
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json)
Hash identifier: 8u27NmfnlRUjVXl93wsCvOfSGmIVj+i9Mn/GlV36Cww=
Subject key identifier: A5:52:BA:02:ED:CF:3F:9E:E2:E6:C2:5F:30:36:4C:A5:5B:F2:C0:30
Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Certificate serial: 36A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
Manifest number: 3617
Signing time: Thu 16 Jul 2026 14:23:23 +0000
Manifest this update: Thu 16 Jul 2026 14:23:22 +0000
Manifest next update: Thu 23 Jul 2026 14:23:22 +0000
Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: zQwVaXTXRd+o0srwU6ha3iiQ6e8HH1YnJxk1t5sE9wM=)
2: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: AHP5y6NUQXUIuJTsf7FmuzfZjDZN51hNfIjWN43DXmk=)
3: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: TmhPKiWm/UW/+IU6pO/3fWv32TwJDDiTp7ZwTLIEVr8=)
4: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: dELYOmUkyXR2lffYdfhWu0IaeYl2ykn5uFM1NfTC4i8=)
5: 1A938A72619D11F0B4D0AB3BC4F9AE02.roa (hash: M/q2QKcNvW+wfQnP42dw/G6rqrpqSTWPv6nOQjLIFt4=)
6: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: auSN852h6GKZGfnGT0WksuI9Fj9DYVbRwz9rqojMuu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 14:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13992 (0x36a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Validity
Not Before: Jul 16 14:23:22 2026 GMT
Not After : Jul 23 14:23:22 2026 GMT
Subject: CN=6a58e95b-3e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:7e:39:71:06:10:ea:94:01:17:7d:37:da:
d9:a2:cd:48:d4:d0:2a:30:8d:97:fc:a1:8e:b3:bf:
6e:85:b5:54:72:9c:05:fb:1a:96:f6:bb:10:8c:9f:
cb:9b:88:8d:b2:29:b3:f9:89:09:d6:d1:b4:db:d1:
d0:f4:ee:33:0b:8a:c3:20:10:f4:70:2b:ab:c9:d2:
6d:30:f8:17:22:40:dd:86:83:65:81:5f:fc:21:0b:
8a:9f:43:06:f0:d4:51:b4:1b:b9:3d:24:ef:23:e3:
a7:28:24:f9:f0:af:ab:6a:22:f1:68:a3:4a:d2:15:
a3:15:6b:2f:cc:93:a5:0b:df:0c:9a:94:9f:4b:e5:
4d:41:54:df:f0:54:6f:31:8a:8d:e5:15:c4:36:7f:
43:91:02:29:be:cd:2c:a1:76:d1:59:05:44:89:0d:
7e:9e:0d:cc:c3:00:50:45:79:9a:00:b1:ac:68:10:
f6:c2:06:57:8f:70:3e:07:74:88:d4:85:db:d9:ba:
d6:56:56:4a:2a:2f:07:f7:0a:fb:8a:d2:09:44:cf:
11:54:1a:20:9d:d7:55:3e:23:6a:db:a8:51:a9:45:
b9:18:e3:88:f0:df:2d:b5:75:24:87:ae:3e:4a:d9:
ca:cc:7e:a0:67:d2:34:3d:5c:e2:8e:c9:61:fa:8d:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:52:BA:02:ED:CF:3F:9E:E2:E6:C2:5F:30:36:4C:A5:5B:F2:C0:30
X509v3 Authority Key Identifier:
keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:0b:e7:4a:84:0b:1d:7e:22:b7:84:03:2a:96:d6:53:56:22:
3b:01:81:b8:4d:dc:1a:7d:d6:df:5c:46:2c:f5:7e:35:bd:aa:
25:44:ed:3e:6c:a8:14:e5:4e:2f:a5:2e:95:8a:9d:fe:87:6e:
2d:81:bc:b3:04:2b:57:43:fe:69:ec:ff:f6:4f:32:04:38:8f:
e3:c1:5e:b9:5b:2b:50:6a:e2:b7:f5:af:61:f5:b9:04:db:10:
d4:4c:20:91:ed:01:2c:cc:ff:7d:96:4d:69:4b:8b:e2:d2:e7:
e2:3d:7d:c5:20:e2:fb:11:b9:c7:05:0b:2f:7c:f9:5b:5f:4a:
a7:b8:cc:23:fb:b2:c3:06:41:16:8d:48:ac:55:27:97:3d:c1:
d5:86:fa:42:ff:0f:f1:15:2c:ff:cc:49:46:05:a9:e8:af:bb:
f3:75:82:4a:88:07:e6:96:72:5a:74:36:c2:65:f1:e5:40:54:
db:6f:d5:d4:66:3e:a3:d4:78:9b:93:21:61:c8:53:a1:94:ec:
e0:d0:cd:84:09:40:90:61:74:33:fb:21:ab:4c:48:e6:5b:6a:
81:e3:ad:16:be:c8:7b:b8:15:f9:d4:1c:f4:7d:c7:1b:9c:dc:
4f:26:14:4f:a9:f2:69:d3:dc:de:73:9f:d1:34:f4:a4:62:c9:
4a:8e:2a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:53 2026 by rpki-client