
$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
File: 9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json)
Hash identifier: xZ8BrwbCJJkKJWD+jtEp3DqnC5wWplIvC/XQiGTEPAI=
Subject key identifier: 2C:78:CA:08:0F:1A:4D:AE:E8:0B:4B:28:06:47:5B:1F:8D:15:50:EE
Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
Certificate issuer: /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
Manifest number: 019D
Signing time: Tue 07 Apr 2026 03:42:24 +0000
Manifest this update: Tue 07 Apr 2026 03:42:23 +0000
Manifest next update: Tue 14 Apr 2026 03:42:23 +0000
Files and hashes: 1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: 2Ke13Q5alpIoACnV14tVTb7VxPu8tEY9O3P4BdrGrHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl
rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 03:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911606A, serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Validity
Not Before: Apr 7 03:42:23 2026 GMT
Not After : Apr 14 03:42:23 2026 GMT
Subject: CN=69d47d20-5739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:7a:3a:63:68:c8:71:56:08:f4:f9:4d:d4:
85:b6:36:bd:4c:59:6d:09:f2:07:47:1b:22:ca:d9:
ea:f9:cd:da:f7:ae:a7:28:e1:64:f1:59:dc:86:8e:
f7:4f:93:2e:0c:bb:f9:ca:71:20:17:e6:5e:53:aa:
c1:c6:75:23:82:eb:ef:7e:8a:f5:38:ce:86:0a:04:
df:b7:d7:96:cd:06:fa:b3:12:b8:2f:57:ac:a6:b2:
5a:8e:2f:48:15:b4:2a:b3:a1:6b:2a:28:db:db:bd:
13:59:2c:ae:b7:e7:c7:0a:f2:82:9e:ea:17:b6:d5:
66:0d:d1:aa:85:c9:ab:7b:a6:44:72:c1:a1:d9:9f:
a3:62:80:47:fb:bd:85:ef:07:94:37:9b:dc:31:e1:
cb:9a:55:14:8d:1a:db:06:7c:38:4f:3c:72:09:62:
27:c6:a5:88:14:16:06:89:6c:23:84:27:12:22:99:
50:77:a2:f6:06:7f:f1:83:f9:03:55:cf:9c:d5:3c:
88:f3:a2:4e:5b:8f:75:e4:f1:4b:04:5f:2f:22:82:
60:0d:cf:d7:8f:57:3e:a9:15:e4:03:e0:3f:fa:14:
3c:c5:ef:dc:78:85:45:ac:57:c7:11:d3:8d:2a:e6:
5f:b8:e6:39:91:59:13:06:2c:fe:dc:5b:51:b7:fd:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:CA:08:0F:1A:4D:AE:E8:0B:4B:28:06:47:5B:1F:8D:15:50:EE
X509v3 Authority Key Identifier:
keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:8c:a6:e7:5d:3e:b3:32:a7:ee:67:ba:d9:e9:57:bd:9d:a7:
68:e2:72:09:24:39:2c:27:f8:d2:1f:ed:c1:ec:66:69:37:00:
a9:1b:13:2b:bb:98:bf:0b:1a:c7:60:85:6e:e2:89:a8:a3:a9:
7e:1c:47:a1:22:45:ad:be:ec:01:16:f8:03:e6:2b:1c:59:df:
25:69:ca:18:db:97:ad:50:c9:45:5e:8e:0a:7c:82:23:ef:06:
40:21:f2:c2:e3:5e:da:6e:74:94:6c:ea:2e:43:6a:41:4e:5b:
5f:e4:cf:e7:35:a0:cd:70:e4:c4:f5:4e:6c:fd:2b:84:85:a4:
0e:29:9b:7b:0e:69:b7:5d:e3:98:fa:9d:b4:bd:31:4f:4d:fd:
c3:e7:9b:e9:6f:f1:78:71:98:5d:9a:76:cf:89:93:ad:6d:4d:
83:a9:2d:91:80:3a:98:e6:8b:97:5d:1e:85:ac:15:fa:f0:0b:
88:0b:06:ac:45:33:dd:30:42:c4:ab:39:f5:aa:ab:49:97:d3:
7a:62:f2:ff:95:d1:51:6b:0e:01:38:47:f5:b3:a9:b3:56:bc:
92:04:da:5e:9e:47:17:62:f7:70:fd:ec:f5:fd:6f:f5:f7:af:
83:18:eb:07:cd:49:4b:49:3c:43:4a:c7:22:30:c8:5a:4b:04:
10:c1:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:27:24 2026 by rpki-client