
$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json)
Hash identifier: R/mXS6JcDjzPNluARU1nl6AR/jgOGm+Nmm/GmpTuU5k=
Subject key identifier: 77:FC:DE:C8:34:0C:5A:D0:59:B2:F1:A9:08:62:34:7F:6A:8B:17:F8
Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Certificate serial: 08F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
Manifest number: 08F6
Signing time: Sat 04 Apr 2026 20:07:02 +0000
Manifest this update: Sat 04 Apr 2026 20:07:02 +0000
Manifest next update: Sat 11 Apr 2026 20:07:02 +0000
Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: LkU/fgPzkN13JmsT/Zb+sOQAj4kw+8fHd7pyl+l/VEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Validity
Not Before: Apr 4 20:07:02 2026 GMT
Not After : Apr 11 20:07:02 2026 GMT
Subject: CN=69d16f66-ebf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:c2:a7:9b:67:e7:31:c3:e3:ee:fe:7c:eb:
38:77:c0:21:91:bf:ee:d3:f5:d2:64:3d:57:b7:65:
81:95:b2:63:e1:13:59:30:96:a2:ba:00:45:11:1b:
1d:d1:d7:f3:ae:73:ea:fe:29:31:19:37:68:4e:da:
38:ee:41:66:45:ae:7f:9c:01:27:c0:32:e8:de:05:
4e:ea:88:0e:bb:48:2f:cb:cc:f3:2b:23:98:47:7e:
30:63:9f:87:48:67:1e:62:b9:18:22:e4:bb:b2:12:
41:9c:3f:c1:0d:dc:b4:c4:0f:e5:05:34:ab:3a:22:
5d:6a:87:f8:60:fa:f4:e6:62:30:09:7e:0d:4c:93:
7e:5c:f8:fc:99:48:54:24:fc:0f:ca:ed:79:44:86:
d3:8f:e5:e0:5f:80:4d:9c:1f:80:d5:d1:15:b4:e5:
8a:91:45:62:51:79:44:0c:92:3c:c1:8d:1c:54:bd:
53:7c:9f:b8:7f:1b:04:bb:1b:8f:5f:07:25:f8:c3:
0e:b7:d5:5d:57:ca:86:49:20:fa:48:cf:1e:91:30:
23:65:f2:a4:be:cb:e3:ff:31:5d:97:f2:9c:c6:4f:
67:4d:1d:19:52:d7:4c:df:33:8d:23:0b:6d:46:d8:
6d:70:3c:81:e7:a8:f2:da:86:6b:ee:5c:68:ff:b4:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FC:DE:C8:34:0C:5A:D0:59:B2:F1:A9:08:62:34:7F:6A:8B:17:F8
X509v3 Authority Key Identifier:
keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:87:05:c3:ce:a3:18:ba:f1:0e:d0:26:b3:18:2e:06:45:60:
9a:0a:5f:49:6e:4b:63:1e:2a:e3:9e:a8:7b:b8:32:84:bd:21:
86:61:9a:df:49:42:a1:a0:f9:aa:03:fd:59:dd:a2:08:7c:10:
2c:10:9c:41:fe:3f:a0:30:07:48:7a:5f:aa:2d:fe:10:36:46:
24:7c:12:1f:f4:14:a4:1c:f7:cc:12:fa:6b:bd:76:68:7d:c7:
ba:e3:ad:7f:12:1f:8a:6c:dd:52:f8:c7:8c:5f:29:5a:a3:67:
e2:21:cf:4b:f9:8b:bd:b0:cc:0b:94:6c:88:1d:9d:30:43:c5:
e2:43:5f:3f:28:81:a6:ec:63:f1:e3:8c:92:63:47:82:7d:67:
c3:fc:66:19:29:02:9e:d5:5d:3a:fa:47:7f:21:16:b9:b6:d6:
47:7a:7a:f4:59:60:38:5b:36:d7:19:0c:4b:55:4a:c9:a5:77:
c2:69:12:f1:37:94:8f:47:49:cf:23:e1:88:eb:85:ed:1e:0d:
5e:6a:d9:60:4a:67:6a:cf:a7:4f:c9:33:c6:f2:ee:12:d0:33:
6e:bd:d2:d6:69:7d:99:e9:0c:a0:88:b7:f4:b2:9a:9b:9f:68:
2b:6c:07:16:97:f1:b0:80:37:1a:fc:4a:2a:68:25:29:41:4f:
dd:d0:48:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5
RURDNjZGQkEwHhcNMjYwNDA0MjAwNzAyWhcNMjYwNDExMjAwNzAyWjAYMRYwFAYD
VQQDEw02OWQxNmY2Ni1lYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxyTCp5tn5zHD4+7+fOs4d8Ahkb/u0/XSZD1Xt2WBlbJj4RNZMJaiugBFERsd
0dfzrnPq/ikxGTdoTto47kFmRa5/nAEnwDLo3gVO6ogOu0gvy8zzKyOYR34wY5+H
SGceYrkYIuS7shJBnD/BDdy0xA/lBTSrOiJdaof4YPr05mIwCX4NTJN+XPj8mUhU
JPwPyu15RIbTj+XgX4BNnB+A1dEVtOWKkUViUXlEDJI8wY0cVL1TfJ+4fxsEuxuP
Xwcl+MMOt9VdV8qGSSD6SM8ekTAjZfKkvsvj/zFdl/Kcxk9nTR0ZUtdM3zONIwtt
RthtcDyB56jy2oZr7lxo/7TVCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHf83sg0
DFrQWbLxqQhiNH9qixf4MB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3
QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di
N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw
N1c3VGc1QTU5QjZlM0diN28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn4cFw86jGLrxDtAmsxguBkVgmgpfSW5LYx4q456oe7gyhL0hhmGa30lCoaD5
qgP9Wd2iCHwQLBCcQf4/oDAHSHpfqi3+EDZGJHwSH/QUpBz3zBL6a712aH3HuuOt
fxIfimzdUvjHjF8pWqNn4iHPS/mLvbDMC5RsiB2dMEPF4kNfPyiBpuxj8eOMkmNH
gn1nw/xmGSkCntVdOvpHfyEWubbWR3p69FlgOFs21xkMS1VKyaV3wmkS8TeUj0dJ
zyPhiOuF7R4NXmrZYEpnas+nT8kzxvLuEtAzbr3S1ml9mekMoIi39LKam59oK2wH
FpfxsIA3GvxKKmglKUFP3dBITw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:44 2026 by rpki-client