
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
File: n5SsB4YdiAvjQDGyhnkD51wyPEg.mft (raw, json)
Hash identifier: rQpvMIIE41QLK8IIf42JD+KitSaKdAIlQBS7A9DqMy8=
Subject key identifier: E0:5E:2A:6F:F8:ED:89:EC:0B:9B:45:9F:98:93:B4:EA:BB:94:CB:A5
Authority key identifier: 9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48
Certificate issuer: /CN=A9193A9E/serialNumber=9F94AC07861D880BE34031B2867903E75C323C48
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
Manifest number: 67
Signing time: Sun 01 Mar 2026 09:23:35 +0000
Manifest this update: Sun 01 Mar 2026 09:23:35 +0000
Manifest next update: Sun 08 Mar 2026 09:23:35 +0000
Files and hashes: 1: n5SsB4YdiAvjQDGyhnkD51wyPEg.crl (hash: BxZPKJ9x7phbCLrVMmBjrN5FnPIDWpGHMP+78XVI+Wo=)
2: F5E70A7083CD11F09D837187C4F9AE02.roa (hash: SsgKz8GVF6NpJUFqWjsihlWAwl+gG0/6vQ6HQQZARxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl
rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193A9E, serialNumber=9F94AC07861D880BE34031B2867903E75C323C48
Validity
Not Before: Mar 1 09:23:35 2026 GMT
Not After : Mar 8 09:23:35 2026 GMT
Subject: CN=69a40597-7098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2d:4f:e3:b5:7b:bc:ea:85:28:28:83:ed:14:
d0:f6:75:30:cc:a2:10:1f:46:e9:ce:66:22:35:ab:
50:3e:e6:d3:bb:1c:45:87:96:45:ff:d0:8b:8d:4e:
45:45:64:1c:80:ce:84:d5:8c:ca:e9:b2:6f:1d:4c:
b1:da:9c:97:a6:b2:b1:fa:70:2a:a3:af:e4:4f:42:
78:65:dc:d7:3f:2d:ea:a7:fd:3b:cc:4e:f0:74:d5:
cc:49:74:be:4d:ac:8f:74:22:43:57:b7:9f:b0:67:
33:a5:1f:7c:93:e4:e3:89:a0:9c:de:11:bd:3e:6c:
f0:3a:fd:67:54:9d:97:0c:b0:7d:38:4d:5c:3c:e4:
6d:59:9f:c0:f7:8b:be:77:69:6d:b5:38:6e:8c:90:
9d:f9:ad:aa:3f:4d:24:7f:9a:bc:f2:f4:ee:2b:63:
06:c4:2c:a9:e6:5d:e2:a3:ff:8d:ac:6d:30:8c:2b:
d1:bb:2f:ec:8c:66:3e:ab:0a:85:f3:23:2f:4d:ae:
08:89:ab:8d:02:ce:58:82:b3:94:7b:e6:a8:79:3a:
aa:01:76:ac:60:10:ec:ec:c0:d4:3b:2c:dc:9b:61:
eb:2f:97:46:79:6b:31:3c:02:88:31:d0:38:bf:1c:
ec:29:b2:69:a5:7c:70:a2:0f:e2:e4:04:4c:40:59:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5E:2A:6F:F8:ED:89:EC:0B:9B:45:9F:98:93:B4:EA:BB:94:CB:A5
X509v3 Authority Key Identifier:
keyid:9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:9f:46:1c:83:16:8e:f0:11:55:45:27:b1:0b:a3:40:99:3a:
3e:68:63:59:db:7b:e1:b2:b3:ef:9b:5e:31:ae:ea:5a:12:71:
bd:01:20:cc:bf:26:2b:6e:9e:06:85:32:c5:d5:f2:01:6d:f7:
98:a4:c0:e4:1e:89:1c:73:28:5a:5e:23:44:e9:39:05:dd:bb:
65:e6:fb:9c:37:a6:bd:3c:74:81:f8:aa:dc:60:71:5c:f7:a3:
90:4b:c0:fd:7a:dc:c6:7e:04:a5:fc:18:f7:6d:53:68:8d:c6:
ea:28:fb:45:a4:ec:a9:dc:e4:08:1a:8b:7d:b3:78:d1:e3:b3:
66:00:d4:96:2d:d1:03:8b:b8:e0:d3:fb:38:40:38:a0:52:1f:
f9:8c:ee:f3:c1:2c:f5:be:51:27:cf:7d:29:16:ce:f5:6d:b8:
19:1a:c8:43:7c:f6:bd:a9:fc:4e:a2:e3:6e:69:fc:50:81:24:
d8:09:f6:29:62:e7:c1:2d:25:5f:42:06:24:e1:32:b3:8e:56:
2b:af:37:17:4a:a9:0d:0d:fc:7f:c5:0f:04:89:a3:23:a1:ff:
ec:f4:bc:48:e4:dc:d9:d6:52:d4:5b:db:14:dc:cc:20:fb:dd:
59:53:ee:59:da:a1:4b:b2:a0:34:05:30:37:9e:22:fb:f2:11:
e0:2d:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:38 2026 by rpki-client