
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
File: pp7mLFrogRdKQhI3WepCPWH3NCM.mft (raw, json)
Hash identifier: XS4ANv3LYN92nx+yTh/Vh4s8uItcfQYGyJ5PIc7Ygzo=
Subject key identifier: 90:D7:B8:55:E3:27:98:5A:15:F1:15:02:E6:80:98:BA:A9:8B:CF:A6
Authority key identifier: A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23
Certificate issuer: /CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
Manifest number: 0125
Signing time: Thu 19 Mar 2026 04:43:59 +0000
Manifest this update: Thu 19 Mar 2026 04:43:59 +0000
Manifest next update: Thu 26 Mar 2026 04:43:59 +0000
Files and hashes: 1: pp7mLFrogRdKQhI3WepCPWH3NCM.crl (hash: fjzprPAkZVpWv9SWDeN++ptdZYH7lnhy/9xx9XVQ1W0=)
2: A1418C5E68C411EF841B7987C4F9AE02.roa (hash: n0CCMGeumZCWwdmJVTlhf90Hp7n5mmj7hMl5rFGb2ZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl
rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 04:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F12, serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
Validity
Not Before: Mar 19 04:43:59 2026 GMT
Not After : Mar 26 04:43:59 2026 GMT
Subject: CN=69bb7f0f-06d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:d2:fa:47:8e:ec:92:96:2a:78:60:7d:41:
6e:f1:29:f5:ce:e4:c7:44:e1:61:16:55:38:22:95:
4f:2d:c6:07:ca:00:c5:0b:5f:d9:10:2a:d4:ad:68:
af:8c:6a:6c:7d:fb:26:09:2f:a5:a4:21:3c:bd:de:
ae:b9:ed:ce:be:ac:d8:1a:c7:53:44:0d:4a:42:b1:
eb:62:84:93:8f:06:74:7d:7f:35:ca:d7:ab:54:4b:
21:81:2d:a3:3f:f8:1a:2b:0b:8e:84:8d:e6:4e:a7:
05:f9:2c:f9:10:c6:9e:95:82:6c:78:49:73:62:56:
a2:b8:df:41:69:77:ef:32:9b:64:eb:02:84:f1:32:
14:08:89:a7:fc:0f:c1:ce:a6:8d:e3:8f:de:0d:d9:
dc:50:10:d1:85:23:d1:90:f1:4b:58:48:b3:4c:a9:
64:65:6f:17:a3:5a:79:7f:b7:99:cf:53:60:b5:20:
e8:62:c8:3d:a4:0c:9c:14:e2:3f:13:ad:47:d6:89:
40:d1:de:c7:86:80:92:b8:a9:b0:91:27:f6:f2:17:
ea:fd:26:8b:25:29:e8:1b:4e:88:49:4c:fb:c6:4a:
84:27:43:8f:c3:8d:ea:af:1a:0e:9c:7b:d9:b5:7a:
a4:2c:af:7a:8a:24:e6:19:cd:3c:68:4c:d6:f3:22:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D7:B8:55:E3:27:98:5A:15:F1:15:02:E6:80:98:BA:A9:8B:CF:A6
X509v3 Authority Key Identifier:
keyid:A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:39:58:fa:f8:5d:48:a4:02:cc:ea:ca:b2:15:9f:73:c3:a6:
4e:57:dc:9d:0e:be:85:ba:28:97:c2:95:e9:81:5a:4e:fc:8c:
8a:54:03:eb:30:b6:95:49:66:2a:55:e1:75:4d:2c:3b:bb:75:
aa:4f:90:8c:5b:08:1f:a2:e4:a3:28:5e:6e:66:75:2e:5b:0c:
eb:29:19:15:10:c1:8f:47:5a:54:9d:21:14:91:53:14:c9:c8:
59:9e:4d:6f:ea:bf:df:54:66:54:a4:bb:57:5c:31:94:d7:31:
07:76:45:c7:b0:bf:1f:fb:ce:9b:d3:93:93:8d:ab:4d:3c:d8:
2a:d1:eb:d7:83:dc:1f:7b:14:72:fa:40:3c:be:e8:c7:46:88:
9e:b1:2a:a3:f3:10:b2:ed:51:38:1c:e3:2f:bc:26:2b:26:cd:
de:1f:d1:d1:d4:d8:a2:18:8e:c7:e4:a3:15:be:6f:bf:95:3e:
7e:ad:e3:69:ca:e3:c9:7f:92:1c:b0:3d:4c:35:f8:87:ba:14:
78:0c:0b:ff:66:92:3d:b3:78:27:b4:e3:42:a3:b0:97:c0:3a:
62:18:61:1a:f4:73:42:23:c3:47:f7:cd:17:1a:e6:69:cb:e9:
28:3c:48:d4:67:da:c3:5b:bc:dd:90:ef:a0:98:cc:14:99:86:
87:4f:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:59:52 2026 by rpki-client