
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json)
Hash identifier: 6bXCU2ukgNr/3YqG/+QPqHzYiEQD+1Ym2okPKC8VRGY=
Subject key identifier: 29:A9:47:F7:3E:9E:7D:42:CC:F6:9B:EE:58:B0:77:F0:5A:5D:B2:A2
Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Certificate serial: 051A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
Manifest number: 0511
Signing time: Sun 01 Mar 2026 23:07:51 +0000
Manifest this update: Sun 01 Mar 2026 23:07:51 +0000
Manifest next update: Sun 08 Mar 2026 23:07:51 +0000
Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: /eYaEKs4nBp7aUCAITvE9jEUy/TZ04dVfsDjaps+ufk=)
2: CF272560413111ECB71E086AC4F9AE02.roa (hash: B85i9GlcOeiOoR1hQF1a7WIZsOujBEcuH+d9GBIiQdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Validity
Not Before: Mar 1 23:07:51 2026 GMT
Not After : Mar 8 23:07:51 2026 GMT
Subject: CN=69a4c6c7-ebc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:8e:8a:b5:27:28:e4:59:5b:ce:bd:4a:59:
2c:66:62:7c:7c:d3:f3:8a:2c:18:74:8a:0c:82:b5:
9a:c8:a8:85:74:f9:81:70:df:71:72:a4:3f:fd:27:
cb:2a:08:05:a7:b2:20:0a:b5:2c:b3:de:09:4c:55:
9d:6e:aa:e0:6e:3a:b0:d9:d4:e6:1b:db:d1:6c:4a:
cb:03:87:22:2d:fa:9d:04:0b:8c:78:e7:b0:fa:94:
76:8a:39:8e:63:48:d8:c3:04:82:5a:f3:ee:0a:39:
2d:e4:86:37:a4:c0:b3:a6:62:62:f9:e9:d0:cc:de:
4e:ad:e5:61:8b:e3:b6:e0:c6:cb:19:b1:09:14:5c:
40:e8:7f:a0:c6:bd:30:2f:15:d7:2a:96:69:6b:b9:
73:73:5e:9c:4e:e6:3f:7f:c6:8c:6b:25:78:c8:aa:
65:b5:af:11:95:df:af:97:3a:eb:42:7b:5b:0a:34:
fb:33:2c:f9:ff:41:df:e2:8d:63:e4:2e:c5:6e:6d:
a4:b7:37:5c:9e:1e:63:eb:07:29:c7:20:2f:69:c9:
ca:98:9c:73:ad:dd:2a:2e:1b:7c:09:62:dc:49:0c:
6e:a3:76:65:fc:0a:6b:60:67:f4:f8:e1:a9:7b:f6:
a0:18:c0:b3:be:ae:0a:47:d0:1d:a0:25:de:e4:54:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A9:47:F7:3E:9E:7D:42:CC:F6:9B:EE:58:B0:77:F0:5A:5D:B2:A2
X509v3 Authority Key Identifier:
keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bf:d4:00:9a:35:ff:71:ed:8b:d0:ee:f2:3f:2b:d1:e7:c3:
f7:5a:44:36:87:59:40:47:3c:38:ef:c7:41:8e:0c:49:6a:26:
ab:45:dc:5b:fd:f7:7f:c6:b9:bf:1b:15:30:a0:c4:14:5f:d7:
65:0a:e1:4a:2f:9c:3c:4b:7d:d0:28:af:0d:c1:62:09:1f:c4:
a0:34:e7:bd:31:66:27:4a:9c:c0:12:86:08:f8:bc:c6:f4:47:
d1:9f:77:66:2f:97:84:31:24:30:51:04:d2:50:08:a1:6b:bb:
98:92:3f:4e:6c:7b:cf:75:53:f6:96:82:8c:39:71:f9:38:7d:
86:6e:89:44:05:06:c8:6a:c2:d0:50:04:d8:80:9c:a8:e0:79:
13:d9:8c:89:bd:16:f7:36:1f:78:07:40:42:9f:03:98:7f:19:
ea:0b:25:fb:6c:bc:c8:ad:c4:3c:67:e9:9b:80:cb:c0:50:3f:
2a:25:78:03:8c:1d:9a:fe:94:78:65:92:02:6e:be:e7:74:e8:
da:00:cc:8c:87:7c:58:0d:fe:d0:ae:e4:7b:1a:6f:aa:95:67:
cf:79:1a:37:3f:63:dd:1e:9e:7f:c7:78:3f:49:b5:34:35:0e:
c1:1e:d8:30:0b:84:18:ae:32:ee:b8:64:07:20:8c:fa:d8:9e:
31:47:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:09 2026 by rpki-client