
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
File: Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json)
Hash identifier: eQqrynE9wCs5B5bndHv6CzyHaPb5th3ikWWz7cbSt9o=
Subject key identifier: 0D:44:F7:33:43:63:33:E8:63:24:CF:39:1F:00:A5:D9:A2:D4:1E:3F
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial: 06B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
Manifest number: 068A
Signing time: Tue 10 Mar 2026 22:03:51 +0000
Manifest this update: Tue 10 Mar 2026 22:03:50 +0000
Manifest next update: Tue 17 Mar 2026 22:03:50 +0000
Files and hashes: 1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: ARaEJWmNtcHSvIhSFwo0IKClPAxwJuzNLkfd3TlgSZM=)
2: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: ra5Gb6PZs/OzsXnjVHyYomyoOxgiF9l7qD/G8v55rJE=)
3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: mvXSigs+CYMUI0qIQU184GsMAO7ebIzgG1gltQZTv74=)
4: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: VZngPQoD9ajhao0l3dsJoThd/544+8t+izMD2tZRtf8=)
5: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: vyexen/B6X3I+xJz9MgxPPblLPV4i6C5p1fUdXNRjq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 22:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715 (0x6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Validity
Not Before: Mar 10 22:03:50 2026 GMT
Not After : Mar 17 22:03:50 2026 GMT
Subject: CN=69b09547-db8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:70:6e:d8:89:da:62:f9:2d:6f:d6:34:d5:
c0:41:1e:35:2d:14:76:fd:5b:39:4f:85:dc:44:04:
28:a5:6f:c1:ea:8c:90:26:ac:8c:b7:1f:ed:d4:b6:
e6:15:f8:e4:d6:64:88:96:6e:92:b3:64:e4:96:0a:
06:d9:42:42:06:40:80:a7:07:0f:6c:86:2e:f3:76:
58:72:7c:e1:6a:1d:d8:fc:b1:e7:02:5b:ab:06:05:
bb:2a:fe:fd:c7:3e:5b:ad:43:aa:88:6a:0c:d2:6e:
39:e8:7c:fe:bd:3a:98:93:85:b8:9d:a7:43:8b:77:
ff:ff:3b:b3:7d:ee:80:d6:71:ef:6d:55:34:c4:a2:
a6:15:2f:92:de:b6:dc:a8:09:e0:52:3b:6f:a9:61:
9d:42:3c:97:96:c0:b9:ed:97:fa:4f:e4:17:cc:e8:
5c:bc:9b:6a:a2:9c:d5:b6:9f:8a:77:78:dd:32:61:
2f:f2:a7:73:83:0e:58:1a:7c:33:ba:a0:ac:49:a1:
be:72:a4:79:75:de:2f:71:4e:dc:3a:cd:da:6d:8e:
5d:37:a7:d8:da:9f:db:7f:0d:39:39:b7:98:c5:7f:
0c:af:01:04:8c:03:c6:87:c2:1a:6b:5b:19:20:68:
fb:fd:59:4e:c1:7f:8b:d0:99:74:56:5c:e0:40:57:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:44:F7:33:43:63:33:E8:63:24:CF:39:1F:00:A5:D9:A2:D4:1E:3F
X509v3 Authority Key Identifier:
keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:8e:56:fa:66:8f:56:7f:53:84:99:29:fb:17:5d:4d:d3:68:
a3:67:0b:53:9d:e2:2a:a6:32:3e:02:f1:60:08:50:c0:e3:3f:
25:6c:5f:10:9a:37:f7:3d:a9:c7:a3:48:3d:6d:2a:1c:4f:ac:
87:15:bf:84:c4:31:6e:8a:d3:82:5f:c6:8f:b2:4f:d1:f9:0a:
58:dc:fe:58:8a:5d:14:1c:a0:1e:94:8d:3e:d6:1b:6c:47:f3:
ca:9c:b7:b4:f7:57:ce:0c:b5:1d:0b:35:f8:b8:04:5e:16:24:
5d:01:05:ea:f9:8c:d1:c7:e9:76:f7:0f:cb:ee:b6:e8:13:f4:
5c:e9:69:5a:0d:39:0b:95:4d:8a:94:90:50:fc:92:1f:b9:40:
a4:2a:ff:3f:10:3d:d8:c7:3e:76:86:f2:eb:75:41:63:21:64:
90:0a:0a:3d:b5:a7:f6:e0:40:7b:06:32:8f:27:0f:95:9f:ff:
2c:68:62:0d:f1:78:ea:36:2f:99:91:7f:0e:e9:4a:c2:9d:ed:
5e:d9:2f:b8:61:02:19:44:bc:fb:aa:8d:17:ab:f0:97:28:87:
be:f9:40:6a:e0:90:73:67:9a:07:5c:07:8f:bd:82:71:42:a0:
8c:46:31:61:09:25:aa:a8:f1:f0:33:20:bb:10:55:6c:63:97:
66:fe:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:30:44 2026 by rpki-client