
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
File: 9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json)
Hash identifier: /CRXEsmN4OS6UIDXqW714dXe31OfqbK31gMj84miapE=
Subject key identifier: EF:98:F5:84:0F:15:96:E3:2B:AC:CD:F3:1B:24:08:9D:7E:79:7B:D0
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Certificate issuer: /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial: 0839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
Manifest number: 0818
Signing time: Wed 18 Mar 2026 20:57:13 +0000
Manifest this update: Wed 18 Mar 2026 20:57:12 +0000
Manifest next update: Wed 25 Mar 2026 20:57:12 +0000
Files and hashes: 1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: ozZfQpZhqMvTmr5sSRqbqTzi3ypNbxzr9AG7wphu0zg=)
2: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: s0JtQjaquy1haDTdVO3sJ1UiTrHlMay3DOPS02FW8WQ=)
3: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: Mq0l/N1vCUMtxfQV/uhAAkIAGBUYqoCXgKbxS8XYpMA=)
4: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: HkzCk2HljndiEq4GBL2zGsRRu25qjHkzwRnuz6BJbuM=)
5: 978FBCD82A0E11EB8CC1535DC4F9AE02.roa (hash: 1KjRG3v8pkaGSW0/hInFx/2rpIZZ7GFqFAtwvgwsN4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Mar 2026 20:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Validity
Not Before: Mar 18 20:57:12 2026 GMT
Not After : Mar 25 20:57:12 2026 GMT
Subject: CN=69bb11a8-64e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:7f:70:7d:1f:c4:a6:be:e0:e1:50:80:37:
a9:73:5b:8d:49:6f:26:f1:3f:7c:5b:69:65:02:84:
17:30:ef:eb:59:ac:42:bd:0e:a9:39:0a:66:4e:84:
c6:d4:02:55:41:09:f6:18:82:39:c6:c9:e9:e6:e3:
6a:ef:47:54:1c:ff:b3:f2:c9:0c:a8:cb:b7:99:ea:
fb:e2:dd:57:74:f2:8d:fc:40:2d:05:45:41:15:76:
9c:f0:4c:da:ef:43:11:f9:d7:3f:c6:8a:54:9f:66:
5d:b4:a4:1c:8c:f5:43:02:0f:a6:e8:6e:50:96:41:
16:25:6f:f7:47:e3:62:a5:79:c4:f2:91:ba:d7:b4:
50:3d:08:26:71:41:aa:7d:40:bc:ff:b8:45:53:e2:
68:6a:36:9f:76:49:f9:d0:1a:8f:35:9d:5f:b5:e6:
09:42:b6:18:38:8f:a4:80:36:2c:33:b2:a6:73:c3:
b8:98:e3:e1:ca:b1:1b:e5:9d:bf:e0:c7:b4:72:34:
3b:32:e6:fc:81:c2:98:8b:8b:82:e2:2e:c1:41:ff:
e2:c5:41:2f:0d:d7:41:3a:16:d5:55:da:f3:e1:b5:
57:47:52:56:bb:6e:d5:58:e8:01:ad:40:d4:e0:78:
7d:e8:85:c9:5b:14:64:4a:89:b1:3f:33:6a:08:6c:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:F5:84:0F:15:96:E3:2B:AC:CD:F3:1B:24:08:9D:7E:79:7B:D0
X509v3 Authority Key Identifier:
keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ba:f6:57:4e:73:74:69:e4:f3:c7:9e:83:a3:26:d6:80:5a:
b6:10:a8:dc:72:be:89:65:84:2a:65:91:a0:f9:f7:b0:9c:b1:
6f:93:62:30:36:b0:7a:78:7d:58:f6:6e:60:88:1e:5b:0d:aa:
e0:b8:76:97:7c:d2:28:41:12:32:42:84:f8:5b:0e:8f:6f:9c:
56:c8:5b:f4:85:e6:89:cd:81:fe:da:92:43:9a:58:0e:c5:54:
40:fb:c7:21:62:f2:b9:e5:88:cd:fb:f0:d9:c7:c9:53:2d:56:
01:40:75:b1:4a:e0:e7:20:cf:6e:46:45:5c:e4:62:82:6b:3b:
6b:62:66:fa:14:d7:a9:19:dd:1d:d0:03:02:d6:5d:13:f0:5d:
73:96:0f:1b:ba:b0:6b:95:b8:32:c3:99:55:bd:38:c5:9f:ad:
0d:99:6d:5a:f4:84:24:b3:b6:4e:ea:35:60:af:d7:7c:a6:27:
60:c5:8d:e3:8f:d7:21:df:cc:a8:4d:af:48:13:a1:34:8e:22:
e1:53:fe:6b:d4:a3:d6:16:18:d7:d6:a1:eb:9c:42:03:66:75:
e5:fa:a5:a1:b9:80:f9:48:1e:8d:44:e8:a9:79:86:fc:91:9a:
84:35:3f:1e:15:7e:0d:e9:86:0e:ea:d4:bb:f4:d1:78:aa:df:
4c:63:0b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 11:22:53 2026 by rpki-client