:41:9c:72:00:
f7:93:80:78:00:fa:27:13:d4:fe:50:7c:1b:f1:d9:
f0:7a:5b:e4:6b:c3:1c:9d:28:76:b8:42:bf:ab:09:
82:e7:83:4f:4e:08:29:9b:a6:b9:c3:a3:b5:47:52:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:07:0C:06:91:B3:0F:29:D6:D3:DF:A0:1D:D8:46:84:C3:C8:CF:D6
X509v3 Authority Key Identifier:
keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:72:ba:3a:1b:86:88:23:60:d2:50:7e:57:e5:e0:a5:f8:09:
f6:7f:ce:8b:65:16:68:67:e8:b1:34:27:8f:35:be:75:6f:5b:
ef:96:c0:8a:be:78:23:f5:e4:7e:4e:6e:45:b8:ed:c1:2e:8e:
79:7f:7a:3b:6f:18:90:ca:b0:57:bc:58:9d:2b:b1:3b:78:46:
ab:39:aa:ef:e2:62:d6:c5:99:af:ec:9d:69:0a:e6:c6:03:58:
1f:fb:d3:96:57:61:ba:20:c4:23:6c:67:da:7c:1e:44:29:e3:
a5:7f:49:7e:99:bd:62:b9:2f:55:95:28:6c:e4:4a:f6:44:83:
f5:7e:47:9d:bd:e8:b1:b4:12:7d:21:e3:80:39:05:22:07:1a:
52:b4:d8:55:82:87:ef:8e:e3:14:be:bf:72:b7:02:4e:47:76:
2a:54:af:31:ef:c2:3f:1c:b4:96:eb:20:9b:69:e2:8a:5b:6f:
17:e7:52:cd:07:1b:b6:0a:59:19:f3:ef:ce:88:82:71:f4:3f:
ac:d6:e6:f0:7d:42:39:2c:0b:ec:24:41:99:cb:4c:de:da:c5:
56:82:49:98:5a:4b:76:5d:fe:7a:23:f2:cf:32:d7:70:36:8b:
bb:08:a6:2f:cd:b5:15:48:f8:4d:d5:52:8a:75:6d:0c:db:13:
95:5e:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:48 2026 by rpki-client