
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json)
Hash identifier: DG+DolpjPFNVObOj4o46x9SKUyuDukypI+Aw2F4qMOM=
Subject key identifier: 30:12:7F:90:9C:09:40:C1:C4:49:C9:70:4E:4B:89:AB:94:1D:80:EB
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial: 032D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
Manifest number: 031C
Signing time: Tue 03 Mar 2026 01:13:05 +0000
Manifest this update: Tue 03 Mar 2026 01:13:05 +0000
Manifest next update: Tue 10 Mar 2026 01:13:05 +0000
Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: EGZvPKP0Yg0eErK7DJfow4yrMz0aSByPMvoJE+E3BK0=)
2: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: ERom4Ei0HIGCTmZt1BesT0wAL5vdqp/U/eF25sHImyc=)
3: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (hash: pI7DQlML4G8nsrMbEd9F1IKO++WC4YpDB08JHhvsskQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 01:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Validity
Not Before: Mar 3 01:13:05 2026 GMT
Not After : Mar 10 01:13:05 2026 GMT
Subject: CN=69a635a1-aa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:31:c6:a3:6d:b1:67:19:01:70:47:0a:e5:
22:3f:82:31:e9:52:a1:3a:d8:7b:6d:05:a5:0f:6f:
43:83:0d:8b:53:f8:00:19:d7:72:c8:c9:3c:e4:e7:
25:9a:eb:34:09:5b:c6:8b:38:4a:e5:6b:0f:a0:17:
b0:89:e9:72:52:5c:6b:fe:99:e3:7d:47:07:9e:c5:
b9:72:a6:6f:3e:d5:89:c2:bc:7c:61:24:30:e5:b8:
2d:0a:30:0f:a9:6e:07:d5:c3:17:e5:bc:47:58:09:
a9:05:c3:2b:dd:7f:ec:98:2b:b3:ad:13:92:c0:86:
79:fc:2a:92:15:64:76:e2:63:15:cd:65:c2:33:4f:
f8:62:fc:91:7a:22:cd:60:47:94:fe:fe:77:96:74:
b6:ba:c8:7a:40:87:24:85:38:78:3b:0c:b3:ed:76:
f4:9b:9d:61:c4:a6:1d:85:a2:10:3b:06:0c:32:73:
8c:0e:a0:6b:06:e2:91:ac:dc:29:03:c5:44:30:c4:
58:50:7b:39:b8:6a:92:be:12:d9:ef:4f:87:8e:a5:
5f:3a:ed:0c:49:d0:5b:73:22:92:17:ae:dc:71:66:
82:b4:6f:3e:9f:59:25:29:eb:04:f8:a5:86:d7:85:
ac:52:cc:9c:d6:f5:79:d7:c9:ad:cf:e0:9b:9a:50:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:7F:90:9C:09:40:C1:C4:49:C9:70:4E:4B:89:AB:94:1D:80:EB
X509v3 Authority Key Identifier:
keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:73:9a:8c:75:5b:f0:4d:b5:57:0c:e7:4f:a2:07:ea:0f:17:
4f:dd:bf:21:f5:20:75:64:80:ca:e8:da:da:cf:75:17:ad:47:
68:e9:b7:03:48:b6:68:18:f5:70:d3:4f:db:fc:5d:ec:bf:c4:
64:25:16:de:e8:cd:66:fb:6f:7a:72:04:7b:cf:48:1b:b6:3c:
a3:9a:97:26:52:fb:ad:d8:7d:7e:bd:38:27:58:0d:a0:d7:fb:
74:22:00:e1:cc:62:ac:4f:2b:cf:3b:6f:e2:91:b3:fa:8a:2a:
f6:c9:43:70:65:89:6b:7e:3f:fc:95:fa:73:94:7d:10:b1:dd:
36:8b:60:2f:fe:30:c9:64:c4:fe:d2:b6:9e:1a:d7:99:b4:a1:
cf:b3:69:29:14:03:ed:7e:d5:9d:76:10:c1:bf:f6:f6:0e:2e:
05:ab:c3:8e:5b:5b:c0:e5:52:af:33:62:92:8a:0f:d9:78:7d:
5e:24:6e:62:81:f4:da:8c:37:ae:46:9b:db:d9:83:7e:df:71:
69:c4:41:ad:6d:a4:f2:b7:9a:01:20:0c:0b:ab:21:0e:2e:1d:
8c:55:4d:c7:c9:43:b1:6a:4e:db:0c:13:9e:86:32:15:67:d3:
27:72:fa:01:f2:fc:58:bc:34:09:fa:71:ef:2d:a7:58:f4:28:
c7:f6:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:56 2026 by rpki-client