
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
File: v_236_RdfGG_nSOQip84wzKYWXA.mft (raw, json)
Hash identifier: zTMFpr9bVaMHniKMymCxXcSO+ZgFHledwvsYU3z2KDo=
Subject key identifier: 6B:8B:3B:90:A0:BE:CF:3F:1B:13:E6:26:8F:6A:6B:B4:94:69:B6:1F
Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Certificate serial: 19BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
Manifest number: 1995
Signing time: Fri 20 Mar 2026 16:16:50 +0000
Manifest this update: Fri 20 Mar 2026 16:16:50 +0000
Manifest next update: Fri 27 Mar 2026 16:16:50 +0000
Files and hashes: 1: v_236_RdfGG_nSOQip84wzKYWXA.crl (hash: ccIrHpBnoOCW65TKdfOIN+dTTxWPbnpPXMMrI4LqrH8=)
2: 2E511546D07111F09D273F2BC4F9AE02.roa (hash: Wwk5sFoo8EtALZuBsL2jKO3jVg0qUSIT3op+naAnvUI=)
3: 8732232CCBA011E887F87451C4F9AE02.roa (hash: Q+56tXbP6+JuBqyfpPN+56GfC2OpasUBmfr4FlcVBhM=)
4: 62B6389287C211EE949BAE7BC4F9AE02.roa (hash: HJzwhft6vbs2OJKi0WCfP6NPCON0xdwzurUugEyopeE=)
5: 1647AB229DF911F085AD790CC4F9AE02.roa (hash: UCsc4SzKXp7wzPGhzdY7JRvMDKVrlh7+bSK0nsp/FNA=)
6: 15B87C049DF911F085AD790CC4F9AE02.roa (hash: XomchpB2hRZ+hEaVuLCJFnVrCaHOTQW3NB9zmoA/hhw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 16:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6590 (0x19be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Validity
Not Before: Mar 20 16:16:50 2026 GMT
Not After : Mar 27 16:16:50 2026 GMT
Subject: CN=69bd72f2-cffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:af:66:80:08:ff:48:21:d9:5a:8f:54:5b:
ed:84:ec:1e:e9:13:96:d1:33:7c:57:2e:50:77:7b:
ea:31:ba:ee:ba:c5:1b:cb:80:fe:51:4f:b0:df:cf:
53:2e:0e:b0:15:a9:bf:e8:d0:a0:df:88:04:d6:64:
6a:df:8a:bc:a2:f4:5b:74:2b:22:70:c6:1d:c3:f6:
e5:84:27:3c:f3:e6:d2:71:45:aa:6c:1a:4a:79:d6:
49:24:e6:79:ae:69:77:38:bb:22:49:ee:62:a3:e6:
61:59:a6:8f:31:2f:56:6d:2e:6c:7f:1c:3f:7e:63:
cb:83:af:50:35:99:75:b8:38:88:a0:fe:47:b0:a2:
21:0e:63:99:21:59:e3:e6:70:40:5c:89:fc:9a:a6:
d7:bc:d7:1e:8d:a5:69:87:da:20:89:20:5a:58:63:
f9:88:51:1a:41:5d:0d:6e:43:be:74:0f:22:39:37:
ef:c2:69:33:e8:6d:9c:8b:b3:21:bb:6b:53:4f:a6:
f6:26:ab:e6:dc:f5:08:3d:75:f1:6e:f7:38:16:14:
ce:8d:5b:bd:d0:bd:be:0d:ff:35:ae:27:8c:4e:96:
5a:14:31:9a:69:a1:c1:f6:83:28:eb:f8:ab:50:c5:
64:f8:2c:b8:4f:f9:00:65:38:a6:8a:dd:26:16:40:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8B:3B:90:A0:BE:CF:3F:1B:13:E6:26:8F:6A:6B:B4:94:69:B6:1F
X509v3 Authority Key Identifier:
keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d9:bd:a8:c8:5f:71:11:93:a4:61:e7:57:05:43:76:25:88:
12:9c:2e:98:fd:10:94:f6:77:fc:45:54:7c:0d:cf:c0:7e:49:
fe:46:69:2b:e0:4e:79:5e:a2:4f:d6:23:1d:a1:d6:c8:98:23:
9a:98:8f:27:1a:c3:0f:4e:66:a3:3a:55:9f:06:56:5d:85:cc:
61:8a:7b:68:ee:17:b6:68:c3:d0:dc:53:38:b1:0f:f9:45:2e:
b2:ce:ae:af:a5:fc:10:7c:0c:c2:10:39:c7:0e:03:b4:12:ad:
ad:2b:c2:83:4d:97:19:b8:c8:c2:9e:90:97:c2:ba:45:10:0b:
ab:b9:67:f4:6a:e8:dd:c5:61:13:76:b8:7c:39:f2:e2:8e:ff:
de:8a:e8:98:7f:1e:85:01:b5:36:5e:9b:93:70:07:e8:36:1c:
5e:61:73:fb:a8:b4:b2:54:8b:ae:98:2d:bb:af:ab:ab:50:66:
3e:6c:3f:bb:2c:6e:eb:fa:42:e7:57:46:12:9d:61:3e:d2:33:
15:4f:a0:da:c6:84:28:b5:18:3f:7b:bd:37:c8:70:2f:0f:1d:
57:df:d4:dd:48:ed:b0:39:46:6b:d7:3a:c2:af:1d:d5:6d:24:
77:96:67:68:f9:e4:da:07:14:fc:f3:ff:d5:a7:c8:4d:69:2d:
64:4b:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 13:34:37 2026 by rpki-client