
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json)
Hash identifier: H16Rta/deGxxSr5jfGhkvmUEKO1ieOIrmOv3N7RBhV0=
Subject key identifier: AF:0F:61:C1:84:9D:19:1F:E4:22:04:79:7D:DF:4B:5E:60:D5:15:82
Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
Manifest number: B0
Signing time: Tue 03 Mar 2026 06:45:58 +0000
Manifest this update: Tue 03 Mar 2026 06:45:58 +0000
Manifest next update: Tue 10 Mar 2026 06:45:58 +0000
Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: 4qO+rTIDqBbthjofLbzZmVZoGbjGVZXfxTNddfr/CGI=)
2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: 09psz8wD6VQRY3lNubXSJ0qySYqq1I9NwqwomYkBSy8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Validity
Not Before: Mar 3 06:45:58 2026 GMT
Not After : Mar 10 06:45:58 2026 GMT
Subject: CN=69a683a6-fb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:d3:1e:e7:b2:86:1d:0f:6d:c8:59:fa:5d:
f5:ee:29:4d:9d:44:b8:04:47:e1:ed:94:6e:37:53:
17:63:ab:b6:30:15:1d:da:a6:60:e5:8d:51:de:f3:
64:a8:63:d6:39:5a:8c:aa:7a:15:80:7d:f1:40:a6:
16:6c:e7:c3:a6:cf:50:09:6e:2f:94:ac:d0:d5:5e:
dd:59:00:4c:e1:28:a7:f6:9f:f9:2f:de:c4:06:47:
e2:9d:e2:59:1f:22:ff:f3:53:fd:67:b8:2d:a0:b8:
9d:61:11:22:63:0c:16:dc:9d:ad:e4:20:8b:cf:6e:
11:ed:25:de:97:8f:93:bd:65:37:d5:5d:60:7f:d3:
7f:51:ac:25:36:dc:d1:e8:7f:5b:19:da:f4:7b:0e:
09:bc:37:3e:19:85:6d:8d:a6:16:39:b5:94:3a:3f:
c3:44:10:c0:49:ad:d8:77:23:f7:e9:97:f1:31:0c:
8e:3f:14:9c:82:4e:8b:f4:8e:66:06:d4:06:df:88:
ac:2e:4e:ad:a5:73:53:83:68:eb:43:43:7b:39:86:
fc:36:a5:53:31:98:0b:48:d8:b5:83:db:d0:bc:2f:
57:4b:57:ea:34:27:27:2b:e6:88:5c:51:27:95:e1:
7f:fb:3d:7a:75:69:56:47:2d:1d:14:c2:81:34:6a:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:61:C1:84:9D:19:1F:E4:22:04:79:7D:DF:4B:5E:60:D5:15:82
X509v3 Authority Key Identifier:
keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9f:bd:86:b7:63:51:ba:39:ac:90:a7:8c:2f:8f:7d:60:79:
91:82:18:58:3e:5a:bb:46:a2:af:d0:11:b3:fc:91:e7:ce:3d:
03:a6:9c:f5:93:be:51:6a:15:ae:5b:8d:35:8d:09:6e:b6:f7:
6a:2a:3b:10:e5:e8:27:91:f9:9f:f7:93:73:5f:75:a5:a0:65:
5f:bb:ae:0c:4c:ab:81:00:c7:81:4c:57:ed:5b:f4:91:5d:af:
10:d2:0d:91:e0:9d:49:d9:21:d4:08:53:16:da:f8:23:16:17:
89:d6:8d:43:24:fc:1b:18:8c:16:5e:ee:15:dd:05:82:3e:f5:
1a:50:4e:8f:2a:94:10:26:f5:8b:37:4a:ea:1d:7e:79:f2:5c:
c3:32:bd:88:a2:f4:db:7b:a5:e1:38:b4:a3:ae:62:4d:70:f3:
7f:df:1a:92:18:96:24:a9:a9:e0:26:0b:8c:74:ab:42:cc:a3:
6d:4b:48:4c:1d:bd:3a:2b:fe:c6:f8:b0:4f:6c:71:83:99:7d:
5b:9c:89:bf:e1:37:2b:cf:4b:b8:71:91:29:72:cd:e9:08:68:
60:72:1e:0e:31:54:a0:c5:b0:ae:01:c3:80:84:ee:72:ce:88:
1e:44:52:40:48:81:2f:c7:2c:0d:d6:fd:d9:47:44:cd:11:ac:
9c:51:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:10 2026 by rpki-client