
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
File: MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json)
Hash identifier: 1h3x+sK4r0qXpkaXoyuMl/hSoJ+4j0WSyu0CnwtBkiY=
Subject key identifier: 1A:F7:38:93:3E:21:E0:46:E0:89:B9:CB:B1:30:AF:BD:EF:B6:A0:8C
Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
Certificate issuer: /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
Manifest number: 1F
Signing time: Sun 01 Mar 2026 10:20:32 +0000
Manifest this update: Sun 01 Mar 2026 10:20:31 +0000
Manifest next update: Sun 08 Mar 2026 10:20:31 +0000
Files and hashes: 1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: aIbL3Sbx/5ohADfO97YCwJ+/AtWlfJYK0chOs8JIGSw=)
2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: sYeLNL3T3Y0IoxBgp4l6jxzmh3sw3CZxXvB5Mj0h7DA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Validity
Not Before: Mar 1 10:20:31 2026 GMT
Not After : Mar 8 10:20:31 2026 GMT
Subject: CN=69a412f0-4dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:37:af:5f:91:55:3c:59:d5:1a:28:29:e2:
2b:65:9c:06:c7:c5:9e:52:df:0e:2c:44:e4:bb:0b:
1e:ab:23:70:62:c8:ac:e7:61:e0:31:ac:95:55:98:
af:8b:15:ea:62:6c:f6:76:6f:84:c4:ce:9b:df:a9:
22:62:a0:91:25:d6:70:97:e9:86:17:94:8d:67:a5:
bd:18:32:61:b7:2d:56:37:3a:9a:42:42:3f:be:12:
e4:b7:e4:37:af:5d:90:7c:dc:a8:86:0f:c0:c6:6b:
bd:03:c5:1f:f5:25:45:5c:bb:e5:7d:a5:9a:7f:d5:
39:20:72:7a:11:51:ff:43:df:f9:3f:13:58:ed:0e:
07:aa:5a:a3:42:2b:be:bf:45:28:24:ff:b1:85:33:
15:59:d4:92:16:5e:39:e9:79:67:53:42:9e:55:f7:
26:80:57:46:e1:6f:3a:02:98:d4:6b:23:66:19:4b:
d0:0d:97:57:fb:b9:8f:0e:ed:06:67:4d:97:e8:ce:
68:cc:3e:2f:a0:6e:5f:77:ce:af:1b:e8:79:45:81:
79:92:43:01:39:57:05:c1:7e:f3:e7:ea:9d:fc:d0:
17:e5:b4:9a:0f:8a:8c:12:b0:66:21:46:5a:0a:bc:
cc:ba:6a:08:18:9f:95:a6:24:0e:69:8a:87:82:e3:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:38:93:3E:21:E0:46:E0:89:B9:CB:B1:30:AF:BD:EF:B6:A0:8C
X509v3 Authority Key Identifier:
keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fc:d5:fd:08:5b:68:2d:55:f2:7e:01:3a:2a:df:eb:9c:d0:
08:7e:2b:8e:82:cb:e9:07:b6:0f:a0:cf:30:94:6f:dd:0b:18:
44:05:c8:5a:72:da:b0:e4:16:75:ef:be:d5:92:a7:1c:ad:6e:
16:31:2c:e9:6b:50:09:27:9e:59:ca:b9:1f:89:7d:07:d4:eb:
47:3d:9d:df:65:90:55:f9:07:e2:5b:68:4c:25:ed:fb:3f:77:
ab:51:51:a4:e4:18:69:32:e7:dc:f0:98:88:b3:48:e6:a0:51:
17:0e:68:78:7c:e9:21:d8:25:03:8d:01:68:f9:c6:f3:7f:65:
0f:6c:fd:21:62:bd:9a:68:f7:3e:22:47:3c:5a:3e:a1:6f:6d:
03:d2:b7:a9:18:56:31:89:ae:75:67:f2:8f:55:36:f9:7d:11:
18:d9:89:fd:72:5f:b1:b9:73:77:c4:1f:22:e0:1a:46:30:1c:
77:17:2e:c1:5c:fd:89:e2:57:0b:a5:da:1d:a0:da:02:40:dc:
26:a7:b3:8d:58:d5:59:1a:ba:12:74:77:a2:5f:56:47:75:bf:
0c:70:be:6b:cf:69:49:e8:f5:99:71:e2:99:16:c6:da:7f:e1:
89:11:a8:c2:21:4f:a6:87:f1:1d:55:97:0b:ad:3b:62:5b:c0:
be:a5:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:52:14 2026 by rpki-client