
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json)
Hash identifier: QAkPnntl8fPSTM7LergPWK2oifpsHmtbUoL7umo5FCw=
Subject key identifier: 16:F0:0E:46:92:1F:C3:1F:9D:C5:36:B3:31:5A:6C:58:35:59:7C:32
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
Manifest number: 01F7
Signing time: Fri 13 Mar 2026 02:22:49 +0000
Manifest this update: Fri 13 Mar 2026 02:22:49 +0000
Manifest next update: Fri 20 Mar 2026 02:22:49 +0000
Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: n7GWG5fmcLjMIQYbb5pgMfNdeKAAu4nQjjyyfu3vqUc=)
2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: lbzUGxCxVXNgaorxa3WAftNPLQlIRU8KXF9/ol/bmFU=)
3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: m2hk6wUAtlL5ptBXdwMclZPFoA2N1StKSEsLHKrorak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Validity
Not Before: Mar 13 02:22:49 2026 GMT
Not After : Mar 20 02:22:49 2026 GMT
Subject: CN=69b374f9-aa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:35:52:3d:0b:32:bc:13:46:39:95:3d:a3:d7:
1f:ee:28:47:2f:05:f3:6f:8e:18:05:cf:5b:38:35:
9e:48:13:a1:b9:50:e9:e2:86:c8:15:db:1e:70:30:
1e:72:63:3c:03:ac:7b:78:1f:33:19:17:ac:7f:1e:
52:79:01:bb:df:12:2c:d6:63:38:4c:70:45:9f:80:
8b:f9:47:b7:1f:bc:6d:d7:fb:fd:08:6a:ba:c1:07:
0a:46:af:13:70:2d:f8:8e:48:ae:3d:80:5c:c6:87:
f7:b2:40:ec:2c:ed:31:53:36:41:64:4f:73:b4:29:
3d:b5:bc:16:8e:80:e9:6d:87:a5:fe:b5:a0:1f:2c:
61:8a:b2:47:84:33:c0:23:7d:61:98:4a:bd:3a:81:
e5:68:c9:47:21:4b:b8:57:cb:f0:cf:c1:48:e8:58:
05:8e:26:04:07:16:99:a1:9c:0b:0c:e6:b8:e3:45:
24:9d:84:6b:b8:53:4e:66:ee:80:b3:bd:90:27:2f:
75:38:11:a3:79:c7:cf:90:92:f7:26:c0:40:09:47:
27:da:f1:87:c6:63:cc:e4:94:e9:c7:ed:f6:21:83:
64:05:9a:dd:e1:4d:0d:ea:b6:3d:d1:33:dd:bc:ab:
a5:e6:e5:ce:89:20:15:a6:0e:ea:ea:33:34:dd:81:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F0:0E:46:92:1F:C3:1F:9D:C5:36:B3:31:5A:6C:58:35:59:7C:32
X509v3 Authority Key Identifier:
keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5a:81:8b:48:f6:c8:f4:10:38:5d:b7:0b:44:f3:e5:a9:95:
55:22:0d:d4:92:fb:65:7c:39:4d:12:4b:bf:af:98:40:78:6f:
62:56:8f:53:03:6b:08:ae:78:d6:32:07:48:d1:93:ad:35:87:
2e:8f:33:66:11:8a:3e:8d:3c:df:57:0d:b2:06:36:77:83:da:
25:f6:dd:5a:4a:22:d2:ae:ce:87:68:ad:f5:65:26:f0:aa:3b:
17:83:86:5b:d3:12:46:d2:f6:df:73:76:41:5b:22:5d:f6:5e:
4f:e5:5b:ee:ce:1e:d7:9e:1c:90:ec:3f:ce:68:be:85:76:32:
30:df:83:8f:6d:98:96:a9:cc:bd:58:59:87:87:93:db:43:a1:
27:b3:79:be:d8:17:40:cd:0c:ed:65:aa:ec:33:68:49:77:85:
07:f7:d9:76:9e:96:72:3c:c4:e8:83:02:b5:c2:a2:9e:9e:5a:
b9:58:eb:46:96:1e:68:78:68:b3:5a:a7:fc:75:17:f2:a7:1a:
6b:99:d7:a4:b6:64:e9:a1:20:8d:b6:e9:12:e0:6f:64:33:dc:
32:f7:47:97:10:10:b0:ca:09:b3:f2:9a:b6:e4:5e:8b:2a:a6:
29:cd:ab:4d:c9:3d:55:5e:17:f2:a7:69:7a:5c:76:5a:1d:b1:
dc:82:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:50:01 2026 by rpki-client