
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File: RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier: B8QwK0P41aB1S5iLX0ugjAfLWIKs4qGMM6fKSbjeJjo=
Subject key identifier: ED:C5:D3:6E:33:C7:BE:BD:7F:4B:EC:11:DD:9C:D8:A6:C8:77:7F:1D
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer: /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number: 024B
Signing time: Mon 02 Mar 2026 00:13:56 +0000
Manifest this update: Mon 02 Mar 2026 00:13:55 +0000
Manifest next update: Mon 09 Mar 2026 00:13:55 +0000
Files and hashes: 1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: gskv3xv7O0Oi+su8dJscu6gY8PVphXft1HY8+aTPTH8=)
2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: evtrgH99xTRhsjxDYSVy8xCMMoeXXNDwtZDEk4wJBb0=)
3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: 8Xdi8ir9IzionCTHsxTwuX8olpBr+epxWoFk8JYRHpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Validity
Not Before: Mar 2 00:13:55 2026 GMT
Not After : Mar 9 00:13:55 2026 GMT
Subject: CN=69a4d644-2dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bc:e3:d1:ae:11:0c:1d:80:09:0b:49:c6:7c:
88:d7:9b:8f:80:f3:a8:8d:c0:e6:13:12:80:23:f9:
56:a4:11:dc:80:a1:97:c3:f6:c7:7e:72:72:df:6d:
c7:0b:ba:a4:a1:cc:9e:7c:9b:d8:28:11:31:ef:84:
3a:77:ab:00:05:fb:e7:81:a4:06:d6:c1:e5:08:30:
17:60:69:b9:0b:bd:1b:41:e4:38:21:85:e3:f3:ce:
07:4b:e0:2e:e0:52:fc:bd:4e:d1:75:f6:70:bb:db:
e7:ed:23:53:ac:ca:c2:3a:7f:73:01:3a:7b:8d:da:
63:18:26:a5:a9:d1:e9:5f:ce:8d:51:bc:16:e5:b4:
39:b1:d7:6f:bc:93:df:13:34:f5:4a:bf:cd:9a:88:
0b:60:2e:4f:5c:1d:d4:0a:d1:87:db:15:79:d0:4b:
5f:f5:86:1b:2e:0e:dc:bb:f8:47:f7:d6:af:92:02:
dd:f0:2e:03:45:3f:f6:eb:ac:bb:4f:1f:20:15:16:
06:a7:44:6c:92:5a:55:bc:76:9c:ba:5a:d5:51:a9:
4d:87:21:00:10:ce:d2:8d:dd:2b:46:88:97:c2:da:
55:41:87:8a:9f:23:56:b3:c4:ba:fb:65:24:f2:d3:
80:b6:0d:97:b2:2f:c0:53:8e:16:86:c1:3c:28:86:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:D3:6E:33:C7:BE:BD:7F:4B:EC:11:DD:9C:D8:A6:C8:77:7F:1D
X509v3 Authority Key Identifier:
keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:7d:aa:3b:7e:09:95:7e:ef:96:4c:cb:bf:b4:73:40:3e:bf:
fe:fb:36:28:7d:ca:1c:d0:8c:31:3f:25:e0:a4:9f:ee:ca:a1:
05:85:96:5a:c4:a0:91:ac:21:4a:4b:e6:1b:fb:dc:ce:62:6d:
31:fe:97:39:b4:48:7d:ae:8e:53:26:6d:5c:d5:1d:a5:79:d1:
3d:71:32:90:22:7d:9f:36:6c:67:ee:a4:2a:c7:1b:69:c1:7d:
80:82:b7:88:e1:07:5a:df:87:57:89:c8:ca:84:7e:9e:60:c0:
73:cf:9f:92:e0:97:88:f9:9a:71:eb:be:41:21:5d:ff:9e:7f:
d9:70:ea:1c:06:ca:6a:64:1a:de:6b:5f:5d:c0:6c:86:e2:b8:
c3:d5:c1:a8:05:6e:ca:61:38:eb:a6:98:b7:e4:c3:d9:02:eb:
aa:a5:b0:79:0a:e1:be:66:fa:2c:a2:a3:dd:53:cf:4c:9f:af:
16:b2:00:18:db:05:04:1e:3d:cf:11:82:8a:52:87:cf:87:fc:
06:c6:05:af:d5:38:8c:d3:f5:a6:e2:c8:73:04:e9:79:13:24:
5c:95:8c:e0:15:04:0c:27:5d:74:43:88:15:6c:a5:3b:e9:d8:
7c:af:14:a6:bb:59:d6:69:53:0a:dc:48:25:ec:4f:5e:f5:ec:
dd:5e:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:46 2026 by rpki-client