
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File: p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier: MPqExG4W38R0mBmn2s8KONadnc/jL+tnYCTN50wBfdk=
Subject key identifier: EC:53:AC:DA:EF:75:54:FE:E9:3E:67:73:B3:CB:80:CA:AF:ED:1B:96
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number: 0153
Signing time: Fri 13 Mar 2026 04:06:16 +0000
Manifest this update: Fri 13 Mar 2026 04:06:15 +0000
Manifest next update: Fri 20 Mar 2026 04:06:15 +0000
Files and hashes: 1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: WnfxBM7UiOomHass+h/gd8wLEMaHsvGp/oYWPpG1oC8=)
2: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QRkcZsDgIJjnFNUASfY5VIlKLs39JH6eip+JITXFwy0=)
3: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: B4ENBOCrcVu9vsQndhxBPW5NCETQQHs3UmACZhgsEgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Validity
Not Before: Mar 13 04:06:15 2026 GMT
Not After : Mar 20 04:06:15 2026 GMT
Subject: CN=69b38d38-75cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:79:5e:31:96:da:44:c0:07:c5:b1:71:ec:
26:38:6f:41:41:30:8f:fd:b3:34:60:63:f7:20:07:
06:c1:67:12:6b:db:fc:f1:52:67:ec:2e:6e:bf:87:
a4:f6:e8:85:2e:a7:4b:e9:0b:5c:83:da:9e:d6:85:
cf:8f:85:eb:6a:d8:fe:35:96:19:b5:55:e8:77:24:
70:d4:05:8e:79:e4:3b:40:20:ad:77:0d:87:b2:d8:
fe:52:6b:df:f7:9d:e8:b9:64:a9:8b:f2:d4:4d:fc:
1d:01:ac:09:ff:1a:af:fd:da:e3:69:04:19:e1:40:
3f:30:d4:d0:69:87:5f:7a:93:eb:d6:aa:9a:bf:43:
c6:c7:5c:44:58:52:4a:0d:df:f3:3a:02:da:a8:e2:
64:3e:48:78:db:2d:84:fa:fc:4c:65:ff:ed:24:bd:
2d:73:3b:7c:cd:07:c7:bf:02:9e:af:5b:f7:06:d9:
4a:7c:58:c4:00:a4:40:49:b1:48:c0:3e:7f:62:28:
c6:67:f1:0b:17:d8:6e:bc:99:e7:4a:37:b3:7c:a0:
2d:e9:a4:de:be:de:e4:fb:96:7a:ac:57:e1:93:7e:
b1:20:5e:e7:9c:bd:a6:1f:30:89:37:41:d9:8e:8d:
da:e5:ce:1b:fc:05:ac:81:f9:15:e2:98:3d:4b:f7:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:AC:DA:EF:75:54:FE:E9:3E:67:73:B3:CB:80:CA:AF:ED:1B:96
X509v3 Authority Key Identifier:
keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:82:b4:3f:be:83:c2:7a:b0:e9:11:c5:be:43:c8:4a:20:c8:
59:8b:e5:d1:87:56:f8:6a:dc:3e:02:9e:77:f5:b4:fd:50:12:
ef:ea:42:bd:57:d1:fb:26:de:7e:8b:07:5f:35:ad:21:68:be:
74:c6:b5:f0:49:7a:81:c0:6c:8b:99:f8:95:2c:64:e8:b2:2d:
16:40:63:30:d1:e7:9f:09:ad:65:80:45:0a:d7:83:a1:80:56:
3e:59:3b:ef:91:91:be:fe:f5:40:97:4e:2d:bb:3b:e0:0e:cc:
14:f6:9a:8e:0e:b0:6b:12:09:bb:07:8d:d0:5e:26:5e:07:51:
36:75:a8:32:fc:d1:25:f8:88:8d:ad:f5:b2:e5:c2:2e:5d:72:
43:18:2b:dc:16:81:a5:62:66:0d:b1:fe:95:90:1c:71:1e:d8:
b2:71:d7:0f:b7:68:50:99:fb:d2:0f:18:e0:98:d1:1c:ae:2e:
80:80:d5:e8:38:f1:85:85:11:72:10:e9:74:c4:1c:6a:1b:12:
f0:03:9a:85:54:6a:c4:92:41:06:09:1b:7b:a7:fd:51:b5:35:
4d:49:85:86:93:c5:90:d0:ac:f6:97:13:ad:70:f6:3c:18:8b:
2a:16:83:80:b0:a6:31:69:53:5d:11:52:2f:50:a4:78:f8:9b:
60:92:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:14 2026 by rpki-client