
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
File: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json)
Hash identifier: +4eWMQ9qA1130u90dVWrooWjWI4pjQ4ENwkqiqAJQnU=
Subject key identifier: 24:21:B6:3F:6B:FE:88:B8:7E:33:CF:BF:C1:84:2F:8B:80:90:A6:BF
Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Certificate serial: 0390
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
Manifest number: 0389
Signing time: Sat 07 Mar 2026 00:10:38 +0000
Manifest this update: Sat 07 Mar 2026 00:10:37 +0000
Manifest next update: Sat 14 Mar 2026 00:10:37 +0000
Files and hashes: 1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: ee0P9qUCat4wvJ81NTfTXs+hgysl9+Izw2aZyLpPRek=)
2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: BIuosdWuF+4ep+QMwFKZ6npqwjzH0+zcNnprYLZ5I98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 00:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Validity
Not Before: Mar 7 00:10:37 2026 GMT
Not After : Mar 14 00:10:37 2026 GMT
Subject: CN=69ab6cfd-d79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:03:5d:6e:c1:47:8e:90:0a:01:6e:a7:0d:
ba:04:b1:6d:07:55:19:5a:93:77:2a:cf:d7:95:b9:
2e:16:0e:6a:6e:00:99:c1:d7:bf:dc:b8:d8:3e:91:
91:c8:c2:ec:83:aa:93:d8:34:7e:b5:ab:cb:9d:2d:
4b:62:3a:ff:50:04:14:4b:1d:fc:c0:e7:88:50:8a:
f9:84:c2:cc:2e:7b:a5:70:b6:04:80:0d:a2:51:31:
cb:24:0e:f2:3a:27:c4:17:e1:c9:76:b1:9f:4e:28:
18:e6:5b:f2:ab:c0:45:0d:f8:ad:3d:eb:02:8b:7a:
5a:23:22:a2:61:d2:c1:7e:11:bb:69:97:b1:a7:1c:
34:b6:fd:b9:6d:b9:df:f7:0c:9c:41:0e:b0:e8:1f:
75:41:35:e2:02:19:3b:aa:0c:ee:e3:2f:5e:72:f0:
06:b7:bf:1b:b5:f6:12:f3:fe:5e:a8:f7:6a:f3:f6:
37:72:5b:db:f2:8e:28:f8:af:e9:6e:96:8f:64:86:
dc:92:62:60:a5:b0:6a:61:75:e5:12:97:0a:22:a4:
4c:d4:8a:2a:e3:e5:88:a7:b8:d2:60:f6:bd:a4:2e:
17:7b:10:7e:69:67:44:00:9a:c2:a8:f9:1d:b3:fc:
25:26:6e:8e:8e:cf:f9:ad:bf:bc:52:8e:53:47:5f:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:B6:3F:6B:FE:88:B8:7E:33:CF:BF:C1:84:2F:8B:80:90:A6:BF
X509v3 Authority Key Identifier:
keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8a:7a:0d:b1:89:1f:38:73:55:98:8c:5e:4d:9f:7f:c2:a6:
29:50:f2:06:96:22:f8:32:15:7c:4b:41:b0:d5:c8:12:2a:6e:
a6:8f:6d:45:4a:b6:35:de:97:ba:b1:dd:97:87:db:96:e1:64:
52:b3:05:9b:db:d2:02:76:75:87:4e:a5:ff:aa:7e:35:78:ef:
9a:ff:df:00:a6:5e:b3:f3:14:d3:26:40:0e:8f:03:35:40:2a:
3e:6f:a8:e2:09:de:5c:9d:35:2b:28:ca:1f:fe:86:9a:21:95:
10:fe:e4:ce:68:6e:b5:9d:48:46:19:49:0e:8a:0e:14:7a:a4:
29:15:d7:e2:37:c6:90:89:4f:41:bd:17:a4:52:4f:d6:a2:e3:
c6:05:f6:57:a1:3d:03:13:fe:de:49:d4:a6:98:b5:01:42:0e:
d7:72:24:7a:59:32:d1:2c:ad:48:44:a9:db:1d:80:54:fd:31:
a0:37:51:5b:cb:0e:a5:c7:1f:98:ce:21:c4:5b:07:75:b2:1d:
b3:a2:a2:7f:61:43:d0:fc:f7:d6:46:49:7d:62:7f:73:25:d8:
3b:44:3f:df:c8:23:c6:14:eb:35:f1:20:63:bd:83:c0:36:28:
41:7e:25:9e:21:6e:d0:8e:ff:a8:d4:03:dc:6a:3d:0b:c4:87:
5d:3c:05:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:38:15 2026 by rpki-client