
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json)
Hash identifier: BGyOaUseilOvvjUGAFrHQlr+KSR0YseyqMatJJwd9kk=
Subject key identifier: 9B:D2:49:EB:DF:19:DD:FE:1C:90:2D:DC:C8:1C:26:14:35:2E:CA:07
Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A
Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
Manifest number: 017E
Signing time: Sun 01 Mar 2026 05:33:09 +0000
Manifest this update: Sun 01 Mar 2026 05:33:08 +0000
Manifest next update: Sun 08 Mar 2026 05:33:08 +0000
Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: 5kvpM7qg6VgEj6AbaG5BAP1vvITiF79Vpa+DH2qzOK8=)
2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: 5gSCSjFQUqd+Yem2lvK3YYMNulDLaRkf2ZFE+aQiiYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl
rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
Validity
Not Before: Mar 1 05:33:08 2026 GMT
Not After : Mar 8 05:33:08 2026 GMT
Subject: CN=69a3cf94-c3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:c4:a3:e3:ae:3c:48:2a:b2:62:a2:d8:b6:
4a:4d:ee:2a:35:2e:44:a5:3e:b1:a1:8d:58:35:84:
af:44:77:46:47:f5:18:52:bc:d3:60:51:63:bf:05:
d4:d7:e4:37:15:dd:fb:d0:d2:9d:4e:db:c3:45:df:
9e:8e:98:b6:3f:4e:c8:d2:b0:3d:bb:e4:96:f2:d8:
a6:82:fd:80:bb:00:25:07:58:0c:d4:31:6b:31:30:
d9:d2:f6:dc:de:b8:9a:51:bf:e6:91:22:9d:66:7c:
1c:05:90:1b:a0:3d:8d:44:1d:38:9a:32:99:0a:b3:
0f:01:23:e0:d4:84:8a:be:f4:b6:c8:eb:38:8f:15:
66:e3:97:d0:f8:d9:9f:72:fb:0d:d6:a3:b7:a2:e7:
3c:03:db:80:78:f3:53:2e:26:4c:ef:d8:ed:95:f1:
64:ff:bb:d6:a0:81:4a:6e:08:73:01:2c:18:84:f0:
58:bb:af:f1:1f:7b:d7:b6:b0:0a:a7:c5:7b:ed:a4:
c8:42:14:f7:16:35:a5:d8:e3:39:d6:1f:57:5a:09:
d5:aa:0f:74:44:38:9c:df:9e:f8:38:11:03:23:e0:
fd:7f:b4:12:a3:e0:60:92:99:bf:7d:e9:14:22:19:
a2:71:e4:c9:b6:26:bc:6e:36:ad:c3:ee:63:25:af:
98:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:49:EB:DF:19:DD:FE:1C:90:2D:DC:C8:1C:26:14:35:2E:CA:07
X509v3 Authority Key Identifier:
keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f2:e6:28:58:01:f1:e7:d8:56:e0:d2:84:8d:c8:98:c6:22:
a4:fa:a5:41:48:da:c5:ee:1c:db:78:e4:ac:ff:4e:ff:56:8e:
4f:d9:d6:73:5f:7d:89:ed:34:a8:1f:15:85:86:8b:cd:69:fb:
dd:05:34:ec:7f:17:a8:01:b1:2f:b7:43:f9:14:80:c6:dd:24:
6c:0c:f7:ea:c6:e9:bf:04:e9:a3:e0:32:84:86:5a:60:25:ba:
fd:86:0d:ad:eb:9e:49:5e:24:47:ae:3c:de:df:c7:f8:83:f9:
32:fd:27:cd:dc:93:ef:f1:b4:d7:14:eb:2c:85:9c:af:c7:98:
2b:e6:7f:48:d4:a1:50:42:4d:eb:84:e7:70:43:53:81:3f:3e:
67:8b:39:2f:b9:d4:3e:0d:12:dc:92:86:9d:85:0c:93:72:ab:
67:96:82:30:0e:44:39:6b:ea:95:9b:a6:3f:cd:16:5f:ef:49:
34:d2:3b:f8:62:ff:91:a8:ea:8c:d3:bf:e2:e1:d8:cd:94:74:
30:a5:88:47:02:29:d0:c5:53:82:b7:ac:d1:51:27:0b:64:fe:
bc:ab:4b:24:97:2f:3d:5b:32:61:9d:7f:76:39:30:c6:09:3d:
ab:df:d8:7a:f6:02:1b:7d:5b:80:74:0f:f2:df:ae:6e:65:ca:
b3:5e:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:30 2026 by rpki-client