
$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json)
Hash identifier: D+VhHnYz9J0AAaYhQRtbZxUJwn/6GvBohKauLNq47zc=
Subject key identifier: DF:87:4F:47:2F:15:20:23:05:1A:F2:A8:F0:3F:6A:6A:66:A8:3D:B8
Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Certificate serial: 08E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
Manifest number: 08E3
Signing time: Sat 28 Feb 2026 20:40:49 +0000
Manifest this update: Sat 28 Feb 2026 20:40:48 +0000
Manifest next update: Sat 07 Mar 2026 20:40:48 +0000
Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: JkpxsAVA7AU7zkT+G6s+xXHOm2+843f78jgWYQAAdRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Validity
Not Before: Feb 28 20:40:48 2026 GMT
Not After : Mar 7 20:40:48 2026 GMT
Subject: CN=69a352d1-96a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4d:2e:7c:1a:30:04:f5:46:f1:25:af:0b:ea:
41:f7:e9:cf:ac:8b:6b:cb:ff:02:71:fd:f5:16:a9:
21:9a:67:9c:fc:be:82:0c:07:7d:c9:d6:6e:f1:76:
bc:0c:25:66:ae:77:a8:b4:2d:77:cc:92:f2:15:e7:
30:0b:4d:d4:ac:61:82:18:21:dc:94:0e:9d:1e:db:
b3:b7:0b:81:27:aa:15:c8:06:b7:eb:f3:bc:4a:fe:
4e:f4:7e:48:3e:fc:95:e6:0b:d6:3d:0a:f1:59:d5:
d3:06:be:72:53:a5:f0:76:51:83:d8:1f:7e:6a:bc:
d7:ce:b4:54:e0:36:ec:37:e4:c0:25:bc:b2:38:a5:
83:93:db:da:0a:b4:7e:7d:3d:90:34:ac:ed:6a:ae:
f4:ee:90:cf:09:3c:0f:cf:eb:fb:cd:76:13:cf:35:
73:b0:2c:a7:d7:d4:ad:42:17:77:7d:25:dc:8e:f6:
1a:5b:5e:d8:32:40:a1:29:9b:ba:49:29:0c:b8:07:
ab:b9:c7:7f:2c:1f:f1:1d:f8:ad:11:1c:9b:e3:95:
7a:46:cc:f4:08:72:38:f1:f4:d8:06:00:55:3f:28:
dc:d3:d1:f9:7b:68:4a:fc:4a:89:c0:ad:d6:1a:b1:
9c:49:89:ca:5a:63:2d:94:67:3f:e8:8e:c0:96:5e:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:4F:47:2F:15:20:23:05:1A:F2:A8:F0:3F:6A:6A:66:A8:3D:B8
X509v3 Authority Key Identifier:
keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e5:58:31:c8:3d:d0:8e:28:7d:ba:21:d7:50:a5:d1:8b:65:
98:bd:89:b1:41:4a:0f:b7:88:00:57:5d:f9:2d:27:ed:50:99:
ad:66:bf:28:fa:99:3a:65:7a:f8:1b:6d:fb:35:d3:63:49:0b:
6f:ff:09:4e:db:5b:e7:77:e2:30:b8:b8:d7:ae:a4:ad:07:c0:
61:6a:f5:7b:8d:90:7a:17:df:89:6f:81:a2:c6:4c:cf:07:cd:
8c:1f:40:ad:df:f0:df:bb:45:ac:9e:d0:7e:a5:e6:01:58:fb:
3b:94:22:34:3b:e7:a0:cc:36:08:a2:91:13:89:a8:b2:d0:94:
15:1a:1c:98:8b:a0:d8:26:b9:92:a1:c9:42:6a:b2:95:b3:cc:
51:db:78:c9:d5:e3:a4:4d:78:6e:47:82:6b:e7:84:d5:67:1f:
2d:0f:d0:0c:21:64:ea:99:06:b1:2a:1d:01:b5:41:b8:70:a0:
9f:42:9f:59:ba:26:18:37:80:d3:66:22:77:5c:1c:54:04:b2:
87:d7:e8:5b:a1:d4:c4:44:ed:94:d5:bb:cc:c5:e6:02:32:8a:
e6:06:87:24:5d:11:7e:e9:59:ac:24:5a:55:23:82:5c:fc:78:
7a:79:5e:4c:75:a2:a7:f2:18:29:5c:47:da:2c:58:5e:55:9a:
f1:2c:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:44 2026 by rpki-client