
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
File: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft (raw, json)
Hash identifier: RBX2TGfyp+pxK6NFDPlMzI8+LrkNnuo7t86iLlTwdyo=
Subject key identifier: 99:85:CD:38:A2:41:17:AC:D7:6A:12:82:33:D4:FA:C7:5C:02:EC:31
Authority key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1
Certificate issuer: /CN=A91EA409/serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
Manifest number: F9
Signing time: Mon 02 Mar 2026 01:28:21 +0000
Manifest this update: Mon 02 Mar 2026 01:28:19 +0000
Manifest next update: Mon 09 Mar 2026 01:28:19 +0000
Files and hashes: 1: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl (hash: B5/lB812IvnYZbUBWOKzzaITdpZ1Boc+JF4H0kheZlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl
rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA409, serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1
Validity
Not Before: Mar 2 01:28:19 2026 GMT
Not After : Mar 9 01:28:19 2026 GMT
Subject: CN=69a4e7b4-868a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:da:37:2d:5c:ee:7b:ea:d4:32:0c:82:7a:
b4:d1:31:52:a7:7e:a9:f9:ae:9a:96:38:a1:fd:96:
46:67:c0:a3:60:67:6a:65:92:62:92:d7:83:7d:e8:
b7:c6:ed:51:7c:a1:79:8e:c0:a4:0b:09:2e:72:93:
05:85:08:53:45:7e:e7:e3:1e:c1:ee:ee:b6:c2:fa:
82:78:c9:10:47:c2:a1:6a:64:44:dc:a8:d5:61:ad:
49:b4:6f:d2:4e:36:1a:e5:27:08:3e:33:2a:70:b0:
0d:c1:b7:0d:5a:11:15:f7:ba:dc:08:17:0d:ff:7c:
da:56:bc:58:0d:60:34:42:02:e8:41:46:ba:5d:68:
3b:4e:bb:51:28:f2:d0:ff:22:e8:33:43:ad:95:c2:
48:0e:9e:1e:fb:9e:0c:31:03:a4:6d:b7:b1:ae:2c:
48:6a:66:0c:aa:1d:a2:12:a6:47:93:95:84:68:3c:
b4:d9:50:b3:ce:d5:19:4c:78:71:bb:a5:82:09:34:
72:a9:bb:46:20:5d:ea:db:9c:0a:24:84:68:4c:c5:
a3:67:aa:7c:64:03:69:dd:13:7d:3d:94:b3:6e:e1:
00:a6:eb:93:e8:27:64:cf:95:92:67:d2:d7:f2:62:
7b:d6:92:39:f2:22:a7:73:3f:56:b2:5b:6a:8b:94:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:CD:38:A2:41:17:AC:D7:6A:12:82:33:D4:FA:C7:5C:02:EC:31
X509v3 Authority Key Identifier:
keyid:37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:70:e1:12:18:a0:d4:b7:d1:71:c9:30:f0:06:f4:f5:42:6c:
bd:01:47:69:0e:89:ec:73:96:42:a8:da:47:5d:dd:41:38:bd:
f8:7e:bc:af:d1:50:a0:ed:88:35:5d:67:4a:dd:06:49:1c:e6:
7f:81:27:c6:b3:ca:f3:0e:aa:66:d4:04:a8:46:5d:07:39:04:
19:73:14:dd:6a:b4:ac:78:4f:83:2a:00:6f:0e:c2:09:53:1a:
f1:db:c6:56:56:bc:dd:01:bd:3d:68:ff:c4:46:bf:31:84:b9:
6d:12:9e:c3:6d:e7:70:b6:36:ec:72:1b:4c:a8:93:ed:bf:de:
ac:e9:e8:7a:47:ea:ea:f8:cd:a6:75:85:96:49:09:12:81:61:
98:fd:fd:78:28:e0:89:98:1f:21:c6:6e:31:76:cb:45:21:b2:
fe:7f:32:82:11:5f:b0:8d:9d:4f:0e:0c:43:dc:95:18:df:b5:
89:e9:82:ed:7a:26:31:46:18:1a:c4:97:b8:46:b3:9a:24:dd:
2d:2d:9e:b3:e6:7b:01:ae:13:b9:cf:cd:94:b6:32:a1:f1:4b:
a6:63:b5:89:92:c5:cd:53:25:c7:0b:b7:88:06:c9:90:1c:21:
02:2c:aa:f5:3f:a0:89:e1:84:9e:a7:ea:25:66:4d:18:7b:e3:
e3:aa:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:13 2026 by rpki-client