
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
File: Sr9max48bHEsS0dwG_3RV94Djy8.mft (raw, json)
Hash identifier: sfL1klXQELu1eISHX17velqGpmZqn7SODo66bbVBgk8=
Subject key identifier: BD:46:4E:71:43:E9:A8:56:64:F7:E7:DD:5B:FC:CF:9C:BB:B5:AA:CC
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Certificate issuer: /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
Manifest number: 2C
Signing time: Fri 17 Jul 2026 10:05:58 +0000
Manifest this update: Fri 17 Jul 2026 10:05:57 +0000
Manifest next update: Fri 24 Jul 2026 10:05:57 +0000
Files and hashes: 1: Sr9max48bHEsS0dwG_3RV94Djy8.crl (hash: YowFrF+zfu98mM+ukMIY0g420jzWU8hChE91aZu8RCA=)
2: 1EC9E19C7AD111F188194D1271A30FBC.roa (hash: MpR0pLa42VtvAVSR7IX6co5ikrGvSIOJh1Z0FQ/Mnw0=)
3: A7EA26127C7511F1A21A554E75A30FBC.roa (hash: BGxj9JZPsci+IfGkHlmqHb1QKouulEgZC6AeVROuOFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Validity
Not Before: Jul 17 10:05:57 2026 GMT
Not After : Jul 24 10:05:57 2026 GMT
Subject: CN=6a59fe86-59df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:87:5d:dc:9e:cb:9c:ce:bb:7a:8e:55:bd:
85:00:cf:e9:30:8c:e6:99:c5:58:e3:35:24:90:49:
24:d0:93:c5:41:b6:6c:33:49:eb:cc:0f:38:43:6e:
4d:65:f6:39:96:94:ac:9d:b6:4c:09:76:54:0c:1d:
30:27:5d:9b:55:af:d8:6d:c9:09:d0:53:92:35:ec:
1a:77:f6:46:ff:f5:76:99:bd:1b:91:c6:a1:da:05:
f0:2f:f0:f1:3d:2f:e5:9f:0f:4d:6c:04:69:1c:9a:
18:b0:cd:3e:2b:30:06:9f:60:18:7c:77:70:53:14:
48:48:23:90:ac:08:b1:67:06:9e:ff:29:93:6a:b5:
a2:72:3f:7a:a2:98:3c:0f:4c:a8:55:3a:f4:97:e6:
0c:53:99:af:41:50:c3:01:fb:80:75:91:c0:49:4b:
ee:ff:0e:92:8b:29:25:24:e1:69:73:03:27:a4:e2:
1c:b4:7e:6f:72:ed:85:0d:45:b2:6b:fd:f5:fc:de:
44:0c:37:a8:95:dd:1a:3c:e1:1e:e8:ea:ce:83:04:
d7:1a:34:4c:ed:56:cc:40:17:12:12:c9:bf:6d:f7:
31:32:0a:e7:f7:c7:a8:20:23:65:71:5e:d3:b0:60:
f1:c6:31:e6:ba:3c:f4:13:ae:1b:3d:39:d5:8a:c3:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:46:4E:71:43:E9:A8:56:64:F7:E7:DD:5B:FC:CF:9C:BB:B5:AA:CC
X509v3 Authority Key Identifier:
keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:09:a6:52:83:17:e6:c1:3c:0e:43:ee:06:0c:72:22:87:81:
9d:ed:24:0f:e5:4b:af:ad:b1:55:d6:5d:27:86:3f:09:f7:8e:
09:73:0e:ab:fd:f4:1d:32:56:8b:3a:ff:b1:a2:29:96:ce:0e:
42:43:86:c0:8f:c7:10:0a:26:6d:b7:39:69:ed:2b:f9:ce:8c:
60:f7:30:74:b3:04:dd:0c:d5:98:42:4b:19:3d:06:58:9c:a6:
21:f5:78:73:45:94:78:15:98:89:56:96:10:ca:06:cc:83:bd:
8b:c4:f1:78:7d:f0:2f:5e:a4:b3:3f:30:a1:92:57:72:b5:d4:
08:08:e7:db:b8:75:f8:0a:62:e2:2d:ff:d2:ab:30:24:b4:b9:
b7:0e:00:52:36:f7:1a:49:38:c4:93:7a:77:54:9c:47:8d:e4:
e8:b8:4c:26:3a:f6:b3:91:3d:c8:d3:ee:d8:b8:c7:df:71:76:
a3:65:9a:b9:65:1b:ba:34:cf:9f:2f:ab:fb:9a:ab:8a:c5:03:
2d:02:0b:20:34:eb:b1:53:1c:32:d0:4c:a0:79:f0:b9:5d:c3:
8d:ba:b3:82:27:62:c9:d0:05:11:69:f5:69:55:a6:ac:b4:ab:
6d:06:38:39:1f:18:47:6d:81:56:a6:d6:c1:3c:b3:7d:da:24:
f8:99:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:42 2026 by rpki-client