
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json)
Hash identifier: s97HSKI3ut31m3oP+NLz7QSNPXBZTZ4gNiNxXvrbR9s=
Subject key identifier: F3:C1:C7:4B:ED:E7:A2:30:59:1A:68:85:1F:22:A7:F6:CC:4C:01:76
Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80
Certificate issuer: /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
Certificate serial: 35D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
Manifest number: 3585
Signing time: Thu 16 Apr 2026 14:41:22 +0000
Manifest this update: Thu 16 Apr 2026 14:41:21 +0000
Manifest next update: Thu 23 Apr 2026 14:41:21 +0000
Files and hashes: 1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: 4rv1Cnp5QIwDOFl1cKnV137/vJIHkchf4Ud6B/F8AHc=)
2: F8A618E05E3511F0ACCE4C26C4F9AE02.roa (hash: YNlGAXVG6Otxz1oTc91JGnEKWMVhDfGSlJsoaRX0wMo=)
3: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: mOn42WnRE+/Mos3ahI73htZV2BdO/yRo2Jrd4NQohQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl
rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13785 (0x35d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
Validity
Not Before: Apr 16 14:41:21 2026 GMT
Not After : Apr 23 14:41:21 2026 GMT
Subject: CN=69e0f512-8ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:ee:58:ee:6a:cd:25:62:44:88:44:fe:6f:
be:2b:0a:54:38:67:37:17:68:09:23:86:39:be:de:
91:ac:16:da:30:3a:1a:c6:b9:8d:fc:bc:00:03:a9:
2c:0b:40:0d:a2:7b:1a:42:ec:05:1d:33:dd:79:72:
5a:3f:ea:26:3b:c3:f5:89:0e:49:8f:2a:52:f7:e7:
33:99:61:50:d0:be:47:83:2c:d5:56:ff:db:19:cd:
a4:2f:ef:d2:90:f1:f6:74:0e:45:9f:ef:de:31:58:
9b:65:85:62:09:0a:90:7d:f3:ac:bb:80:79:c5:f4:
e0:dc:7a:08:e2:fc:2a:85:50:71:a3:f7:d4:e0:c0:
66:dd:98:6f:f6:ac:07:51:e6:0b:51:d0:5d:50:b1:
bd:6f:8c:37:d9:93:59:f9:18:33:19:62:04:11:80:
dd:1e:64:25:98:d1:e1:0a:e2:1f:2f:21:b4:f8:3f:
f7:77:53:fb:b2:dd:ba:e4:a4:c1:29:7f:c0:61:e8:
9e:e4:0d:21:d4:27:fe:31:5b:c1:8f:1b:6e:6c:49:
64:d9:4f:6e:01:c7:76:2b:0d:97:cb:e3:f5:3c:0c:
2e:9d:7b:34:95:72:b9:1b:7a:34:77:8f:d7:f3:73:
f4:6e:78:b4:93:1a:35:6f:44:87:2b:f0:e6:e5:d3:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C1:C7:4B:ED:E7:A2:30:59:1A:68:85:1F:22:A7:F6:CC:4C:01:76
X509v3 Authority Key Identifier:
keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:cb:d4:37:3d:89:1f:0c:7d:18:ae:e4:86:c3:11:66:44:3b:
91:1e:d1:9e:29:4d:8f:cd:39:28:8a:a3:96:89:bb:73:b4:46:
34:f6:02:3b:35:6e:b8:dc:a8:a1:76:86:2c:45:3b:f7:c4:1b:
cf:8a:ec:9f:40:79:24:a0:a8:e1:83:82:1d:f3:1d:e6:d1:49:
43:27:38:1e:76:2d:90:02:b3:05:ef:91:a2:26:00:3d:52:e9:
f3:57:62:ff:c1:48:0d:cc:07:cf:f1:9c:88:23:16:f6:50:60:
35:c3:0c:0b:9c:87:17:ec:40:83:e0:64:88:66:60:0f:e3:26:
ca:c6:75:04:a6:3f:fa:df:fc:10:3d:32:62:8c:32:1a:31:c5:
70:75:f6:8e:2a:16:e7:d6:a2:22:cd:67:68:0c:19:4c:40:0f:
15:fd:b4:1a:a2:a0:69:a1:53:ef:54:5e:56:32:cb:8a:04:15:
d7:60:12:06:79:b6:0a:bc:8a:be:af:65:97:3f:b3:18:4f:20:
76:06:07:74:7d:05:85:43:fc:f1:de:0a:5a:4e:2f:6f:54:23:
ca:94:c5:5a:38:58:3b:57:7c:65:19:10:4d:bc:62:52:f3:85:
9e:7e:2b:f7:01:4f:92:de:0e:17:30:d5:54:81:3c:ca:70:6c:
7f:ef:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:49 2026 by rpki-client