
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json)
Hash identifier: rqnLssHo3GwNK5mxlE8uis84CUtuThoNQwOwFlvk2UU=
Subject key identifier: E1:7B:48:D2:F8:27:B6:8C:9F:EF:0D:73:4E:6C:00:0A:B8:7F:C7:94
Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D
Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
Certificate serial: 05DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
Manifest number: 05D6
Signing time: Tue 18 Aug 2026 23:22:11 +0000
Manifest this update: Tue 18 Aug 2026 23:22:11 +0000
Manifest next update: Tue 25 Aug 2026 23:22:11 +0000
Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: UCjeJxNzK2fv6DE/XrFsUhrTXlhAUnGGQEt2C88pm1M=)
2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: 9No5R6QsEqMvq6ApWij+X8OuZMaVXyEFFrhes/cBm9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl
rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501 (0x5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
Validity
Not Before: Aug 18 23:22:11 2026 GMT
Not After : Aug 25 23:22:11 2026 GMT
Subject: CN=6a84e923-b9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:c2:41:4e:a8:ad:1c:09:83:5c:bf:3e:86:
08:80:53:30:c7:d4:50:ad:32:39:fb:56:8e:d2:c6:
d4:34:f9:07:f0:47:ac:cc:8a:87:66:cc:48:3a:e7:
e5:28:d1:a4:f2:a0:18:e2:39:41:77:76:9d:91:65:
24:30:9e:7b:63:ff:7f:59:5e:8c:9f:b6:5e:a2:f7:
82:4d:46:e2:d3:02:fc:3c:b1:10:09:3e:71:41:b5:
05:cf:43:02:c9:49:9a:10:50:af:93:a3:5b:0c:e4:
50:7e:c4:5a:74:30:f5:a0:a9:1d:a0:ae:57:6d:2a:
44:45:48:0d:70:c3:b0:27:d5:f8:2e:7e:c7:36:11:
31:4e:5e:7d:69:26:98:82:90:42:37:a0:11:30:47:
eb:78:20:77:2d:06:0f:4c:04:fd:42:1f:a1:91:3a:
cf:3a:7d:a6:96:11:80:a5:f4:df:82:98:ae:ae:dd:
91:46:0a:c6:55:bd:12:7f:e3:4e:fc:6b:05:bc:9e:
dc:0d:11:a6:3b:7c:1e:29:43:75:fd:75:40:d4:3e:
25:14:db:fa:73:a1:87:0e:fa:a9:8f:00:90:50:bc:
14:b8:cf:15:c3:93:0c:22:d9:96:57:f5:f1:dd:df:
08:fe:ae:d7:ce:d1:01:db:3a:10:a0:08:1b:47:ca:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7B:48:D2:F8:27:B6:8C:9F:EF:0D:73:4E:6C:00:0A:B8:7F:C7:94
X509v3 Authority Key Identifier:
keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:fa:7e:4d:b3:2f:8d:b2:5f:56:dd:7e:50:22:ae:91:f4:c0:
a3:f9:bb:b3:0d:dd:53:13:5a:20:e8:72:8e:49:7d:97:09:06:
f3:39:a6:ab:e3:41:49:0a:71:18:c8:fd:2b:92:75:fb:d2:dd:
0c:00:ed:0a:21:1a:36:42:f8:d0:86:c8:95:ca:a5:79:bf:5c:
70:45:2a:70:45:95:df:f3:f1:88:6c:57:c1:22:11:1c:db:84:
14:27:c0:a3:77:6c:0c:c3:3d:f9:66:2c:73:2b:e7:3d:b5:a3:
bc:79:83:50:43:39:21:a8:5b:b1:28:3e:a6:4e:cc:c2:de:a5:
fa:66:0f:02:3a:51:ba:f9:b1:87:48:67:53:c3:36:1b:14:0a:
22:9b:ab:fb:9e:9d:64:b9:d7:3c:da:b5:1d:5b:a4:d1:f6:e7:
b3:d4:91:b2:aa:2e:ad:2f:4e:9b:e5:a0:09:3b:d1:16:83:7e:
22:10:79:49:10:72:56:15:a7:65:e0:1d:91:16:18:bd:02:ab:
b9:d5:e9:24:57:bd:c5:d6:b5:24:a3:c5:5a:89:f3:e5:6d:0b:
f9:36:c9:be:f8:27:1c:d5:81:49:a9:00:3b:c4:2b:54:08:ea:
27:67:d6:e7:11:99:9a:55:b4:82:62:8a:f8:de:de:e7:2c:a4:
1f:b1:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:16 2026 by rpki-client