
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json)
Hash identifier: tCKNONNihygB5xzFX2/hxQjy5TmNOBOFdIzBAcEKAjY=
Subject key identifier: 6C:04:A9:28:92:7A:61:00:E7:E9:DA:C7:2A:33:A1:30:01:B8:E7:A5
Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
Manifest number: 0110
Signing time: Sun 01 Mar 2026 06:59:22 +0000
Manifest this update: Sun 01 Mar 2026 06:59:21 +0000
Manifest next update: Sun 08 Mar 2026 06:59:21 +0000
Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: aqpK5sq2LIqabzVvU2kcxu6jY8QKToEiRenZUnbcs7U=)
2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: UonUgi37eGK5+UZSgpaI5VcXY/NpGaUyQWHx23St90A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Validity
Not Before: Mar 1 06:59:21 2026 GMT
Not After : Mar 8 06:59:21 2026 GMT
Subject: CN=69a3e3ca-36a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0d:d6:1a:2e:a0:79:2c:bc:55:52:9f:7b:3f:
56:01:57:9a:b0:9f:fc:a9:23:d6:76:2e:6c:f8:1a:
04:f9:3f:71:11:4b:28:59:16:c2:4f:22:c2:72:47:
35:f0:08:13:ac:c7:5f:2e:6e:5b:57:fb:a0:2d:8c:
0e:49:8b:9c:81:cc:66:db:6d:fb:ea:2e:19:b0:e9:
ff:6e:d1:cb:06:c3:c3:c0:39:d5:70:bf:06:83:3f:
fd:cc:63:69:fd:1f:26:54:1d:92:6d:6f:31:6d:cc:
23:7d:d7:e0:37:cf:d8:f7:b4:ff:28:6a:8c:5d:a3:
c6:19:db:fb:ad:5f:9e:a6:2d:7b:ac:49:24:d0:32:
92:bd:1f:92:19:73:f3:8a:4b:9a:1f:73:39:04:d6:
08:84:95:fc:19:f3:54:f6:cf:4f:6d:5b:ba:c5:79:
52:a5:5f:28:6a:86:54:ab:f9:92:6c:b7:be:94:c4:
24:10:31:ea:62:d9:59:46:29:4f:2e:9a:43:f9:97:
53:d3:ef:2d:5c:25:e3:9a:05:ad:3a:18:49:02:41:
a4:53:4d:39:61:60:45:57:69:4e:90:b6:e9:43:dc:
6d:d5:74:df:74:cf:e3:e0:0c:dd:17:e1:be:fe:50:
73:41:3b:b3:4e:a7:4b:cc:e3:a7:48:7a:96:47:fa:
2a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:04:A9:28:92:7A:61:00:E7:E9:DA:C7:2A:33:A1:30:01:B8:E7:A5
X509v3 Authority Key Identifier:
keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:50:b3:57:d1:c7:d2:2e:d6:2d:6e:c8:83:4b:17:ae:7e:d7:
e5:e0:32:0f:66:f6:00:0b:93:13:ba:9e:f9:af:d7:20:5e:32:
84:85:09:62:b9:0e:ee:3a:86:0c:e3:a7:12:37:55:fa:53:87:
10:20:62:10:46:da:e5:55:7f:94:65:95:da:d4:4c:a1:4d:a8:
7e:ac:84:9a:65:7f:b0:1a:73:ef:79:b2:30:91:29:4d:d9:5e:
fb:36:eb:eb:7c:ce:ee:b6:72:f4:f7:67:da:68:fa:f6:39:89:
f9:10:f8:4c:fa:51:f2:3b:32:3a:b7:23:bd:df:86:f3:da:06:
8b:6b:9a:cb:f1:da:4a:2f:8a:60:45:9d:9a:47:9a:52:c2:3a:
2d:6c:fa:6c:3d:e5:27:7b:c6:99:ec:f8:65:ee:48:b2:0d:98:
64:f6:ac:9c:04:6d:8e:bc:b8:17:dc:13:a6:8b:84:6f:cd:ae:
4d:4c:14:80:df:4d:01:7a:73:34:d7:53:55:b4:7f:39:0f:e4:
71:1b:30:7c:45:69:61:3c:b4:0e:8b:9b:6c:95:f9:98:57:e7:
83:60:c3:8a:85:4a:05:06:5f:7c:35:88:33:6a:da:af:92:64:
48:dc:ff:e5:60:a5:14:43:0c:ec:a5:19:ea:84:c3:df:53:10:
99:3c:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:42 2026 by rpki-client