
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
File: Sr9max48bHEsS0dwG_3RV94Djy8.mft (raw, json)
Hash identifier: r1eg0+14bE388v0ZkU5iSq/zejsoc55sNp1UfV0jLSs=
Subject key identifier: 6D:80:77:E1:7E:97:EC:50:1C:BB:47:DB:19:72:00:0A:63:08:C8:4E
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Certificate issuer: /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
Manifest number: 14
Signing time: Mon 01 Jun 2026 09:50:22 +0000
Manifest this update: Mon 01 Jun 2026 09:50:22 +0000
Manifest next update: Mon 08 Jun 2026 09:50:22 +0000
Files and hashes: 1: Sr9max48bHEsS0dwG_3RV94Djy8.crl (hash: Tkk8bzAH5ji2FDPEBNnlFcNso7kg/ZWSleeNIrybG2c=)
2: 2F41CD0643A811F184296E0D94833773.roa (hash: amZ2JPM+XPf34fxY5++TkE/nmH2uk8BWR0qod2Uva1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Validity
Not Before: Jun 1 09:50:22 2026 GMT
Not After : Jun 8 09:50:22 2026 GMT
Subject: CN=6a1d55de-45ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:c6:27:c0:c7:bd:62:b6:6b:cc:5c:3d:0e:
a9:f5:1f:02:cd:14:f2:02:4c:43:95:b3:79:5b:56:
7c:e7:45:a1:9d:4f:d2:29:c3:ce:60:5d:a0:4b:10:
38:12:5e:9a:08:e0:a1:cd:b6:e8:9e:0f:7c:cc:0c:
78:25:40:81:f7:ab:29:16:bb:87:58:64:f4:8f:6c:
90:5e:50:45:0a:10:60:2d:e8:bb:b4:71:71:7d:a9:
35:02:2a:e5:52:12:92:1f:0e:3e:4b:e2:83:d9:cb:
16:04:5b:ca:05:61:e0:6d:04:8e:51:83:83:18:8a:
a4:c2:64:66:77:69:ad:26:1c:35:f8:b0:ed:1d:81:
ae:4d:c1:9e:fa:fe:3c:09:43:0d:2c:4d:be:63:c1:
28:86:b6:bb:c7:80:f8:51:34:2a:10:da:42:b3:60:
98:b1:a1:c2:83:bf:8e:99:73:5d:a1:75:1c:67:5b:
5a:d8:3e:22:fe:25:d0:b1:82:99:13:60:93:d2:ad:
0e:4e:07:0a:0a:ac:6e:5e:44:80:c6:3a:24:6a:ee:
f7:10:24:83:ce:d9:5f:b9:a1:0a:43:73:23:44:41:
f8:c2:9b:63:de:cb:0d:57:26:bc:f4:04:7e:d5:20:
3c:b3:49:2d:db:e5:e8:30:80:b5:08:0a:45:be:2d:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:80:77:E1:7E:97:EC:50:1C:BB:47:DB:19:72:00:0A:63:08:C8:4E
X509v3 Authority Key Identifier:
keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3a:3c:d1:10:66:1a:b2:21:f6:85:ad:4a:64:0c:35:01:43:
59:85:0c:6b:79:db:2b:f0:a3:02:90:9e:08:e0:46:33:ef:4b:
c4:fe:b9:15:fb:55:0b:ce:57:8d:74:74:e7:12:c2:e7:ff:8b:
1d:ec:0c:59:d4:9d:c8:6c:ba:e0:95:69:34:2c:25:b0:a8:35:
a3:65:4d:49:85:3d:b7:bb:de:ee:2d:1c:28:27:20:6d:26:9e:
06:53:0a:a9:c1:99:c9:76:7a:d9:27:73:c2:7b:48:4d:4d:c1:
7c:30:2b:05:ed:44:75:32:02:ed:52:a5:88:bd:4d:93:a1:a7:
21:20:a4:6d:4d:4c:14:7e:91:19:92:6e:a6:ad:e0:30:2e:d9:
59:bf:46:56:06:70:e7:5b:22:65:04:f6:e9:69:6d:20:a1:1f:
7f:f1:cf:c8:7b:e2:63:7b:ae:2a:5e:a1:29:08:95:c6:37:78:
86:8a:9d:5d:4a:39:ef:1e:9f:02:19:07:d5:5d:34:55:b0:40:
c0:0c:dc:b0:e7:d2:7a:63:d6:96:76:64:b5:3d:3b:f5:47:0f:
30:10:93:c3:66:3b:73:d6:42:53:fc:ec:7c:61:9d:2f:04:bf:
57:99:03:0a:e2:39:93:11:6b:9a:04:0b:90:47:7b:af:15:31:
74:26:3d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:41 2026 by rpki-client