
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json)
Hash identifier: DAggljPHC66ffhQ2Y6gONq1qM3Qqqwm4HRvDrvG8YgU=
Subject key identifier: BE:DF:1F:E7:5C:26:A1:7C:7A:AB:74:4C:64:F9:E3:86:46:49:D8:25
Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49
Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
Certificate serial: 0CF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
Manifest number: 0CEB
Signing time: Sat 04 Apr 2026 18:06:43 +0000
Manifest this update: Sat 04 Apr 2026 18:06:43 +0000
Manifest next update: Sat 11 Apr 2026 18:06:43 +0000
Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: rj/m8hIEy1ick7TVdB0zq1p1BSm49vbzvWjYr7pWbGU=)
2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: 3NtaFMmRSGiQ779f2aTB3zcvMfuQOTWoqKAG2Y4TQQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl
rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
Validity
Not Before: Apr 4 18:06:43 2026 GMT
Not After : Apr 11 18:06:43 2026 GMT
Subject: CN=69d15333-473a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:90:30:68:1d:a3:df:d4:78:cc:5f:52:23:
1a:de:dc:e8:c1:ff:86:6a:8f:ae:00:ca:3c:a7:e8:
2b:7e:98:0f:53:92:eb:66:b0:5c:b0:5c:2e:45:27:
98:10:08:25:fa:2c:92:b1:f7:df:f5:c9:4b:42:dd:
db:3d:e4:2e:3a:a7:cd:48:a5:cb:97:64:91:cd:38:
73:bc:37:96:3d:ef:46:04:96:23:b5:39:e3:b2:36:
70:f2:97:ea:00:41:10:22:01:0b:90:c5:49:bd:ea:
91:ef:9e:5d:66:84:13:92:fe:dc:92:55:be:d1:7f:
29:ba:2a:cc:e9:60:26:8f:d1:93:c5:86:27:2a:7c:
5d:fb:53:bc:dc:a3:2d:ef:71:57:f8:25:8e:10:f3:
9d:df:8d:52:f1:3c:6d:92:1e:f0:0c:6b:ef:94:66:
c1:8d:bd:6c:05:24:b3:b4:ce:da:27:80:52:5f:54:
18:65:93:29:49:8c:a3:b8:0b:6a:dc:22:16:dc:36:
ec:e8:4b:44:3c:7c:57:e7:80:e6:6e:a9:3e:05:ab:
dd:45:f1:c8:52:c1:51:6c:61:bc:7c:6d:9f:19:d5:
76:7e:f6:ed:ad:ed:12:1c:15:e5:f3:b4:d9:4b:ba:
4a:7d:3c:7e:fb:15:12:a9:43:c5:d9:68:df:e3:59:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DF:1F:E7:5C:26:A1:7C:7A:AB:74:4C:64:F9:E3:86:46:49:D8:25
X509v3 Authority Key Identifier:
keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:80:b0:ad:70:d8:72:20:33:ba:7d:86:f1:01:b3:0d:1a:6f:
01:d3:22:01:68:3a:11:69:06:27:db:e4:92:85:25:5c:71:82:
85:80:dd:7f:4e:51:b0:54:07:3e:80:64:26:2e:0f:ed:78:f9:
d8:75:b3:bc:7c:8f:76:2e:b1:a9:0d:61:cc:d4:2a:77:34:4c:
07:a8:4f:2b:93:5c:13:ee:8e:b1:61:1e:36:bc:a8:3e:68:6f:
0b:94:ea:4c:89:25:46:33:9b:cd:5f:11:4e:6a:90:ec:c1:df:
b9:45:b3:a9:08:02:80:90:41:c5:43:23:8a:e0:37:b3:8d:66:
0d:44:c0:32:3d:e4:b6:b9:19:24:bd:25:87:55:e4:8c:a3:2e:
d3:41:79:c0:39:25:91:ab:48:b6:1a:6f:60:04:1b:cd:f5:65:
97:f0:6d:a9:b0:45:d1:6f:b4:61:89:03:f6:81:0e:ab:50:46:
fa:89:58:ff:d9:83:56:ed:30:fb:e8:d3:dc:b7:d8:16:a7:0a:
06:5f:7f:6f:31:9b:cf:06:e3:e3:4f:ed:69:8e:1a:e7:d8:b8:
36:f8:5a:a1:6d:f9:20:cd:d5:5b:0a:c3:d2:36:2b:ff:9f:8a:
63:fd:57:20:cd:2e:b2:7a:a6:f6:a3:e6:56:bd:98:7b:9f:bc:
80:1d:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:49:16 2026 by rpki-client