
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json)
Hash identifier: 6HjRfn/NejA5dsdJeK1A6mZhpdQovhRa3r1IHicdJXs=
Subject key identifier: 57:0D:23:53:ED:08:77:AB:FA:0C:2F:4A:86:CB:D3:6F:A6:07:35:39
Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Certificate serial: 0CE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
Manifest number: 0CD3
Signing time: Sat 04 Apr 2026 18:13:05 +0000
Manifest this update: Sat 04 Apr 2026 18:13:04 +0000
Manifest next update: Sat 11 Apr 2026 18:13:04 +0000
Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: 4rtV3OXFFSt4v29f+CTzRq9X0HzOgSxY5dutjK3L1YQ=)
2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: kLfSpY3kUgZtSnGVsreS4YqZQYWqK6EsvelahK7CL7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3296 (0xce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Validity
Not Before: Apr 4 18:13:04 2026 GMT
Not After : Apr 11 18:13:04 2026 GMT
Subject: CN=69d154b1-a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:8d:3e:1f:b8:53:28:73:c2:9b:b7:1e:90:
d1:c1:8e:53:f2:92:65:8c:2a:8d:54:2a:db:37:74:
f4:0f:6a:53:f6:ff:82:af:ab:d8:02:b9:17:88:fa:
ac:7d:88:4c:a1:c6:9d:03:d0:b4:0a:b0:25:ba:2a:
7b:6c:08:15:0a:fa:44:a1:c5:9b:7c:b9:ec:da:e7:
d0:d2:8c:42:29:58:52:5b:1c:fb:b9:de:59:9c:20:
65:ac:8d:46:a6:dd:29:26:b8:30:cb:d7:8b:f6:d3:
9c:c2:1f:27:cd:42:0a:59:f1:9c:fd:aa:ca:05:d6:
42:1a:df:52:80:66:98:4e:78:c8:17:79:03:f2:78:
3c:60:24:c1:ed:1f:ca:fa:36:76:3e:6c:6e:d7:40:
89:c9:b8:f6:9f:0f:7b:5a:90:c9:11:3a:74:eb:77:
cc:78:67:1e:5a:0f:67:17:72:44:3e:bf:71:92:a0:
f2:b0:48:50:91:37:6e:92:9d:e2:d6:55:1d:19:30:
b0:2e:7d:0d:52:41:64:19:7c:96:9a:fe:20:81:f0:
f4:1f:1f:37:08:78:2f:cd:42:7d:fb:16:7a:6b:5d:
a8:35:7f:c5:db:bf:b0:7f:3e:d6:2c:49:aa:ad:e7:
28:09:56:c9:e4:fd:f2:79:08:a5:d7:b4:89:c9:d0:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0D:23:53:ED:08:77:AB:FA:0C:2F:4A:86:CB:D3:6F:A6:07:35:39
X509v3 Authority Key Identifier:
keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:16:3d:24:db:05:cf:f1:a4:c3:fb:94:47:3a:c6:e6:89:fc:
59:06:ce:15:5c:ab:70:ba:73:72:ea:9b:ad:d2:e9:ea:b9:a5:
d7:65:c3:62:41:87:78:32:eb:98:17:97:56:6a:cd:3a:63:d5:
d7:7e:54:6a:2e:4e:98:a8:05:d3:ef:63:b3:fe:0c:14:0c:65:
0f:90:e8:6e:1a:7b:30:2f:4a:2e:e0:8d:1a:fa:0c:e6:17:ea:
bf:82:9b:f4:fa:4a:5c:66:58:a8:47:49:16:cc:c6:4f:4d:f5:
42:09:1e:6a:f8:80:b0:eb:8c:91:aa:94:02:b0:07:fe:30:84:
9a:f7:6b:24:b4:6a:db:92:0d:e5:4b:c5:ae:15:38:e9:61:6b:
e6:28:27:92:51:2a:4f:f1:03:57:21:4c:97:0c:2a:09:cc:00:
35:a1:c1:3c:20:46:25:c2:ea:72:78:2b:0b:0d:2d:9c:37:72:
2e:be:56:1e:69:39:4e:a0:8d:2e:20:5b:d8:ae:f7:41:46:26:
db:1e:1c:5b:01:46:12:33:ff:32:76:21:7e:f0:a5:03:2e:ff:
53:91:9a:3f:68:b5:df:1f:2e:a1:42:c7:e7:dd:b7:2c:9a:28:
7a:cf:c6:bf:95:0c:bf:dc:1d:da:06:05:a7:7d:ef:1d:d3:a6:
e5:10:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:05 2026 by rpki-client