
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json)
Hash identifier: YJIIX+uZc+yk5I/HJQmo6CMLpOB0QsWQOe3yd+6GmIE=
Subject key identifier: 13:BE:93:93:FD:26:BD:BD:9D:B3:2C:3E:88:79:5F:14:1A:38:02:D7
Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44
Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
Manifest number: 028B
Signing time: Wed 25 Mar 2026 01:11:02 +0000
Manifest this update: Wed 25 Mar 2026 01:11:02 +0000
Manifest next update: Wed 01 Apr 2026 01:11:02 +0000
Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: JRYUKIFoPrHosqypN1fRgyHtVo5zbJrv1p9zJhBpBOU=)
2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 07Vvv9BLMYQgb5Np9HOURXIhU/+tIYEclR6BOQmk2Q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl
rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544
Validity
Not Before: Mar 25 01:11:02 2026 GMT
Not After : Apr 1 01:11:02 2026 GMT
Subject: CN=69c33626-d2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:fc:92:91:d4:2e:6d:cf:ed:99:2a:3c:a9:
29:74:0a:0e:8b:9a:a2:6f:5f:52:a0:c5:4d:7a:a6:
0a:5a:3e:ca:03:42:e2:c1:64:01:3d:7e:e9:e8:c5:
3a:98:69:e1:65:26:fc:b8:50:bd:2d:eb:aa:3e:59:
f7:a0:b2:e2:9d:77:f5:0c:02:de:9d:d0:99:48:fb:
dc:af:28:2e:be:86:1a:06:eb:4e:ea:c1:08:59:0c:
e0:11:15:35:1e:01:72:24:c7:c5:76:7c:08:01:ba:
f0:d6:c4:a8:67:b9:af:2b:2a:23:a5:03:00:46:48:
49:9d:95:0d:b0:2a:35:86:1f:00:2c:4a:b2:5e:14:
15:35:d9:52:f2:76:1e:8d:23:05:b0:7c:01:63:18:
04:fc:5e:21:35:19:31:fb:77:24:29:b7:da:2c:5a:
14:20:5a:e7:89:18:68:23:08:9e:8d:fb:5c:d2:89:
a3:fa:d1:40:39:8c:54:71:45:3f:c9:f1:23:4f:02:
32:83:5e:cf:5c:b6:eb:64:ce:c5:93:53:c5:74:a2:
15:75:82:ee:e2:8f:d1:4f:ea:9d:b2:a8:58:71:fe:
aa:d5:1d:89:be:b9:37:7b:c4:df:c1:e8:2c:9d:d1:
a5:50:a6:3b:b7:e7:78:41:ad:bd:27:f4:78:20:80:
04:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:93:93:FD:26:BD:BD:9D:B3:2C:3E:88:79:5F:14:1A:38:02:D7
X509v3 Authority Key Identifier:
keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:68:d6:3c:76:1c:a6:f2:66:28:fa:02:32:de:d3:ad:b5:bf:
42:51:df:41:d2:ec:22:f1:dd:2d:dc:da:e8:11:03:45:17:6d:
61:76:2a:4c:af:7d:6f:e7:68:7f:cc:89:5e:0d:6c:f6:c2:f5:
0e:f2:2e:43:4f:54:5d:df:f6:00:c3:70:e7:03:54:61:14:dd:
74:12:aa:a8:35:0b:78:b5:d5:ca:dd:c3:d9:75:d9:48:23:57:
28:4f:da:da:fa:58:85:ee:b0:c3:7c:c5:e8:f0:e5:f8:5c:73:
9a:f3:2d:5b:d2:55:bc:98:04:ff:c9:51:c0:f4:d2:3b:4a:5c:
0d:4f:6b:ff:d3:ce:8a:64:7b:4c:f8:1c:18:62:d3:ec:ae:f9:
1a:af:bd:17:4d:b1:5f:65:6e:d3:7e:26:c1:60:68:a5:78:81:
7c:64:ce:c3:3d:f4:ed:8f:57:a3:e8:43:6b:27:2c:9e:d6:0c:
da:1a:58:7a:8e:04:b6:ad:3e:ce:f5:41:19:6f:1c:1e:06:ea:
b3:14:f1:d9:60:f5:42:ee:89:ac:d5:ad:fd:ac:4d:20:e8:77:
2e:cc:9c:0d:11:ef:62:a5:fe:d2:33:4b:45:6b:77:7b:ab:a0:
7a:12:13:b3:05:51:d4:a9:d8:bc:f0:c8:9f:65:38:71:55:17:
59:cb:17:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:49:52 2026 by rpki-client